last executing test programs: 18.235297306s ago: executing program 3 (id=869): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@enum={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x2e]}}, 0x0, 0x2f}, 0x20) 18.142495844s ago: executing program 3 (id=871): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r1}, 0x10) 17.988066582s ago: executing program 3 (id=873): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000300)="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", 0x10b}], 0x2}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random='\rh\x00 \x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r2}, 0xc) 13.307565229s ago: executing program 0 (id=891): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000340)="269afae1e3b0b9152d54659b36736e03", 0x10}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg$unix(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a40)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) 12.945226927s ago: executing program 0 (id=893): syz_emit_ethernet(0x6e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "c9ae1a", 0x0, 0x6, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@dstopts]}}}}}}}, 0x0) 12.885755304s ago: executing program 0 (id=894): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@enum={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x2e]}}, 0x0, 0x2f}, 0x20) 12.78451029s ago: executing program 0 (id=896): syz_emit_ethernet(0x46, &(0x7f0000000a80)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1900bb", 0x10, 0x2b, 0x0, @remote, @local, {[@hopopts={0x67}], {0x0, 0x0, 0x8}}}}}}, 0x0) 12.613140517s ago: executing program 0 (id=897): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8}, @TCA_FQ_PIE_ALPHA={0x8}]}}]}, 0x44}}, 0x0) 5.382469671s ago: executing program 2 (id=933): socket$netlink(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 5.14035966s ago: executing program 2 (id=934): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4038ae7a, &(0x7f0000000180)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x700}}) 4.89292299s ago: executing program 2 (id=935): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2f, 0xed, 0x91, 0x40, 0x3f0, 0xf7f, 0x2f5c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x84, 0xe8, 0xba, 0x0, [], [{{0x9, 0x5, 0xc, 0x3}}]}}]}}]}}, 0x0) 3.544494264s ago: executing program 4 (id=939): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) 3.315019183s ago: executing program 4 (id=940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x541b, 0x0) 3.235213683s ago: executing program 2 (id=941): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000e40)="bd3119fab037020de607352a978727cdd46a7ad7671829c16bb1339d3f711b7c5da66f48a8b5842dad66eedf75899eb65d733423ca5651013e1db97f5d192e302ac583ccd19e1e8a3e7812af51f0eea31c5e05cec737cc11a38936d67d4c7cd78351177f51dab5ebe8523e54dd8db33ab6214499c610051df74b67669c9b554b25c70c3238ffaa908675df728ef76e7ae5ee938e025ed07603ec4cc86ee67be10ef6087e7ff0017b358ebee016f08b756cfd2645ccdf335d8b62b630939ba724776a5f2caa487586527f2066b2845e52758b6da2ce07de99165195af70ea9659005901a0f28e90b49a0803ab10698ade4c07337535c2600c45b8c497ab6863ad984815f375df57e5940e5322d90d66c84937e9b7f2356a6e16a026b2393670d370759a4567a87fd2a4d0d5857b9e2559a5a0a857b845f0e1495e8d9b574b0f4d1a55ec8d93c148a50c5c4228c653be69a7d728fa497ee129ec4e7b821ce041be389d37efd40b81a9704e5182b9cdca1f2d3312351e9edaa8ac96088c465a953e0ec3e8f26aa17ea3e1913b4d147141d1aef80b3ed959d14fad4ead4de92e10f0faca7acdce7c712ab95a11ff4c72798565f0794d7bc50f5082b52b34a1de7c5609e31e1fcc05fc7dbd73973b5dfc92896f57f5b76fd9df5067eb273f0960560df3dfd00ba068e28812244f700d76da4197bb332245f00112b73659c63dfb854eb8eed1a9881e5c49399b2c6932b540d3464d470cabb6", 0x216, 0x0, 0x0, 0x0) 3.062932944s ago: executing program 4 (id=942): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 2.840795537s ago: executing program 4 (id=943): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r0, 0x80047456, 0x2000000000000001) 2.680454559s ago: executing program 4 (id=944): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="062100000100"}) 2.553259182s ago: executing program 1 (id=945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4038ae7a, &(0x7f0000000180)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x700}}) 2.33970231s ago: executing program 4 (id=946): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)='ns/cgroup\x00') r4 = gettid() syz_open_procfs$namespace(r4, 0x0) r5 = io_uring_setup(0x669, &(0x7f00000003c0)={0x0, 0xde6c, 0x20, 0x3}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000}}) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f00000000c0)={0x2, 0x3, 0x0, {0x0, 0x0, 0xffffffff}}) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x8, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10000d, 0xbf, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x37, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) r10 = dup(r8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x10) write$UHID_INPUT(r10, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) ptrace$ARCH_GET_FS(0x1e, r4, &(0x7f0000000000), 0x1003) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x31, r3, 0x8000000) syz_io_uring_setup(0x7887, &(0x7f0000000300)={0x0, 0x3460, 0x40, 0x3, 0x0, 0x0, r0}, &(0x7f0000000280), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 2.30524247s ago: executing program 2 (id=947): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000a00)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 1.612808537s ago: executing program 1 (id=948): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0x40b942b37d0000) 1.164291723s ago: executing program 1 (id=949): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x80004, 0x0}) 1.16296256s ago: executing program 2 (id=950): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x8, 0x7f, 0x0, 0x0, 0x3, "f06fc539471398450104663ea5b3e92dad434f"}) r5 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000015}, 0x8000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) write$UHID_INPUT(r4, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) open(0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x1) 925.202341ms ago: executing program 1 (id=951): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 736.895138ms ago: executing program 1 (id=952): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r0, 0x80047456, 0x2000000000000001) 605.466572ms ago: executing program 3 (id=877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 469.75058ms ago: executing program 1 (id=953): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xa1, 0x0, 0x20, 0xaf7, 0x101, 0x6717, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4, 0x0, 0x0, 0x4c, 0xb, 0x46}}]}}]}}, 0x0) 422.288613ms ago: executing program 3 (id=954): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="062100000100"}) 163.886241ms ago: executing program 3 (id=955): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000e40)="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", 0x216, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=899): r0 = add_key$user(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x2}, &(0x7f0000000d40)="84", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='C', 0x1, r1) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. [ 56.171333][ T5068] cgroup: Unknown subsys name 'net' [ 56.304291][ T5068] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.680289][ T5068] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.657389][ T5080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.672541][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.681192][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.689798][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.697646][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.704184][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.704962][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.721144][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.729820][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.743988][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.751747][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.761980][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.766652][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.776261][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.776884][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.785189][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.798878][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.810721][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.817846][ T5092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.825868][ T5092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.833110][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.851211][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.861300][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.870423][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.880199][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.889029][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.889571][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.904578][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.911840][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.919964][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.417807][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 62.479225][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 62.490075][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 62.607151][ T5083] chnl_net:caif_netlink_parms(): no params data found [ 62.625115][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 62.696741][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.703897][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.712504][ T5081] bridge_slave_0: entered allmulticast mode [ 62.720353][ T5081] bridge_slave_0: entered promiscuous mode [ 62.770985][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.778387][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.785506][ T5081] bridge_slave_1: entered allmulticast mode [ 62.792501][ T5081] bridge_slave_1: entered promiscuous mode [ 62.812458][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.819804][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.827123][ T5088] bridge_slave_0: entered allmulticast mode [ 62.833837][ T5088] bridge_slave_0: entered promiscuous mode [ 62.853043][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.860428][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.868041][ T5077] bridge_slave_0: entered allmulticast mode [ 62.874787][ T5077] bridge_slave_0: entered promiscuous mode [ 62.912635][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.922021][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.930228][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.937581][ T5088] bridge_slave_1: entered allmulticast mode [ 62.944295][ T5088] bridge_slave_1: entered promiscuous mode [ 62.965166][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.972318][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.979814][ T5077] bridge_slave_1: entered allmulticast mode [ 62.986770][ T5077] bridge_slave_1: entered promiscuous mode [ 63.005737][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.057813][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.084727][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.104398][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.116657][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.146448][ T5081] team0: Port device team_slave_0 added [ 63.182636][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.189933][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.197351][ T5083] bridge_slave_0: entered allmulticast mode [ 63.204056][ T5083] bridge_slave_0: entered promiscuous mode [ 63.214282][ T5081] team0: Port device team_slave_1 added [ 63.230968][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.238172][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.245280][ T5082] bridge_slave_0: entered allmulticast mode [ 63.252354][ T5082] bridge_slave_0: entered promiscuous mode [ 63.277558][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.284724][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.293205][ T5083] bridge_slave_1: entered allmulticast mode [ 63.300177][ T5083] bridge_slave_1: entered promiscuous mode [ 63.329687][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.336954][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.344175][ T5082] bridge_slave_1: entered allmulticast mode [ 63.351252][ T5082] bridge_slave_1: entered promiscuous mode [ 63.362730][ T5088] team0: Port device team_slave_0 added [ 63.373120][ T5088] team0: Port device team_slave_1 added [ 63.382708][ T5077] team0: Port device team_slave_0 added [ 63.390330][ T5077] team0: Port device team_slave_1 added [ 63.453109][ T5083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.466632][ T5083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.477133][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.484163][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.510281][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.565305][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.573113][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.604825][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.634358][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.648328][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.658395][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.665366][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.691669][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.703789][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.710841][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.736800][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.749652][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.757564][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.757650][ T5086] Bluetooth: hci0: command tx timeout [ 63.783649][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.821898][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.829384][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.837222][ T5086] Bluetooth: hci1: command tx timeout [ 63.855409][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.894590][ T5083] team0: Port device team_slave_0 added [ 63.904721][ T5081] hsr_slave_0: entered promiscuous mode [ 63.911319][ T5081] hsr_slave_1: entered promiscuous mode [ 63.917491][ T5080] Bluetooth: hci2: command tx timeout [ 63.920341][ T5086] Bluetooth: hci3: command tx timeout [ 63.946107][ T5082] team0: Port device team_slave_0 added [ 63.958762][ T5088] hsr_slave_0: entered promiscuous mode [ 63.967231][ T5088] hsr_slave_1: entered promiscuous mode [ 63.973364][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.981328][ T5088] Cannot create hsr debugfs directory [ 63.996467][ T5086] Bluetooth: hci4: command tx timeout [ 64.015573][ T5083] team0: Port device team_slave_1 added [ 64.039469][ T5082] team0: Port device team_slave_1 added [ 64.138948][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.146007][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.172730][ T5083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.194858][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.202030][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.228055][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.241037][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.248161][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.274143][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.299407][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.306839][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.333044][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.364245][ T5077] hsr_slave_0: entered promiscuous mode [ 64.370637][ T5077] hsr_slave_1: entered promiscuous mode [ 64.377873][ T5077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.385443][ T5077] Cannot create hsr debugfs directory [ 64.506932][ T5083] hsr_slave_0: entered promiscuous mode [ 64.513628][ T5083] hsr_slave_1: entered promiscuous mode [ 64.520093][ T5083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.528394][ T5083] Cannot create hsr debugfs directory [ 64.558692][ T5082] hsr_slave_0: entered promiscuous mode [ 64.565062][ T5082] hsr_slave_1: entered promiscuous mode [ 64.573862][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.581653][ T5082] Cannot create hsr debugfs directory [ 64.840765][ T5081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.852223][ T5081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.882792][ T5081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.901456][ T5081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.950065][ T5088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.980507][ T5088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.006206][ T5088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.016093][ T5088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.076126][ T5077] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.101938][ T5077] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.112972][ T5077] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.127927][ T5077] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.264079][ T5082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.274731][ T5082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.295060][ T5082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.305108][ T5082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.324717][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.405882][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.419633][ T5083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.429390][ T5083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.445086][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.452395][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.476812][ T5083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.498454][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.505567][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.521362][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.528433][ T5083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.593319][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.609531][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.644833][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.651979][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.672861][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.680047][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.738773][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.812137][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.846797][ T5086] Bluetooth: hci0: command tx timeout [ 65.861790][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.868984][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.883687][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.890795][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.916862][ T5086] Bluetooth: hci1: command tx timeout [ 65.996994][ T5086] Bluetooth: hci3: command tx timeout [ 65.998642][ T5080] Bluetooth: hci2: command tx timeout [ 66.056196][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.076860][ T5080] Bluetooth: hci4: command tx timeout [ 66.149824][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.173077][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.205766][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.212971][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.253777][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.261019][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.278865][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.343220][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.369550][ T5083] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.401550][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.408724][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.439674][ T5081] veth0_vlan: entered promiscuous mode [ 66.455517][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.462631][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.503821][ T5081] veth1_vlan: entered promiscuous mode [ 66.523324][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.643219][ T5088] veth0_vlan: entered promiscuous mode [ 66.711622][ T5088] veth1_vlan: entered promiscuous mode [ 66.742085][ T5081] veth0_macvtap: entered promiscuous mode [ 66.765463][ T5077] veth0_vlan: entered promiscuous mode [ 66.819018][ T5077] veth1_vlan: entered promiscuous mode [ 66.833502][ T5088] veth0_macvtap: entered promiscuous mode [ 66.842949][ T5081] veth1_macvtap: entered promiscuous mode [ 66.895207][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.906028][ T5088] veth1_macvtap: entered promiscuous mode [ 66.921689][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.939664][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.984482][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.002973][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.020710][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.035419][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.049469][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.060407][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.075137][ T5088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.091281][ T5088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.101272][ T5088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.117891][ T5088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.141345][ T5081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.151068][ T5081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.162453][ T5081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.171683][ T5081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.193884][ T5077] veth0_macvtap: entered promiscuous mode [ 67.209929][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.240566][ T5077] veth1_macvtap: entered promiscuous mode [ 67.334876][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.345897][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.357034][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.367867][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.379764][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.411440][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.422278][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.432737][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.444172][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.455411][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.468846][ T5077] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.477688][ T5077] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.486857][ T5077] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.495569][ T5077] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.581209][ T5082] veth0_vlan: entered promiscuous mode [ 67.619189][ T5083] veth0_vlan: entered promiscuous mode [ 67.640867][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.668331][ T5082] veth1_vlan: entered promiscuous mode [ 67.668472][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.686043][ T5083] veth1_vlan: entered promiscuous mode [ 67.725524][ T2466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.744883][ T2466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.765741][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.785675][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.848465][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.856286][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.905522][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.916784][ T5080] Bluetooth: hci0: command tx timeout [ 67.937204][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.940549][ T5082] veth0_macvtap: entered promiscuous mode [ 67.968977][ T5082] veth1_macvtap: entered promiscuous mode [ 67.996581][ T5080] Bluetooth: hci1: command tx timeout [ 67.997996][ T5083] veth0_macvtap: entered promiscuous mode [ 68.003885][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.023305][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.051081][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.063050][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.081934][ T5080] Bluetooth: hci3: command tx timeout [ 68.088450][ T5086] Bluetooth: hci2: command tx timeout [ 68.090123][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.117033][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.131311][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.141834][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.154101][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.161433][ T5086] Bluetooth: hci4: command tx timeout [ 68.207400][ T5083] veth1_macvtap: entered promiscuous mode [ 68.232634][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.275629][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.304158][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.319512][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.330590][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.349609][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 68.353181][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.409409][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.474943][ T5082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.503975][ T5082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.535326][ T5082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.556765][ T5082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.558332][ T5176] Cannot find add_set index 0 as target [ 68.622565][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.647780][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.648270][ T5178] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.668549][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.728620][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.762868][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.785550][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.807109][ T5184] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.807969][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.829653][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.855061][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.980965][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.999443][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.012147][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.032174][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.058329][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.075215][ T5191] xt_TCPMSS: Only works on TCP SYN packets [ 69.077682][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.098839][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.109603][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.121951][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.140708][ T5083] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.164391][ T5083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.186385][ T5083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.204796][ T5083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.299949][ T5197] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.369690][ T5197] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19'. [ 69.474736][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.517299][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.583627][ T5206] netlink: 'syz.0.24': attribute type 1 has an invalid length. [ 69.590062][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.618838][ T5129] Dead loop on virtual device ipvlan1, fix it urgently! [ 69.629911][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.696859][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.754694][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.799790][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.907910][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 69.930440][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 69.940631][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.950655][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.981197][ T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 69.997433][ T5086] Bluetooth: hci0: command tx timeout [ 70.037046][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.076552][ T5086] Bluetooth: hci1: command tx timeout [ 70.120982][ T25] usb 4-1: config 0 descriptor?? [ 70.157107][ T5132] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.158478][ T5086] Bluetooth: hci3: command tx timeout [ 70.164711][ T5080] Bluetooth: hci2: command tx timeout [ 70.237067][ T5080] Bluetooth: hci4: command tx timeout [ 70.372096][ T12] Dead loop on virtual device ipvlan1, fix it urgently! [ 70.372529][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 70.428559][ T12] Dead loop on virtual device ipvlan1, fix it urgently! [ 70.435239][ T5132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 70.441378][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 70.464796][ T5132] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.499572][ T5132] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.574214][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.616154][ T5132] usb 1-1: config 0 descriptor?? [ 70.640173][ T784] Dead loop on virtual device ipvlan1, fix it urgently! [ 70.649040][ T5215] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 71.129438][ T5244] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 71.160470][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.176936][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.180856][ T5132] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 71.220717][ T5132] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 71.297772][ T5132] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 71.326899][ T25] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 71.339136][ T25] hid-generic 0003:0158:0100.0002: unexpected long global item [ 71.377398][ T25] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 71.442683][ T1099] Dead loop on virtual device ipvlan1, fix it urgently! [ 71.484971][ T1099] Dead loop on virtual device ipvlan1, fix it urgently! [ 71.534976][ T5132] usb 1-1: USB disconnect, device number 2 [ 71.581119][ T9] usb 4-1: USB disconnect, device number 2 [ 71.847003][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.855441][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.935172][ T5261] netlink: 76 bytes leftover after parsing attributes in process `syz.1.43'. [ 71.980208][ T5257] kvm: emulating exchange as write [ 72.241382][ T784] Dead loop on virtual device ipvlan1, fix it urgently! [ 72.510878][ T5276] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 72.817651][ T5287] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.51'. [ 72.826835][ T5287] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.51'. [ 73.459645][ T9] Dead loop on virtual device ipvlan1, fix it urgently! [ 73.793830][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 74.944675][ T5333] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 74.951505][ T5333] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.979705][ T5333] vhci_hcd vhci_hcd.0: Device attached [ 75.163739][ T5334] vhci_hcd: connection closed [ 75.166553][ T35] vhci_hcd: stop threads [ 75.207729][ T35] vhci_hcd: release socket [ 75.227835][ T35] vhci_hcd: disconnect device [ 75.266434][ T5131] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 75.274017][ T5131] usb 17-1: enqueue for inactive port 0 [ 75.391487][ T5131] vhci_hcd: vhci_device speed not set [ 75.599391][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 76.157543][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 76.825411][ T5385] netlink: 'syz.2.88': attribute type 29 has an invalid length. [ 76.856612][ T5385] netlink: 'syz.2.88': attribute type 3 has an invalid length. [ 76.885758][ T5385] netlink: 76 bytes leftover after parsing attributes in process `syz.2.88'. [ 76.998743][ T929] cfg80211: failed to load regulatory.db [ 77.956778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.201898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.248358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 79.458555][ T5426] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 80.486546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.496477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 80.505274][ T5443] program syz.4.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.626713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.666581][ T5443] bond0: entered promiscuous mode [ 80.671729][ T5443] bond_slave_0: entered promiscuous mode [ 80.690265][ T5443] bond_slave_1: entered promiscuous mode [ 80.876438][ T5132] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.070411][ T5132] usb 3-1: Using ep0 maxpacket: 16 [ 81.296454][ T5132] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 81.305553][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.322181][ T5132] usb 3-1: Product: syz [ 81.326811][ T5132] usb 3-1: Manufacturer: syz [ 81.331440][ T5132] usb 3-1: SerialNumber: syz [ 81.340403][ T5132] usb 3-1: config 0 descriptor?? [ 81.349479][ T5132] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 82.211173][ T5132] gspca_sn9c2028: read1 error -71 [ 82.233664][ T5132] gspca_sn9c2028: read1 error -71 [ 82.256772][ T5132] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 82.275557][ T5132] usb 3-1: Found UVC 0.00 device syz (0458:7005) [ 82.296000][ T5132] usb 3-1: No valid video chain found. [ 82.354649][ T5132] usb 3-1: USB disconnect, device number 2 [ 82.377401][ T5489] dccp_invalid_packet: P.Data Offset(68) too large [ 83.568184][ T5504] capability: warning: `syz.1.131' uses 32-bit capabilities (legacy support in use) [ 83.726672][ T5510] netlink: 'syz.1.134': attribute type 23 has an invalid length. [ 83.806541][ T5132] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.998475][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 84.506485][ T5086] Bluetooth: hci4: command 0x0405 tx timeout [ 84.782144][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 84.795903][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 84.811143][ T5132] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.824200][ T5132] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.833361][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.845737][ T5132] usb 5-1: config 0 descriptor?? [ 84.854657][ T5502] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.276803][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 86.027560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.063610][ T5132] usbhid 5-1:0.0: can't add hid device: -71 [ 86.076640][ T5132] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 86.099246][ T5132] usb 5-1: USB disconnect, device number 2 [ 86.249497][ T5543] netlink: 'syz.2.147': attribute type 23 has an invalid length. [ 87.110683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.000496][ T5579] xt_TCPMSS: Only works on TCP SYN packets [ 88.159707][ T5583] syz.4.164 uses obsolete (PF_INET,SOCK_PACKET) [ 88.168507][ T5587] netlink: 'syz.3.165': attribute type 11 has an invalid length. [ 89.261299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.363361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.920592][ T5622] 9pnet: Unknown protocol version 9p2000.Ú´>;1èögËÓŸ?öu [ 89.929905][ T5622] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 90.090174][ T5080] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 90.099326][ T5080] Bluetooth: hci3: Injecting HCI hardware error event [ 90.109136][ T5080] Bluetooth: hci3: hardware error 0x00 [ 90.646325][ C0] sched: RT throttling activated [ 90.662712][ T5630] netlink: 52 bytes leftover after parsing attributes in process `syz.1.180'. [ 90.702983][ T5630] netlink: 64 bytes leftover after parsing attributes in process `syz.1.180'. [ 90.751318][ T5630] netlink: 52 bytes leftover after parsing attributes in process `syz.1.180'. [ 91.910492][ T5129] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.187092][ T5129] usb 3-1: Using ep0 maxpacket: 16 [ 92.197902][ T5129] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 92.208571][ T5129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.236803][ T5080] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 92.477598][ T5129] usb 3-1: Product: syz [ 92.482162][ T5129] usb 3-1: Manufacturer: syz [ 92.494075][ T5129] usb 3-1: SerialNumber: syz [ 93.358438][ T5129] usb 3-1: config 0 descriptor?? [ 94.526134][ T5129] usb 3-1: can't set config #0, error -71 [ 94.533684][ T5129] usb 3-1: USB disconnect, device number 3 [ 94.625771][ T5686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.201'. [ 94.741685][ T5689] netlink: 'syz.1.202': attribute type 3 has an invalid length. [ 95.401894][ T5699] netlink: 'syz.2.203': attribute type 4 has an invalid length. [ 95.581829][ T5695] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 95.622911][ T5700] netlink: 'syz.2.203': attribute type 4 has an invalid length. [ 96.456370][ T5729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.213'. [ 96.701101][ T5737] futex_wake_op: syz.4.216 tries to shift op by 35; fix this program [ 96.791695][ T5737] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.355859][ T5752] blktrace: Concurrent blktraces are not allowed on nullb0 [ 98.452641][ T5759] block nbd2: shutting down sockets [ 99.998652][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 100.081971][ T5797] netlink: 224 bytes leftover after parsing attributes in process `syz.4.234'. [ 100.214723][ T5800] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.407240][ T5814] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 100.419879][ T5816] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 100.456412][ T5816] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.241'. [ 100.465666][ T5814] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 100.485377][ T5816] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 100.691617][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'. [ 100.933165][ T5829] netlink: 224 bytes leftover after parsing attributes in process `syz.4.249'. [ 101.907936][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 102.008896][ T29] audit: type=1326 audit(1720013555.844:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.4.259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6131775bd9 code=0x0 [ 102.090330][ T5861] netlink: 168 bytes leftover after parsing attributes in process `syz.1.262'. [ 102.731178][ T5876] smc: adding net device pimreg with user defined pnetid SYZ1 [ 102.750183][ T5876] pimreg: entered allmulticast mode [ 102.795513][ T5881] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.830123][ T5876] pimreg: left allmulticast mode [ 102.906183][ T5876] smc: removing net device pimreg with user defined pnetid SYZ1 [ 103.197278][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 103.330211][ T5899] pim6reg1: entered promiscuous mode [ 103.341952][ T5899] pim6reg1: entered allmulticast mode [ 106.848544][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 106.849487][ T5910] Bluetooth: MGMT ver 1.22 [ 107.011641][ T5917] program syz.0.287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.116544][ T929] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.135597][ T5922] Bluetooth: MGMT ver 1.22 [ 107.324888][ T929] usb 5-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice=a1.c0 [ 107.334081][ T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.342140][ T929] usb 5-1: Product: syz [ 107.346789][ T929] usb 5-1: Manufacturer: syz [ 107.351415][ T929] usb 5-1: SerialNumber: syz [ 107.358466][ T929] usb 5-1: config 0 descriptor?? [ 107.575995][ T929] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in warm state. [ 107.593499][ T929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.603909][ T929] dvbdev: DVB: registering new adapter (AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)) [ 107.613241][ T929] usb 5-1: media controller created [ 107.634324][ T929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.791035][ T5909] Zero length message leads to an empty skb [ 107.802993][ T929] az6027: usb out operation failed. (-71) [ 107.809854][ T929] az6027: usb out operation failed. (-71) [ 107.816112][ T929] stb0899_attach: Driver disabled by Kconfig [ 107.822990][ T929] az6027: no front-end attached [ 107.822990][ T929] [ 107.831024][ T929] az6027: usb out operation failed. (-71) [ 107.850152][ T929] dvb-usb: no frontend was attached by 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' [ 107.861795][ T929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 107.889699][ T929] dvb-usb: schedule remote query interval to 400 msecs. [ 107.898620][ T929] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully initialized and connected. [ 107.913498][ T929] usb 5-1: USB disconnect, device number 3 [ 107.991169][ T929] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully deinitialized and disconnected. [ 108.170006][ T5944] program syz.2.299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.300328][ T5950] dccp_invalid_packet: P.Data Offset(0) too small [ 109.510230][ T5975] pim6reg1: entered promiscuous mode [ 109.515573][ T5975] pim6reg1: entered allmulticast mode [ 111.839495][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 111.956121][ T5987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.963841][ T5987] IPv6: NLM_F_CREATE should be set when creating new route [ 111.980346][ T5987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.987658][ T5987] IPv6: NLM_F_CREATE should be set when creating new route [ 112.216605][ T5208] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.416582][ T5208] usb 5-1: Using ep0 maxpacket: 32 [ 112.431436][ T5208] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 112.444913][ T5208] usb 5-1: config 0 has no interface number 0 [ 112.453212][ T5208] usb 5-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.468457][ T5208] usb 5-1: config 0 interface 155 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.491644][ T5208] usb 5-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 112.506440][ T5208] usb 5-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 112.520537][ T5208] usb 5-1: Product: syz [ 112.524821][ T5208] usb 5-1: Manufacturer: syz [ 112.531341][ T5208] usb 5-1: SerialNumber: syz [ 112.539242][ T5208] usb 5-1: config 0 descriptor?? [ 112.551993][ T5208] ftdi_sio 5-1:0.155: FTDI USB Serial Device converter detected [ 112.571467][ T5208] ftdi_sio ttyUSB0: unknown device type: 0xc561 [ 112.783233][ T5208] usb 5-1: USB disconnect, device number 4 [ 112.804644][ T5208] ftdi_sio 5-1:0.155: device disconnected [ 112.855991][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 113.144770][ T29] audit: type=1326 audit(1720013566.984:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6012 comm="syz.2.329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efefcb75bd9 code=0x0 [ 114.325752][ T6058] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 114.986715][ T5131] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.250314][ T5131] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.463846][ T5131] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 115.499149][ T5131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.567508][ T5131] usb 5-1: config 0 descriptor?? [ 115.711483][ T6078] netlink: 204 bytes leftover after parsing attributes in process `syz.1.356'. [ 115.831872][ T5129] usb 5-1: USB disconnect, device number 5 [ 116.235552][ T6097] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 118.489590][ T6146] Invalid ELF header len 5 [ 118.753161][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.763366][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.772357][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.799756][ T6155] batman_adv: batadv0: Adding interface: macvlan2 [ 118.806274][ T6155] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.852168][ T6155] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 118.879723][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.890991][ T5086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 118.998777][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.543667][ T6159] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 119.613056][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 119.864998][ T6151] chnl_net:caif_netlink_parms(): no params data found [ 119.945271][ T6173] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.954509][ T6173] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.963381][ T6173] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.972084][ T6173] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.062985][ T6173] vxlan0: entered promiscuous mode [ 120.109053][ T6173] vxlan0: entered allmulticast mode [ 120.153930][ T6173] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.163258][ T6173] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.172268][ T6173] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.181176][ T6173] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.524577][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.534638][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.542155][ T6151] bridge_slave_0: entered allmulticast mode [ 120.844510][ T6151] bridge_slave_0: entered promiscuous mode [ 120.926951][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.960534][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.116675][ T5086] Bluetooth: hci5: command tx timeout [ 121.286577][ T6151] bridge_slave_1: entered allmulticast mode [ 121.327845][ T6151] bridge_slave_1: entered promiscuous mode [ 121.465639][ T6151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.511111][ T6151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.624997][ T6151] team0: Port device team_slave_0 added [ 121.668141][ T6151] team0: Port device team_slave_1 added [ 121.828857][ T5208] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.864173][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.873570][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.102141][ T6151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.129350][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.145510][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.176585][ T6151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.236438][ T5208] usb 4-1: Using ep0 maxpacket: 8 [ 122.559836][ T5208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 122.652251][ T5208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 122.696776][ T5208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 122.724475][ T5208] usb 4-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=cd.ba [ 122.741705][ T5208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.758813][ T5208] usb 4-1: Product: syz [ 122.763043][ T5208] usb 4-1: Manufacturer: syz [ 122.783205][ T5208] usb 4-1: SerialNumber: syz [ 122.806190][ T5208] usb 4-1: config 0 descriptor?? [ 122.817868][ T5208] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 122.833361][ T6151] hsr_slave_0: entered promiscuous mode [ 122.883109][ T6151] hsr_slave_1: entered promiscuous mode [ 123.057747][ T6151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.077572][ T5208] usb 4-1: USB disconnect, device number 3 [ 123.196544][ T5086] Bluetooth: hci5: command tx timeout [ 123.552890][ T6151] Cannot create hsr debugfs directory [ 124.433429][ T6151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.602983][ T6151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.780503][ T6151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.016066][ T6151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.355911][ T5086] Bluetooth: hci5: command tx timeout [ 126.194447][ T6273] smc: net device vxcan1 applied user defined pnetid SYZ1 [ 126.240392][ T6151] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.278621][ T6151] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.306261][ T6151] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.366817][ T6151] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.100235][ T6293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.431'. [ 127.226015][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.303975][ T6151] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.377966][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.385068][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.466554][ T5086] Bluetooth: hci5: command tx timeout [ 127.483307][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.491153][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.936542][ T29] audit: type=1326 audit(1720013581.774:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6318 comm="syz.3.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6503175bd9 code=0x0 [ 127.974618][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.572642][ T6151] veth0_vlan: entered promiscuous mode [ 128.601981][ T6151] veth1_vlan: entered promiscuous mode [ 128.811132][ T6151] veth0_macvtap: entered promiscuous mode [ 128.839596][ T6151] veth1_macvtap: entered promiscuous mode [ 128.920652][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.974595][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.003231][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.026104][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.061917][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.093618][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.112106][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.123337][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.135385][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.175045][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.200313][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.249547][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.292357][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.325467][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.342563][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.362841][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.384542][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.412242][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.427732][ T29] audit: type=1326 audit(1720013583.264:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6355 comm="syz.1.456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f223ef75bd9 code=0x0 [ 129.464787][ T6364] (syz.3.458,6364,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "ßÕ~gžœ<+‹€( ™.µ1 1'êƉÇ" or missing value [ 129.466352][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.489740][ T6151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.500381][ T6151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.506273][ T6364] (syz.3.458,6364,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 129.513174][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.539285][ T6151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.550915][ T6151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.575296][ T6151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.598132][ T6151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.702255][ T6366] input: syz0 as /devices/virtual/input/input9 [ 130.710769][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.762381][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.977471][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.030358][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.463251][ T29] audit: type=1326 audit(1720013585.304:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6401 comm="syz.1.473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f223ef75bd9 code=0x0 [ 131.826458][ T5127] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.062053][ T5127] usb 4-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 132.093907][ T5127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.113269][ T6425] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 132.132235][ T5127] ums-cypress 4-1:1.0: USB Mass Storage device detected [ 132.347072][ T6414] netlink: 'syz.3.476': attribute type 12 has an invalid length. [ 132.420235][ T5127] usb 4-1: USB disconnect, device number 4 [ 132.639380][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 133.281005][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.296212][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.746465][ T6454] random: crng reseeded on system resumption [ 135.436567][ T5086] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 135.447694][ T5086] Bluetooth: hci5: Injecting HCI hardware error event [ 135.459308][ T5086] Bluetooth: hci5: hardware error 0x00 [ 135.480639][ T6509] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 136.381647][ T6518] usb usb9: usbfs: process 6518 (syz.4.515) did not claim interface 0 before use [ 136.900903][ T784] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.100128][ T784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 137.318304][ T784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 137.570102][ T784] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.671594][ T784] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.745528][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.788555][ T784] usb 3-1: config 0 descriptor?? [ 137.794285][ T6524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.002335][ T6559] usb usb9: usbfs: process 6559 (syz.1.534) did not claim interface 0 before use [ 138.089860][ T6561] all: renamed from lo (while UP) [ 138.219400][ T784] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 138.236792][ T5086] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 138.249424][ T784] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 138.272720][ T784] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 138.427673][ T6574] team_slave_0: entered promiscuous mode [ 138.433772][ T6574] team_slave_1: entered promiscuous mode [ 138.461141][ T6574] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 138.484193][ T6574] macvlan3: entered promiscuous mode [ 138.499933][ T6574] team0: entered promiscuous mode [ 138.530130][ T6574] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 138.583033][ T6574] syz.4.540 (6574) used greatest stack depth: 17456 bytes left [ 139.038187][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 139.796726][ T6597] overlayfs: failed to decode file handle (len=2, type=251, flags=0, err=-22) [ 139.952407][ T6606] capability: warning: `syz.0.554' uses deprecated v2 capabilities in a way that may be insecure [ 140.137094][ T6613] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.343589][ T6624] input: syz1 as /devices/virtual/input/input11 [ 140.460112][ T784] usb 3-1: USB disconnect, device number 4 [ 140.917365][ T6652] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 141.070865][ T6660] netlink: 'syz.4.577': attribute type 8 has an invalid length. [ 141.138549][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.502157][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 141.511113][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c [ 141.521601][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.529979][ T25] usb 3-1: Product: syz [ 141.534254][ T25] usb 3-1: Manufacturer: syz [ 141.541474][ T25] usb 3-1: SerialNumber: syz [ 141.561349][ T25] usb 3-1: config 0 descriptor?? [ 142.413309][ T6680] syz.4.581 (6680): drop_caches: 2 [ 142.551911][ T25] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware [ 142.645265][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 142.654047][ T25] dib0700: firmware download failed at 7 with -22 [ 142.665122][ T25] usb 3-1: USB disconnect, device number 5 [ 142.700825][ T6689] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.586'. [ 143.116483][ T5086] Bluetooth: hci4: command 0x0405 tx timeout [ 143.477378][ T6697] random: crng reseeded on system resumption [ 144.301292][ T6731] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 145.118043][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.207757][ T6762] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 145.308702][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 145.335163][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 145.365030][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.436776][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.445856][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.504431][ T9] usb 3-1: config 0 descriptor?? [ 145.519075][ T6753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.949172][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 145.980267][ T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 146.010179][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 146.460447][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.629'. [ 146.490561][ T6786] netlink: 108 bytes leftover after parsing attributes in process `syz.0.629'. [ 146.503948][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.629'. [ 147.282145][ T6815] netlink: 'syz.0.638': attribute type 4 has an invalid length. [ 147.308480][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.443610][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.642'. [ 147.462516][ T6819] netlink: 108 bytes leftover after parsing attributes in process `syz.4.642'. [ 147.482827][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.642'. [ 147.529468][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.571322][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.615754][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.635452][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.659679][ T45] usb 2-1: Product: syz [ 147.670860][ T45] usb 2-1: Manufacturer: syz [ 147.681666][ T45] usb 2-1: SerialNumber: syz [ 148.122153][ T9] usb 3-1: USB disconnect, device number 6 [ 148.467914][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 148.616393][ T29] audit: type=1326 audit(1720013602.454:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6856 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefcb75bd9 code=0x7ffc0000 [ 148.690197][ T29] audit: type=1326 audit(1720013602.454:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6856 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7efefcb75bd9 code=0x7ffc0000 [ 148.727684][ T45] cdc_ncm 2-1:1.0: bind() failure [ 148.736588][ T5127] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 148.746446][ T29] audit: type=1326 audit(1720013602.454:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6856 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefcb75bd9 code=0x7ffc0000 [ 148.779418][ T45] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 148.802194][ T45] cdc_ncm 2-1:1.1: bind() failure [ 148.816466][ T29] audit: type=1326 audit(1720013602.454:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6856 comm="syz.2.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefcb75bd9 code=0x7ffc0000 [ 148.941375][ T45] usb 2-1: USB disconnect, device number 2 [ 148.976543][ T5127] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 149.024376][ T5127] usb 1-1: string descriptor 0 read error: -22 [ 149.033334][ T5127] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.070857][ T5127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.086730][ T6854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.097687][ T5127] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 149.359384][ T29] audit: type=1326 audit(1720013603.204:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.3.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6503175bd9 code=0x7ffc0000 [ 149.380720][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.405053][ T6884] misc userio: Invalid payload size [ 149.415941][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 149.444272][ T29] audit: type=1326 audit(1720013603.244:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.3.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f6503175bd9 code=0x7ffc0000 [ 149.465570][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.532267][ T29] audit: type=1326 audit(1720013603.244:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.3.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6503175bd9 code=0x7ffc0000 [ 149.572383][ T29] audit: type=1326 audit(1720013603.244:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.3.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6503175bd9 code=0x7ffc0000 [ 149.613987][ T6890] netlink: 'syz.4.673': attribute type 8 has an invalid length. [ 150.839136][ T29] audit: type=1326 audit(1720013604.464:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6904 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ef75bd9 code=0x7ffc0000 [ 150.944427][ T29] audit: type=1326 audit(1720013604.474:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6904 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f223ef75bd9 code=0x7ffc0000 [ 150.988473][ T6910] warning: `syz.4.681' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.091239][ T6914] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 151.216880][ T6918] netlink: 'syz.4.684': attribute type 3 has an invalid length. [ 151.503406][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 151.688355][ T6936] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 152.000773][ T6946] netlink: 'syz.4.698': attribute type 3 has an invalid length. [ 153.259742][ T5080] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.271309][ T5080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.293487][ T5080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.317107][ T5080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.324997][ T5080] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.332665][ T5080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.483252][ T5127] usb 1-1: USB disconnect, device number 3 [ 153.565890][ T6972] netlink: 'syz.0.710': attribute type 3 has an invalid length. [ 153.644942][ T1056] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.989486][ T1056] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.188056][ T1056] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.305387][ T1056] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.316564][ T784] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 154.477050][ T6957] chnl_net:caif_netlink_parms(): no params data found [ 154.498371][ T784] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 154.560198][ T784] usb 1-1: string descriptor 0 read error: -22 [ 154.583850][ T784] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.597074][ T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.619679][ T6990] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.640544][ T784] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 154.763146][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.771397][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.779045][ T6957] bridge_slave_0: entered allmulticast mode [ 154.786071][ T6957] bridge_slave_0: entered promiscuous mode [ 154.796066][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.807730][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.814947][ T6957] bridge_slave_1: entered allmulticast mode [ 154.822934][ T6957] bridge_slave_1: entered promiscuous mode [ 154.939306][ T6957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.015943][ T6957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.129236][ T1056] bridge_slave_1: left allmulticast mode [ 155.162625][ T1056] bridge_slave_1: left promiscuous mode [ 155.187948][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.276768][ T1056] bridge_slave_0: left allmulticast mode [ 155.288877][ T1056] bridge_slave_0: left promiscuous mode [ 155.311142][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.356729][ T5086] Bluetooth: hci3: command tx timeout [ 156.565408][ T1056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.584356][ T1056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.605015][ T1056] bond0 (unregistering): Released all slaves [ 156.690348][ T6957] team0: Port device team_slave_0 added [ 156.744172][ T6957] team0: Port device team_slave_1 added [ 157.437589][ T5086] Bluetooth: hci3: command tx timeout [ 158.009881][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.030268][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.206389][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 158.206407][ T29] audit: type=1326 audit(1720013612.024:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.4.744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6131775bd9 code=0x0 [ 158.233150][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.299611][ T6957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.354956][ T7067] netlink: 'syz.4.744': attribute type 8 has an invalid length. [ 158.370363][ T7067] netlink: 224 bytes leftover after parsing attributes in process `syz.4.744'. [ 158.402464][ T6957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.429084][ T6957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.454974][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.499972][ T6957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.383371][ T45] IPVS: starting estimator thread 0... [ 159.508206][ T7077] IPVS: using max 20 ests per chain, 48000 per kthread [ 159.518173][ T5086] Bluetooth: hci3: command tx timeout [ 159.622762][ T6957] hsr_slave_0: entered promiscuous mode [ 159.664147][ T6957] hsr_slave_1: entered promiscuous mode [ 159.732304][ T6957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.760945][ T6957] Cannot create hsr debugfs directory [ 159.854129][ T5127] usb 1-1: USB disconnect, device number 4 [ 160.149990][ T7106] xt_HMARK: proto mask must be zero with L3 mode [ 160.366934][ T7110] netlink: 'syz.4.756': attribute type 3 has an invalid length. [ 160.420284][ T7110] netlink: 'syz.4.756': attribute type 4 has an invalid length. [ 160.447346][ T7110] netlink: 'syz.4.756': attribute type 7 has an invalid length. [ 160.481003][ T7110] netlink: 'syz.4.756': attribute type 8 has an invalid length. [ 160.522196][ T7110] netlink: 'syz.4.756': attribute type 7 has an invalid length. [ 160.565088][ T7110] netlink: 198200 bytes leftover after parsing attributes in process `syz.4.756'. [ 161.024724][ T1056] hsr_slave_0: left promiscuous mode [ 161.056555][ T1056] hsr_slave_1: left promiscuous mode [ 161.092444][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.104884][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.122058][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.143671][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.241179][ T1056] veth1_macvtap: left promiscuous mode [ 161.260976][ T1056] veth0_macvtap: left promiscuous mode [ 161.273709][ T1056] veth1_vlan: left promiscuous mode [ 161.293613][ T1056] veth0_vlan: left promiscuous mode [ 161.597770][ T5086] Bluetooth: hci3: command tx timeout [ 161.948062][ T1056] team0 (unregistering): Port device team_slave_1 removed [ 161.988877][ T1056] team0 (unregistering): Port device team_slave_0 removed [ 162.535865][ T7159] xt_HMARK: proto mask must be zero with L3 mode [ 162.946726][ T7171] ptrace attach of "./syz-executor exec"[5082] was attempted by "./syz-executor exec"[7171] [ 163.079778][ T7174] use of bytesused == 0 is deprecated and will be removed in the future, [ 163.122251][ T7174] use the actual size instead. [ 163.317353][ T7187] xt_HMARK: proto mask must be zero with L3 mode [ 163.717477][ T7207] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 163.726927][ T7207] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 164.276702][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 164.481471][ T6957] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.595436][ T6957] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.640725][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 164.689506][ T6957] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.692889][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 164.753183][ T6957] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.764341][ T45] usb 1-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.40 [ 164.778562][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.797858][ T45] usb 1-1: Product: Ц [ 164.803203][ T45] usb 1-1: Manufacturer: 㡘 [ 164.813186][ T45] usb 1-1: SerialNumber: щ [ 164.819020][ T7216] input: syz1 as /devices/virtual/input/input13 [ 165.152267][ T6957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.185804][ T7227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.800'. [ 165.264610][ T6957] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.299139][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.306440][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.320316][ T7227] netlink: 'syz.4.800': attribute type 1 has an invalid length. [ 165.331800][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.800'. [ 165.369362][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.376651][ T5208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.531745][ T6957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.557760][ T5128] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 165.756397][ T5128] usb 3-1: Using ep0 maxpacket: 8 [ 165.788461][ T5128] usb 3-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c [ 165.820836][ T5128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.843094][ T5128] usb 3-1: Product: syz [ 165.853652][ T5128] usb 3-1: Manufacturer: syz [ 165.879604][ T5128] usb 3-1: SerialNumber: syz [ 165.913236][ T5128] usb 3-1: config 0 descriptor?? [ 165.957575][ T6957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.164102][ T6957] veth0_vlan: entered promiscuous mode [ 166.241773][ T6957] veth1_vlan: entered promiscuous mode [ 166.247764][ T5128] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware [ 166.295394][ T5128] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 166.346797][ T5128] dib0700: firmware download failed at 7 with -22 [ 166.399703][ T5128] usb 3-1: USB disconnect, device number 7 [ 166.433791][ T6957] veth0_macvtap: entered promiscuous mode [ 166.482445][ T6957] veth1_macvtap: entered promiscuous mode [ 166.567482][ T45] usbhid 1-1:1.0: can't add hid device: -71 [ 166.575746][ T45] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 166.620044][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.634917][ T45] usb 1-1: USB disconnect, device number 5 [ 166.668858][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.694168][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.730685][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.773610][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.817473][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.844251][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.895907][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.925075][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.022411][ T5208] IPVS: starting estimator thread 0... [ 167.036078][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.166677][ T7283] IPVS: using max 18 ests per chain, 43200 per kthread [ 167.268253][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.585868][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.614286][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.624227][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.646360][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.714169][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.752553][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.795479][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.836607][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.864160][ T6957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.911829][ T6957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.996493][ T6957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.058659][ T6957] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.096587][ T6957] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.139058][ T6957] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.157007][ T6957] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.231594][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.241258][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.810342][ T7307] can0: slcan on ptm0. [ 169.076687][ T7314] dvmrp5: entered allmulticast mode [ 169.167451][ T7320] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.328519][ T7300] can0 (unregistered): slcan off ptm0. [ 169.422019][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.459163][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.593419][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.628589][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 169.631323][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.007789][ T7352] dvmrp5: entered allmulticast mode [ 170.794871][ T7359] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 170.913719][ T7366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.069187][ T7373] can0: slcan on ptm0. [ 171.416967][ T7369] can0 (unregistered): slcan off ptm0. [ 172.014880][ T45] libceph: connect (1)[c::]:6789 error -101 [ 172.035953][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 172.078493][ T7397] ceph: No mds server is up or the cluster is laggy [ 172.093674][ T45] libceph: connect (1)[c::]:6789 error -101 [ 172.123477][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 173.172424][ T7447] netlink: 120 bytes leftover after parsing attributes in process `syz.0.861'. [ 173.624888][ T5128] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.976223][ T5128] usb 1-1: device descriptor read/64, error -71 [ 174.251049][ T5208] libceph: connect (1)[c::]:6789 error -101 [ 174.266820][ T5128] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.326859][ T5208] libceph: mon0 (1)[c::]:6789 connect error [ 174.409800][ T7464] ceph: No mds server is up or the cluster is laggy [ 174.417157][ T5128] usb 1-1: device descriptor read/64, error -71 [ 174.548475][ T5128] usb usb1-port1: attempt power cycle [ 175.796455][ T5128] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.881269][ T5128] usb 1-1: device descriptor read/8, error -71 [ 177.867356][ T29] audit: type=1326 audit(1720013630.654:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7505 comm="syz.4.880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6131775bd9 code=0x0 [ 178.527422][ T5127] libceph: connect (1)[c::]:6789 error -101 [ 178.533587][ T5127] libceph: mon0 (1)[c::]:6789 connect error [ 178.638492][ T5080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.649180][ T5080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.670973][ T5080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.696553][ T7521] ceph: No mds server is up or the cluster is laggy [ 178.812015][ T5080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.821730][ T5080] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 178.829848][ T5080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.038619][ T29] audit: type=1804 audit(1720013632.884:52): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.889" name="/newroot/12/bus/file0" dev="overlay" ino=89 res=1 errno=0 [ 179.059773][ T7542] evm: overlay not supported [ 179.450083][ T7527] chnl_net:caif_netlink_parms(): no params data found [ 179.689456][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.734694][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.742493][ T7527] bridge_slave_0: entered allmulticast mode [ 179.757828][ T7527] bridge_slave_0: entered promiscuous mode [ 179.776700][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.788196][ T5208] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 179.795674][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.795882][ T7527] bridge_slave_1: entered allmulticast mode [ 179.834752][ T7527] bridge_slave_1: entered promiscuous mode [ 179.965852][ T7527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.001473][ T7527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.009711][ T5208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 180.036549][ T5208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 180.061855][ T5208] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.084012][ T5208] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.113585][ T5208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.139234][ T5208] usb 2-1: config 0 descriptor?? [ 180.156265][ T7555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 180.215722][ T9] libceph: connect (1)[c::]:6789 error -101 [ 180.236913][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 180.262964][ T7527] team0: Port device team_slave_0 added [ 180.304070][ T7527] team0: Port device team_slave_1 added [ 180.333156][ T7572] ceph: No mds server is up or the cluster is laggy [ 180.485681][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.513363][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.598448][ T5208] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 180.602794][ T7527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.628493][ T5208] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 180.662195][ T5208] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 180.666820][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.714369][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.766058][ T7527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.797422][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.808489][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.818448][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.836141][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.852972][ T5086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 180.860627][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.918605][ T25] usb 2-1: USB disconnect, device number 3 [ 180.959870][ T5080] Bluetooth: hci1: command tx timeout [ 181.053320][ T7527] hsr_slave_0: entered promiscuous mode [ 181.082967][ T7527] hsr_slave_1: entered promiscuous mode [ 181.115480][ T7527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.135041][ T7527] Cannot create hsr debugfs directory [ 181.202508][ T1040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.300996][ T7599] Bluetooth: MGMT ver 1.22 [ 181.328545][ T1040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.422817][ T1040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.585164][ T1040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.085119][ T7527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.311992][ T7527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.352130][ T5128] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.378745][ T1040] bridge_slave_1: left allmulticast mode [ 182.384440][ T1040] bridge_slave_1: left promiscuous mode [ 182.401332][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.419061][ T1040] bridge_slave_0: left allmulticast mode [ 182.429467][ T1040] bridge_slave_0: left promiscuous mode [ 182.435923][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.566098][ T5128] usb 2-1: config index 0 descriptor too short (expected 146, got 18) [ 182.620342][ T5128] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 182.639806][ T5128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.664415][ T5128] usb 2-1: Product: syz [ 182.672474][ T5128] usb 2-1: Manufacturer: syz [ 182.686936][ T5128] usb 2-1: SerialNumber: syz [ 182.696191][ T5128] usb 2-1: config 0 descriptor?? [ 182.936580][ T5127] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 182.962144][ T5080] Bluetooth: hci5: command tx timeout [ 183.038260][ T5080] Bluetooth: hci1: command tx timeout [ 183.075067][ T1040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.092888][ T1040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.104569][ T1040] bond0 (unregistering): Released all slaves [ 183.125286][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 183.139788][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 183.172301][ T5127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.199655][ T5127] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.200982][ T5128] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 183.223640][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.253428][ T5127] usb 3-1: config 0 descriptor?? [ 183.261427][ T5128] asix 2-1:0.0: probe with driver asix failed with error -61 [ 183.270907][ T7636] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 183.299375][ T7527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.415165][ T7620] syz.1.914[7620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.415346][ T7620] syz.1.914[7620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.443457][ T7527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.483584][ T7582] chnl_net:caif_netlink_parms(): no params data found [ 183.576846][ T5208] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.693308][ T5127] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 183.728113][ T1040] hsr_slave_0: left promiscuous mode [ 183.729192][ T5127] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 183.741538][ T1040] hsr_slave_1: left promiscuous mode [ 183.748310][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.755789][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.784820][ T1040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.794133][ T1040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.795282][ T5208] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 183.823044][ T5127] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 183.831205][ T1040] veth1_macvtap: left promiscuous mode [ 183.846798][ T1040] veth0_macvtap: left promiscuous mode [ 183.856540][ T1040] veth1_vlan: left promiscuous mode [ 183.861902][ T1040] veth0_vlan: left promiscuous mode [ 183.866225][ T5208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.875208][ T5208] usb 5-1: Product: syz [ 183.903432][ T5208] usb 5-1: Manufacturer: syz [ 183.908386][ T5208] usb 5-1: SerialNumber: syz [ 183.928012][ T5208] usb 5-1: config 0 descriptor?? [ 183.961535][ T5208] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 006 [ 184.052945][ T5127] usb 3-1: USB disconnect, device number 8 [ 184.377947][ T5208] (null): failure reading functionality [ 184.407681][ T5208] i2c i2c-1: connected i2c-tiny-usb device [ 184.676957][ T5128] usb 5-1: USB disconnect, device number 6 [ 184.898369][ T1040] team0 (unregistering): Port device team_slave_1 removed [ 184.936620][ T1040] team0 (unregistering): Port device team_slave_0 removed [ 185.039970][ T5080] Bluetooth: hci5: command tx timeout [ 185.116980][ T5080] Bluetooth: hci1: command tx timeout [ 185.484866][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.502032][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.512556][ T5128] usb 2-1: USB disconnect, device number 4 [ 185.529533][ T7582] bridge_slave_0: entered allmulticast mode [ 185.560710][ T7582] bridge_slave_0: entered promiscuous mode [ 185.593400][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.612443][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.628541][ T7672] loop0: detected capacity change from 0 to 7 [ 185.635469][ T7582] bridge_slave_1: entered allmulticast mode [ 185.657098][ T7582] bridge_slave_1: entered promiscuous mode [ 185.669999][ T7672] Dev loop0: unable to read RDB block 7 [ 185.675759][ T7672] loop0: AHDI p1 p2 p3 [ 185.696810][ T7672] loop0: partition table partially beyond EOD, truncated [ 185.703477][ T7670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.922'. [ 185.708345][ T7672] loop0: p1 start 126088156 is beyond EOD, truncated [ 185.720103][ T7672] loop0: p2 start 2749413630 is beyond EOD, truncated [ 185.935615][ T7582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.983900][ T7582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.004625][ T7527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.279432][ T7527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.357293][ T7582] team0: Port device team_slave_0 added [ 186.373838][ T7527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.418413][ T7527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.471388][ T7582] team0: Port device team_slave_1 added [ 186.533801][ T1040] IPVS: stop unused estimator thread 0... [ 186.559467][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 186.565912][ T5080] Bluetooth: hci2: command 0x0406 tx timeout [ 186.632757][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.636794][ T929] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.646375][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.710666][ T7582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.739111][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.771392][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.840414][ T7582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.871745][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 186.890260][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 186.946747][ T929] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.986674][ T929] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.995760][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.063142][ T929] usb 5-1: config 0 descriptor?? [ 187.085874][ T7692] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.116444][ T53] Bluetooth: hci5: command tx timeout [ 187.134926][ T7582] hsr_slave_0: entered promiscuous mode [ 187.157417][ T7582] hsr_slave_1: entered promiscuous mode [ 187.166224][ T7582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.195062][ T7582] Cannot create hsr debugfs directory [ 187.206795][ T53] Bluetooth: hci1: command tx timeout [ 187.539602][ T929] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 187.575134][ T929] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 187.626645][ T929] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 187.933548][ T7527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.947409][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 187.987301][ T929] usb 5-1: USB disconnect, device number 7 [ 188.153632][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 188.175172][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 188.183447][ T7527] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.202018][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=0f7f, bcdDevice=2f.5c [ 188.220182][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.231824][ T9] usb 3-1: config 0 descriptor?? [ 188.261233][ T9] pl2303 3-1:0.0: required endpoints missing [ 188.412990][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.420295][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.441329][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.448616][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.487515][ T5208] usb 3-1: USB disconnect, device number 9 [ 188.584985][ T7527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.676894][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 188.680709][ T7582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.715051][ T7582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.743047][ T7582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.784808][ T7582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.883705][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 188.905085][ T9] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 188.936007][ T9] usb 2-1: config 0 has no interface number 0 [ 188.947554][ T9] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=67.17 [ 188.974791][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.995064][ T9] usb 2-1: Product: syz [ 189.009720][ T9] usb 2-1: Manufacturer: syz [ 189.025562][ T9] usb 2-1: SerialNumber: syz [ 189.044108][ T9] usb 2-1: config 0 descriptor?? [ 189.073159][ T9] flexcop_usb: set interface failed. [ 189.086904][ T9] b2c2_flexcop_usb 2-1:0.4: probe with driver b2c2_flexcop_usb failed with error -22 [ 189.102093][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.134872][ T7527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.191841][ T7582] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.199116][ T53] Bluetooth: hci5: command tx timeout [ 189.269321][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.276569][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.347581][ T9] usb 2-1: USB disconnect, device number 5 [ 189.411176][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.418378][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.611689][ T7527] veth0_vlan: entered promiscuous mode [ 189.669689][ T7527] veth1_vlan: entered promiscuous mode [ 189.781013][ T7527] veth0_macvtap: entered promiscuous mode [ 189.825752][ T7527] veth1_macvtap: entered promiscuous mode [ 189.887020][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.926520][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.967620][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.995185][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.006608][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.017660][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.033176][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.044204][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.054871][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.065465][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.090180][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.170346][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.206418][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.256576][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.291246][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.325598][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.339993][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.356652][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.372797][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.386386][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.409522][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.893888][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.950279][ T7527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.950375][ T7527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.950404][ T7527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.950430][ T7527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.164584][ T7582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.540340][ T7582] veth0_vlan: entered promiscuous mode [ 191.589692][ T7582] veth1_vlan: entered promiscuous mode [ 191.612419][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.612443][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.714800][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.714827][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.818465][ T7582] veth0_macvtap: entered promiscuous mode [ 191.830343][ T7582] veth1_macvtap: entered promiscuous mode [ 191.869520][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.869547][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.869559][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.869573][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.869583][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.869596][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.869607][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.869620][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.869632][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.869644][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.869656][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.869668][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.892145][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.901922][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.901940][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.901947][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.901955][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.901960][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.901968][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.901974][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.901981][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.901988][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.901996][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.902002][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.902009][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.903109][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.938841][ T7582] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.938878][ T7582] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.938903][ T7582] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.938928][ T7582] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.982624][ T29] audit: type=1326 audit(1720013645.814:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7807 comm="syz.2.950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efefcb75bd9 code=0x0 [ 192.284517][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.284541][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.404585][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.404609][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.524089][ T929] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 195.376043][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.376114][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.376472][ T929] usb 2-1: Using ep0 maxpacket: 32 [ 197.385062][ T929] usb 2-1: device descriptor read/all, error -71 [ 199.854114][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 256.367107][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.367169][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.367901][ T11] bridge_slave_1: left allmulticast mode [ 263.367979][ T11] bridge_slave_1: left promiscuous mode [ 263.368158][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.368203][ T5086] Bluetooth: hci4: command 0x0405 tx timeout [ 269.386520][ T5086] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 270.389006][ T11] bridge_slave_0: left allmulticast mode [ 270.389042][ T11] bridge_slave_0: left promiscuous mode [ 270.389235][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.377685][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.389039][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.391608][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.387926][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.369389][ T5086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 288.369778][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.385602][ T5080] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 290.378207][ T5080] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 291.378106][ T5080] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 293.380448][ T5080] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 293.386074][ T5080] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 293.386515][ T5080] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.387124][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.389833][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.366727][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.372943][ T53] Bluetooth: hci5: command tx timeout [ 298.373685][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.379998][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 298.380944][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.366690][ T5086] Bluetooth: hci7: command tx timeout [ 301.356749][ T5086] Bluetooth: hci5: command tx timeout [ 302.366560][ T53] Bluetooth: hci7: command tx timeout [ 304.356583][ T53] Bluetooth: hci5: command tx timeout [ 305.387997][ T5086] Bluetooth: hci7: command tx timeout [ 307.386592][ T5086] Bluetooth: hci3: command tx timeout [ 307.387152][ T5086] Bluetooth: hci5: command tx timeout [ 308.386357][ T5080] Bluetooth: hci7: command tx timeout [ 310.366847][ T5080] Bluetooth: hci3: command tx timeout [ 313.366531][ T5080] Bluetooth: hci3: command tx timeout [ 316.376471][ T5080] Bluetooth: hci3: command tx timeout [ 318.367019][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.367081][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.841293][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 335.376448][ T5080] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 335.380307][ T7877] Bluetooth: hci1: Opcode 0x0c03 failed: -4 [ 358.387953][ T5086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 358.390012][ T5086] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 358.391293][ T5086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.374530][ T53] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 362.382843][ T7886] Bluetooth: hci8: Opcode 0x0c03 failed: -4 [ 362.385301][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.391787][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 364.365760][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.371256][ T11] dvmrp5 (unregistering): left allmulticast mode [ 366.366389][ T5086] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 367.369705][ T5086] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 369.358161][ T5086] Bluetooth: hci6: command tx timeout [ 369.376350][ T7890] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 372.380937][ T53] Bluetooth: hci6: command tx timeout [ 374.376584][ T5086] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 375.362089][ T5086] Bluetooth: hci6: command tx timeout [ 375.379842][ T5080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.366391][ T5080] Bluetooth: hci6: command tx timeout [ 379.367118][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.367179][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.375081][ T7895] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 393.369040][ T5080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.378312][ T5080] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.371314][ T5080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.389693][ T5080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.391490][ T5080] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 395.391883][ T5080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.371112][ T5080] Bluetooth: hci1: command tx timeout [ 404.367095][ T5086] Bluetooth: hci1: command tx timeout [ 406.377627][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 406.390260][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 407.366557][ T5086] Bluetooth: hci1: command tx timeout [ 407.382965][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 407.385334][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 407.386067][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 407.386633][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 410.363356][ T5080] Bluetooth: hci1: command tx timeout [ 411.373315][ T5080] Bluetooth: hci8: command tx timeout [ 414.356504][ T53] Bluetooth: hci8: command tx timeout [ 417.380777][ T5086] Bluetooth: hci8: command tx timeout [ 419.379294][ T5080] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 420.366490][ T5080] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 420.369168][ T5086] Bluetooth: hci8: command tx timeout [ 420.387842][ T5084] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 422.366842][ T7922] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 422.369971][ T7922] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 422.370356][ T7922] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 423.386746][ T7920] Bluetooth: hci5: command 0x0406 tx timeout [ 423.386809][ T7920] Bluetooth: hci7: command 0x0406 tx timeout [ 428.380920][ T5086] Bluetooth: hci9: command tx timeout [ 428.381539][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 431.356683][ T30] INFO: task kworker/1:1:45 blocked for more than 146 seconds. [ 431.356711][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 431.356724][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.356734][ T30] task:kworker/1:1 state:D stack:20888 pid:45 tgid:45 ppid:2 flags:0x00004000 [ 431.356775][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 431.356811][ T30] Call Trace: [ 431.356820][ T30] [ 431.356835][ T30] __schedule+0x1796/0x49d0 [ 431.356878][ T30] ? __pfx___schedule+0x10/0x10 [ 431.356899][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.356921][ T30] ? __pfx_lock_release+0x10/0x10 [ 431.356943][ T30] ? kick_pool+0x45c/0x620 [ 431.356970][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.356996][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 431.357022][ T30] ? schedule+0x90/0x320 [ 431.357040][ T30] schedule+0x14b/0x320 [ 431.357063][ T30] schedule_preempt_disabled+0x13/0x30 [ 431.357082][ T30] __mutex_lock+0x6a4/0xd70 [ 431.357107][ T30] ? __mutex_lock+0x527/0xd70 [ 431.357144][ T30] ? reg_check_chans_work+0x91/0xea0 [ 431.357165][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 431.357204][ T30] reg_check_chans_work+0x91/0xea0 [ 431.357231][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 431.357258][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 431.357290][ T30] ? process_scheduled_works+0x945/0x1830 [ 431.357311][ T30] process_scheduled_works+0xa2c/0x1830 [ 431.357360][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 431.357390][ T30] ? assign_work+0x364/0x3d0 [ 431.357416][ T30] worker_thread+0x86d/0xd50 [ 431.357454][ T30] ? __kthread_parkme+0x169/0x1d0 [ 431.357478][ T30] ? __pfx_worker_thread+0x10/0x10 [ 431.357499][ T30] kthread+0x2f0/0x390 [ 431.357521][ T30] ? __pfx_worker_thread+0x10/0x10 [ 431.357540][ T30] ? __pfx_kthread+0x10/0x10 [ 431.357563][ T30] ret_from_fork+0x4b/0x80 [ 431.357585][ T30] ? __pfx_kthread+0x10/0x10 [ 431.357606][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.357641][ T30] [ 431.357651][ T30] INFO: task kworker/u8:3:51 blocked for more than 146 seconds. [ 431.357664][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 431.357675][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.357684][ T30] task:kworker/u8:3 state:D stack:19640 pid:51 tgid:51 ppid:2 flags:0x00004000 [ 431.357714][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 431.357733][ T30] Call Trace: [ 431.357739][ T30] [ 431.357749][ T30] __schedule+0x1796/0x49d0 [ 431.357784][ T30] ? __pfx___schedule+0x10/0x10 [ 431.357807][ T30] ? __pfx_lock_release+0x10/0x10 [ 431.357826][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 431.357846][ T30] ? kthread_data+0x52/0xd0 [ 431.357861][ T30] ? schedule+0x90/0x320 [ 431.357875][ T30] ? wq_worker_sleeping+0x66/0x240 [ 431.357892][ T30] ? schedule+0x90/0x320 [ 431.357907][ T30] schedule+0x14b/0x320 [ 431.357925][ T30] schedule_preempt_disabled+0x13/0x30 [ 431.357940][ T30] __mutex_lock+0x6a4/0xd70 [ 431.357961][ T30] ? __mutex_lock+0x527/0xd70 [ 431.357980][ T30] ? addrconf_verify_work+0x19/0x30 [ 431.357997][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 431.358011][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.358030][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 431.358056][ T30] ? process_scheduled_works+0x945/0x1830 [ 431.358071][ T30] addrconf_verify_work+0x19/0x30 [ 431.358088][ T30] process_scheduled_works+0xa2c/0x1830 [ 431.358136][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 431.358164][ T30] ? assign_work+0x364/0x3d0 [ 431.358183][ T30] worker_thread+0x86d/0xd50 [ 431.358211][ T30] ? __kthread_parkme+0x169/0x1d0 [ 431.358231][ T30] ? __pfx_worker_thread+0x10/0x10 [ 431.358247][ T30] kthread+0x2f0/0x390 [ 431.358265][ T30] ? __pfx_worker_thread+0x10/0x10 [ 431.358280][ T30] ? __pfx_kthread+0x10/0x10 [ 431.358298][ T30] ret_from_fork+0x4b/0x80 [ 431.358316][ T30] ? __pfx_kthread+0x10/0x10 [ 431.358334][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.358367][ T30] [ 431.358458][ T30] INFO: task kworker/1:4:5127 blocked for more than 146 seconds. [ 431.358470][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 431.358481][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.358488][ T30] task:kworker/1:4 state:D stack:21296 pid:5127 tgid:5127 ppid:2 flags:0x00004000 [ 431.358518][ T30] Workqueue: events switchdev_deferred_process_work [ 431.358536][ T30] Call Trace: [ 431.358542][ T30] [ 431.358552][ T30] __schedule+0x1796/0x49d0 [ 431.358587][ T30] ? __pfx___schedule+0x10/0x10 [ 431.358604][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.358622][ T30] ? __pfx_lock_release+0x10/0x10 [ 431.358641][ T30] ? kick_pool+0x45c/0x620 [ 431.358663][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.358685][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 431.358708][ T30] ? schedule+0x90/0x320 [ 431.358724][ T30] schedule+0x14b/0x320 [ 431.358744][ T30] schedule_preempt_disabled+0x13/0x30 [ 431.358762][ T30] __mutex_lock+0x6a4/0xd70 [ 431.358782][ T30] ? __mutex_lock+0x527/0xd70 [ 431.358799][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 431.358816][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 431.358846][ T30] ? process_scheduled_works+0x945/0x1830 [ 431.358862][ T30] switchdev_deferred_process_work+0xe/0x20 [ 431.358878][ T30] process_scheduled_works+0xa2c/0x1830 [ 431.358919][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 431.358942][ T30] ? assign_work+0x364/0x3d0 [ 431.358963][ T30] worker_thread+0x86d/0xd50 [ 431.358992][ T30] ? __kthread_parkme+0x169/0x1d0 [ 431.359016][ T30] ? __pfx_worker_thread+0x10/0x10 [ 431.359034][ T30] kthread+0x2f0/0x390 [ 431.359055][ T30] ? __pfx_worker_thread+0x10/0x10 [ 431.359073][ T30] ? __pfx_kthread+0x10/0x10 [ 431.359094][ T30] ret_from_fork+0x4b/0x80 [ 431.359123][ T30] ? __pfx_kthread+0x10/0x10 [ 431.359143][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.359179][ T30] [ 431.359189][ T30] INFO: task kworker/0:6:5131 blocked for more than 146 seconds. [ 431.359202][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 431.359213][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.359221][ T30] task:kworker/0:6 state:D stack:21464 pid:5131 tgid:5131 ppid:2 flags:0x00004000 [ 431.359254][ T30] Workqueue: events linkwatch_event [ 431.359276][ T30] Call Trace: [ 431.359283][ T30] [ 431.359295][ T30] __schedule+0x1796/0x49d0 [ 431.359332][ T30] ? __pfx___schedule+0x10/0x10 [ 431.359351][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.359370][ T30] ? __pfx_lock_release+0x10/0x10 [ 431.359388][ T30] ? kick_pool+0x45c/0x620 [ 431.359414][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.359439][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 431.359462][ T30] ? schedule+0x90/0x320 [ 431.359479][ T30] schedule+0x14b/0x320 [ 431.359501][ T30] schedule_preempt_disabled+0x13/0x30 [ 431.359519][ T30] __mutex_lock+0x6a4/0xd70 [ 431.359545][ T30] ? __mutex_lock+0x527/0xd70 [ 431.359568][ T30] ? linkwatch_event+0xe/0x60 [ 431.359590][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 431.359626][ T30] ? process_scheduled_works+0x945/0x1830 [ 431.359644][ T30] linkwatch_event+0xe/0x60 [ 431.359663][ T30] process_scheduled_works+0xa2c/0x1830 [ 431.359711][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 431.359741][ T30] ? assign_work+0x364/0x3d0 [ 431.359763][ T30] worker_thread+0x86d/0xd50 [ 431.359791][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 431.359823][ T30] ? __kthread_parkme+0x169/0x1d0 [ 431.359848][ T30] ? __pfx_worker_thread+0x10/0x10 [ 431.359868][ T30] kthread+0x2f0/0x390 [ 431.359890][ T30] ? __pfx_worker_thread+0x10/0x10 [ 431.359910][ T30] ? __pfx_kthread+0x10/0x10 [ 431.359933][ T30] ret_from_fork+0x4b/0x80 [ 431.359954][ T30] ? __pfx_kthread+0x10/0x10 [ 431.359973][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.360010][ T30] [ 431.360027][ T30] INFO: task syz-executor:7582 blocked for more than 146 seconds. [ 431.360041][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 431.360053][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.360063][ T30] task:syz-executor state:D stack:20288 pid:7582 tgid:7582 ppid:1 flags:0x00004006 [ 431.360096][ T30] Call Trace: [ 431.360104][ T30] [ 431.360124][ T30] __schedule+0x1796/0x49d0 [ 431.360167][ T30] ? __pfx___schedule+0x10/0x10 [ 431.360189][ T30] ? __pfx_lock_release+0x10/0x10 [ 431.360210][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 431.360245][ T30] ? schedule+0x90/0x320 [ 431.360262][ T30] schedule+0x14b/0x320 [ 431.360284][ T30] schedule_preempt_disabled+0x13/0x30 [ 431.360302][ T30] __mutex_lock+0x6a4/0xd70 [ 431.360326][ T30] ? __mutex_lock+0x527/0xd70 [ 431.360348][ T30] ? tun_chr_close+0x3e/0x1b0 [ 431.360373][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 431.360402][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 431.360426][ T30] tun_chr_close+0x3e/0x1b0 [ 431.360448][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 431.360467][ T30] __fput+0x24a/0x8a0 [ 431.360497][ T30] task_work_run+0x24f/0x310 [ 431.360526][ T30] ? __pfx_task_work_run+0x10/0x10 [ 431.360551][ T30] ? do_exit+0xa22/0x27e0 [ 431.360571][ T30] ? kmem_cache_free+0x145/0x350 [ 431.360597][ T30] do_exit+0xa27/0x27e0 [ 431.360626][ T30] ? __pfx_do_exit+0x10/0x10 [ 431.360647][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 431.360675][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.360698][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 431.360716][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 431.360746][ T30] do_group_exit+0x207/0x2c0 [ 431.360768][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.360790][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 431.360814][ T30] get_signal+0x16a1/0x1740 [ 431.360854][ T30] ? __pfx_get_signal+0x10/0x10 [ 431.360877][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 431.360907][ T30] arch_do_signal_or_restart+0x96/0x860 [ 431.360932][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 431.360954][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.360987][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 431.361016][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 431.361042][ T30] do_syscall_64+0x100/0x230 [ 431.361066][ T30] ? clear_bhb_loop+0x35/0x90 [ 431.361093][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.361128][ T30] RIP: 0033:0x7f349c3a7bc5 [ 431.361155][ T30] RSP: 002b:00007fff62a39750 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 431.361177][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f349c3a7bc5 [ 431.361191][ T30] RDX: 00007fff62a39790 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.361203][ T30] RBP: 00007fff62a3981c R08: 0000000000000000 R09: 7fffffffffffffff [ 431.361217][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000062 [ 431.361230][ T30] R13: 0000000000030ab0 R14: 0000000000030ab0 R15: 0000000000000000 [ 431.361261][ T30] [ 431.361282][ T30] [ 431.361282][ T30] Showing all locks held in the system: [ 431.361292][ T30] 5 locks held by kworker/u8:0/11: [ 431.361307][ T30] 3 locks held by kworker/1:0/25: [ 431.361319][ T30] 1 lock held by khungtaskd/30: [ 431.361330][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 431.361390][ T30] 3 locks held by kworker/1:1/45: [ 431.361402][ T30] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 431.361455][ T30] #1: ffffc90000b57d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 431.361508][ T30] #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xea0 [ 431.361561][ T30] 3 locks held by kworker/u8:3/51: [ 431.361573][ T30] #0: ffff88802ae09148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 431.361625][ T30] #1: ffffc90000bb7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 431.361678][ T30] #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 431.361742][ T30] 3 locks held by kworker/u8:7/1056: [ 431.361771][ T30] 2 locks held by getty/4833: [ 431.361782][ T30] #0: ffff88802b04b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 431.361838][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 431.361911][ T30] 3 locks held by syz-executor/5068: [ 431.361923][ T30] 7 locks held by kworker/u9:2/5080: [ 431.361938][ T30] 3 locks held by kworker/1:4/5127: [ 431.361950][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 431.362002][ T30] #1: ffffc900044dfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 431.362054][ T30] #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 431.362107][ T30] 3 locks held by kworker/0:6/5131: [ 431.362124][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 431.362173][ T30] #1: ffffc900048afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 431.362222][ T30] #2: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 431.362272][ T30] 3 locks held by kworker/u8:12/5628: [ 431.362284][ T30] 2 locks held by kworker/u8:13/5667: [ 431.362296][ T30] 1 lock held by syz-executor/6957: [ 431.362308][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 431.362363][ T30] 1 lock held by syz-executor/7527: [ 431.362375][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 431.362426][ T30] 1 lock held by syz-executor/7582: [ 431.362437][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 431.362488][ T30] 6 locks held by syz.4.946/7786: [ 431.362498][ T30] 1 lock held by syz.2.950/7808: [ 431.362510][ T30] 1 lock held by syz-executor/7856: [ 431.362521][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 431.362574][ T30] 1 lock held by syz-executor/7860: [ 431.362586][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 431.362643][ T30] 1 lock held by syz-executor/7863: [ 431.362653][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 431.362712][ T30] 1 lock held by syz-executor/7883: [ 431.362724][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 431.362779][ T30] 1 lock held by syz-executor/7906: [ 431.362791][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 431.362846][ T30] 1 lock held by syz-executor/7912: [ 431.362858][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 431.362914][ T30] 1 lock held by syz-executor/7916: [ 431.362925][ T30] #0: ffffffff8f5d49c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 431.362975][ T30] 2 locks held by syz-executor/7927: [ 431.362985][ T30] [ 431.362991][ T30] ============================================= [ 431.362991][ T30] [ 431.363007][ T30] NMI backtrace for cpu 1 [ 431.363019][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 431.363036][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 431.363045][ T30] Call Trace: [ 431.363052][ T30] [ 431.363060][ T30] dump_stack_lvl+0x241/0x360 [ 431.363086][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.363109][ T30] ? __pfx__printk+0x10/0x10 [ 431.363134][ T30] ? vprintk_emit+0x631/0x770 [ 431.363157][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 431.363183][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 431.363205][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 431.363221][ T30] ? _printk+0xd5/0x120 [ 431.363241][ T30] ? __pfx__printk+0x10/0x10 [ 431.363262][ T30] ? __wake_up_klogd+0xcc/0x110 [ 431.363286][ T30] ? __pfx__printk+0x10/0x10 [ 431.363311][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.363328][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 431.363347][ T30] watchdog+0xfde/0x1020 [ 431.363366][ T30] ? watchdog+0x1ea/0x1020 [ 431.363388][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.363405][ T30] kthread+0x2f0/0x390 [ 431.363423][ T30] ? __pfx_watchdog+0x10/0x10 [ 431.363439][ T30] ? __pfx_kthread+0x10/0x10 [ 431.363456][ T30] ret_from_fork+0x4b/0x80 [ 431.363475][ T30] ? __pfx_kthread+0x10/0x10 [ 431.363495][ T30] ret_from_fork_asm+0x1a/0x30 [ 431.363530][ T30] [ 431.363538][ T30] Sending NMI from CPU 1 to CPUs 0: [ 431.363570][ C0] NMI backtrace for cpu 0 [ 431.363581][ C0] CPU: 0 PID: 5080 Comm: kworker/u9:2 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 431.363598][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 431.363608][ C0] Workqueue: hci3 hci_cmd_sync_work [ 431.363628][ C0] RIP: 0010:validate_chain+0x1d53/0x5900 [ 431.363650][ C0] Code: 85 ed 0f 84 aa 04 00 00 4d 8d 75 10 4c 89 f0 48 c1 e8 03 48 89 44 24 68 42 80 3c 20 00 74 08 4c 89 f7 e8 b0 5c 85 00 49 8b 1e <48> 85 db 0f 84 60 27 00 00 48 83 c3 5c 49 89 df 49 c1 ef 03 43 0f [ 431.363663][ C0] RSP: 0000:ffffc90004086c80 EFLAGS: 00000046 [ 431.363676][ C0] RAX: 1ffffffff281f1b3 RBX: ffffffff92c65648 RCX: dffffc0000000000 [ 431.363689][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffc90004086da0 [ 431.363699][ C0] RBP: ffffc90004086f80 R08: ffffffff92f71587 R09: 1ffffffff25ee2b0 [ 431.363712][ C0] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: dffffc0000000000 [ 431.363724][ C0] R13: ffffffff940f8d88 R14: ffffffff940f8d98 R15: ffffffff940f8d88 [ 431.363736][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 431.363750][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.363761][ C0] CR2: 00007f372af04000 CR3: 0000000023190000 CR4: 00000000003506f0 [ 431.363775][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 431.363784][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 431.363794][ C0] Call Trace: [ 431.363800][ C0] [ 431.363807][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 431.363825][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 431.363842][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 431.363876][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 431.363894][ C0] ? nmi_handle+0x14f/0x5a0 [ 431.363917][ C0] ? nmi_handle+0x2a/0x5a0 [ 431.363940][ C0] ? validate_chain+0x1d53/0x5900 [ 431.363959][ C0] ? default_do_nmi+0x63/0x160 [ 431.363976][ C0] ? exc_nmi+0x123/0x1f0 [ 431.363993][ C0] ? end_repeat_nmi+0xf/0x53 [ 431.364020][ C0] ? validate_chain+0x1d53/0x5900 [ 431.364039][ C0] ? validate_chain+0x1d53/0x5900 [ 431.364059][ C0] ? validate_chain+0x1d53/0x5900 [ 431.364078][ C0] [ 431.364084][ C0] [ 431.364089][ C0] ? __pfx_lockdep_unlock+0x10/0x10 [ 431.364114][ C0] ? __pfx_validate_chain+0x10/0x10 [ 431.364138][ C0] ? __pfx_validate_chain+0x10/0x10 [ 431.364168][ C0] ? mark_lock+0x9a/0x350 [ 431.364186][ C0] __lock_acquire+0x1346/0x1fd0 [ 431.364210][ C0] lock_acquire+0x1ed/0x550 [ 431.364226][ C0] ? update_rq_clock+0x22b/0x8a0 [ 431.364244][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 431.364261][ C0] ? rcu_read_lock_sched_held+0x8d/0x130 [ 431.364279][ C0] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 431.364299][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 431.364319][ C0] ? sched_clock+0x4a/0x70 [ 431.364339][ C0] psi_account_irqtime+0x1b2/0x5d0 [ 431.364360][ C0] ? update_rq_clock+0x22b/0x8a0 [ 431.364376][ C0] ? update_rq_clock+0x22b/0x8a0 [ 431.364392][ C0] update_rq_clock+0x22b/0x8a0 [ 431.364410][ C0] try_to_wake_up+0x86b/0x1470 [ 431.364432][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 431.364454][ C0] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 431.364476][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 431.364501][ C0] ep_autoremove_wake_function+0x39/0x120 [ 431.364524][ C0] __wake_up_common_lock+0x130/0x1e0 [ 431.364544][ C0] ep_poll_callback+0x6c3/0xb50 [ 431.364567][ C0] ? __pfx_ep_poll_callback+0x10/0x10 [ 431.364591][ C0] __wake_up_common_lock+0x130/0x1e0 [ 431.364611][ C0] sock_def_readable+0x20f/0x5b0 [ 431.364634][ C0] ? sock_def_readable+0xd7/0x5b0 [ 431.364657][ C0] netlink_broadcast_filtered+0xe9a/0x1290 [ 431.364687][ C0] netlink_broadcast+0x39/0x50 [ 431.364708][ C0] kobject_uevent_net_broadcast+0x38f/0x580 [ 431.364728][ C0] kobject_uevent_env+0x57d/0x8e0 [ 431.364748][ C0] device_del+0x7db/0x9b0 [ 431.364776][ C0] ? __pfx_device_del+0x10/0x10 [ 431.364799][ C0] ? __pfx_sco_connect_cfm+0x10/0x10 [ 431.364821][ C0] ? hci_disconnect_sync+0x218/0x3d0 [ 431.364844][ C0] device_unregister+0x20/0xc0 [ 431.364872][ C0] hci_conn_del+0x8c4/0xc40 [ 431.364891][ C0] hci_abort_conn_sync+0x583/0xde0 [ 431.364913][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 431.364931][ C0] ? hci_abort_conn_sync+0x1f6/0xde0 [ 431.364953][ C0] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 431.364978][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 431.364996][ C0] ? abort_conn_sync+0x26/0x270 [ 431.365014][ C0] ? abort_conn_sync+0x204/0x270 [ 431.365033][ C0] ? __pfx_abort_conn_sync+0x10/0x10 [ 431.365053][ C0] hci_cmd_sync_work+0x22b/0x400 [ 431.365073][ C0] ? process_scheduled_works+0x945/0x1830 [ 431.365089][ C0] process_scheduled_works+0xa2c/0x1830 [ 431.365117][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 431.365137][ C0] ? assign_work+0x364/0x3d0 [ 431.365154][ C0] worker_thread+0x86d/0xd50 [ 431.365174][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 431.365199][ C0] ? __kthread_parkme+0x169/0x1d0 [ 431.365217][ C0] ? __pfx_worker_thread+0x10/0x10 [ 431.365233][ C0] kthread+0x2f0/0x390 [ 431.365251][ C0] ? __pfx_worker_thread+0x10/0x10 [ 431.365267][ C0] ? __pfx_kthread+0x10/0x10 [ 431.365285][ C0] ret_from_fork+0x4b/0x80 [ 431.365304][ C0] ? __pfx_kthread+0x10/0x10 [ 431.365322][ C0] ret_from_fork_asm+0x1a/0x30 [ 431.365350][ C0] [ 431.365736][ T5080] Bluetooth: hci9: command tx timeout [ 433.386458][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 433.386476][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 433.386497][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 433.386509][ T30] Call Trace: [ 433.386517][ T30] [ 433.386526][ T30] dump_stack_lvl+0x241/0x360 [ 433.386559][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.386584][ T30] ? __pfx__printk+0x10/0x10 [ 433.386614][ T30] ? vscnprintf+0x5d/0x90 [ 433.386636][ T30] panic+0x349/0x860 [ 433.386661][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 433.386682][ T30] ? __pfx_panic+0x10/0x10 [ 433.386710][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 433.386730][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 433.386749][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 433.386771][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 433.386794][ T30] watchdog+0x101d/0x1020 [ 433.386817][ T30] ? watchdog+0x1ea/0x1020 [ 433.386842][ T30] ? __pfx_watchdog+0x10/0x10 [ 433.386862][ T30] kthread+0x2f0/0x390 [ 433.386884][ T30] ? __pfx_watchdog+0x10/0x10 [ 433.386902][ T30] ? __pfx_kthread+0x10/0x10 [ 433.386930][ T30] ret_from_fork+0x4b/0x80 [ 433.386953][ T30] ? __pfx_kthread+0x10/0x10 [ 433.386974][ T30] ret_from_fork_asm+0x1a/0x30 [ 433.387010][ T30] [ 433.387242][ T30] Kernel Offset: disabled