last executing test programs: 4m48.592794831s ago: executing program 3 (id=39): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000002c0)=@ccm_128={{0x304}, "d9fd3c774cbb7c14", "8d956d828b2124fbf14bcf72ca95575d", "09ff0e6f", "d700a721c4d18b04"}, 0x2e) 4m48.484577608s ago: executing program 3 (id=40): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4008004) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r1, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) 4m48.346990828s ago: executing program 3 (id=42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x8080000, 0x4, 0x44, 0x1, 0x80000003}) 4m48.061952761s ago: executing program 3 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 4m47.784855851s ago: executing program 3 (id=47): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x4302) 4m47.324694316s ago: executing program 3 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 4m46.813360239s ago: executing program 32 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 2m36.327575423s ago: executing program 4 (id=1146): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0xf000, 0x800) 2m36.239780044s ago: executing program 4 (id=1148): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0xffff, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000003c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) 2m36.11271106s ago: executing program 4 (id=1150): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 2m35.959542928s ago: executing program 4 (id=1152): dup(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 2m34.100673397s ago: executing program 4 (id=1164): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, 0x0) r0 = gettid() tkill(r0, 0x16) 2m33.982007894s ago: executing program 4 (id=1165): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) 2m18.798568837s ago: executing program 33 (id=1165): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) 1m17.260043174s ago: executing program 2 (id=1487): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) read(r1, &(0x7f0000000000)=""/89, 0x59) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m16.143456998s ago: executing program 0 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2000000, 0xc, 0xfeff, 0x18e3, 0x200000001, 0x300000000, 0xfffffffffffffffe, 0xce, 0xf}) 1m5.304632796s ago: executing program 2 (id=1487): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) read(r1, &(0x7f0000000000)=""/89, 0x59) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m1.968060917s ago: executing program 0 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2000000, 0xc, 0xfeff, 0x18e3, 0x200000001, 0x300000000, 0xfffffffffffffffe, 0xce, 0xf}) 52.360296565s ago: executing program 2 (id=1487): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) read(r1, &(0x7f0000000000)=""/89, 0x59) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 51.069307406s ago: executing program 0 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2000000, 0xc, 0xfeff, 0x18e3, 0x200000001, 0x300000000, 0xfffffffffffffffe, 0xce, 0xf}) 39.192766199s ago: executing program 2 (id=1487): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) read(r1, &(0x7f0000000000)=""/89, 0x59) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 36.885939706s ago: executing program 0 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2000000, 0xc, 0xfeff, 0x18e3, 0x200000001, 0x300000000, 0xfffffffffffffffe, 0xce, 0xf}) 25.315231196s ago: executing program 2 (id=1487): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) read(r1, &(0x7f0000000000)=""/89, 0x59) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 20.567780435s ago: executing program 0 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2000000, 0xc, 0xfeff, 0x18e3, 0x200000001, 0x300000000, 0xfffffffffffffffe, 0xce, 0xf}) 11.642414281s ago: executing program 2 (id=1487): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) read(r1, &(0x7f0000000000)=""/89, 0x59) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.75539947s ago: executing program 0 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2000000, 0xc, 0xfeff, 0x18e3, 0x200000001, 0x300000000, 0xfffffffffffffffe, 0xce, 0xf}) 2.056844724s ago: executing program 6 (id=2030): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000010001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0xba01}, 0x0) 1.967794429s ago: executing program 1 (id=2031): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x3d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r0, 0xfe, 0xfffffffffffffffc}, 0x10) 1.691043666s ago: executing program 1 (id=2033): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) setregid(0x0, 0x0) 1.609377199s ago: executing program 6 (id=2034): ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ab8000/0x3000)=nil, 0x3000}, 0x100000}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.451337489s ago: executing program 1 (id=2036): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="1f18e395312d0af6d99feefe56956f0f5df95285b182f3d121929030ce63d019", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000080)=""/28, 0x1c, 0x40000000, 0x0, 0x0) 1.349735605s ago: executing program 1 (id=2037): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x35) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r2, 0x35}, &(0x7f0000000080)=0x8) 1.213675188s ago: executing program 6 (id=2039): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f00000000c0)="842a0a6540b74e9503", 0x9) 1.102619912s ago: executing program 5 (id=2040): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3fffff) 1.063096871s ago: executing program 6 (id=2041): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 972.288506ms ago: executing program 5 (id=2042): r0 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 642.012087ms ago: executing program 5 (id=2043): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0) 485.93902ms ago: executing program 5 (id=2044): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f00004f7000/0x3000)=nil, 0x3000, 0xb}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f00004f6000/0x4000)=nil, 0x4000, 0x9}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000080)={0x28, 0x5, r1, r1, 0x3, 0x7ff, 0x37ff}) 350.115324ms ago: executing program 5 (id=2045): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0x4, {}, {}, @raw32}], 0x1c) 349.320991ms ago: executing program 6 (id=2046): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8504"]) 349.032243ms ago: executing program 1 (id=2047): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='`\x00\x00\x00.\x00\rd\nv', 0xa}], 0x1}, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34097772"], 0xa) 229.000846ms ago: executing program 5 (id=2048): ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000b80)={0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000a00), 0x1, 0x0, &(0x7f0000000e40)=[{}], 0x0, 0x0, 0x0}) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 200.622656ms ago: executing program 1 (id=2049): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=2050): r0 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) kernel console output (not intermixed with test programs): ected cc 0x1003 length: 249 > 9 [ 303.792407][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.800715][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.810218][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.058371][T10153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.082312][T10153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.180297][T10187] hsr_slave_0: left promiscuous mode [ 304.208517][T10187] hsr_slave_1: left promiscuous mode [ 304.226301][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.234240][T10187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.257084][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.264647][T10187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.347721][T10187] veth1_macvtap: left promiscuous mode [ 304.353339][T10187] veth0_macvtap: left promiscuous mode [ 304.366302][T10187] veth1_vlan: left promiscuous mode [ 304.396555][T10187] veth0_vlan: left promiscuous mode [ 304.939254][ T5952] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 305.100060][ T5952] usb 7-1: Using ep0 maxpacket: 32 [ 305.109222][ T5952] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 305.145763][ T5952] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 305.154418][ T5952] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 305.171037][ T5952] usb 7-1: config 1 has no interface number 0 [ 305.183988][ T5952] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.206990][ T5952] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 305.240444][ T5952] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 305.252432][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.284321][ T5952] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 305.312250][T10187] team0 (unregistering): Port device team_slave_1 removed [ 305.376469][T10187] team0 (unregistering): Port device team_slave_0 removed [ 305.516559][ T5952] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 305.886060][ T5847] Bluetooth: hci1: command tx timeout [ 305.945832][ T5951] usb 7-1: USB disconnect, device number 6 [ 305.953646][ T5951] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 305.999468][T10160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.030127][T10160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.762395][T10241] chnl_net:caif_netlink_parms(): no params data found [ 307.032941][T10187] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.127306][T10187] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.183329][T10241] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.201166][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.212853][T10241] bridge_slave_0: entered allmulticast mode [ 307.228072][T10241] bridge_slave_0: entered promiscuous mode [ 307.265273][T10187] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.288175][T10241] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.295460][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.309023][T10241] bridge_slave_1: entered allmulticast mode [ 307.337599][T10241] bridge_slave_1: entered promiscuous mode [ 307.401714][T10187] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.464365][T10241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.484135][T10241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.543380][T10241] team0: Port device team_slave_0 added [ 307.559576][T10241] team0: Port device team_slave_1 added [ 307.692022][T10241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.700848][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.728752][T10241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.742057][T10241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.749356][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.775929][T10241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.796089][T10187] bridge_slave_1: left allmulticast mode [ 307.801793][T10187] bridge_slave_1: left promiscuous mode [ 307.808669][T10187] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.827509][T10187] bridge_slave_0: left allmulticast mode [ 307.833218][T10187] bridge_slave_0: left promiscuous mode [ 307.845906][T10187] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.965814][ T5847] Bluetooth: hci1: command tx timeout [ 308.202009][T10187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.213649][T10187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.224140][T10187] bond0 (unregistering): Released all slaves [ 308.303031][T10241] hsr_slave_0: entered promiscuous mode [ 308.310196][T10241] hsr_slave_1: entered promiscuous mode [ 308.316740][T10241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.324690][T10241] Cannot create hsr debugfs directory [ 308.686349][T10187] hsr_slave_0: left promiscuous mode [ 308.706600][T10187] hsr_slave_1: left promiscuous mode [ 308.712792][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.748310][T10187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.776729][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.784195][T10187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.820237][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 308.820255][ T30] audit: type=1400 audit(1752147871.074:127): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10393 comm="syz.1.1586" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 308.902524][T10187] veth1_macvtap: left promiscuous mode [ 308.932614][T10187] veth0_macvtap: left promiscuous mode [ 308.948455][T10187] veth1_vlan: left promiscuous mode [ 308.953861][T10187] veth0_vlan: left promiscuous mode [ 309.150228][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.163343][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.198198][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.222977][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.241867][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.970631][T10187] team0 (unregistering): Port device team_slave_1 removed [ 310.048734][ T5847] Bluetooth: hci1: command tx timeout [ 310.071508][T10187] team0 (unregistering): Port device team_slave_0 removed [ 310.354820][T10422] IPVS: Scheduler module ip_vs_sip not found [ 311.325866][ T5847] Bluetooth: hci3: command tx timeout [ 312.126466][ T5847] Bluetooth: hci1: command tx timeout [ 312.153510][T10403] chnl_net:caif_netlink_parms(): no params data found [ 312.658375][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.666043][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.673560][T10403] bridge_slave_0: entered allmulticast mode [ 312.681898][T10403] bridge_slave_0: entered promiscuous mode [ 312.690988][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.698972][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.736179][T10403] bridge_slave_1: entered allmulticast mode [ 312.744191][T10403] bridge_slave_1: entered promiscuous mode [ 312.809685][T10467] netlink: 'syz.5.1613': attribute type 1 has an invalid length. [ 312.957837][T10403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.967461][T10472] netlink: 'syz.1.1616': attribute type 1 has an invalid length. [ 312.972538][T10403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.975221][T10472] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1616'. [ 313.304297][T10241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.353958][T10403] team0: Port device team_slave_0 added [ 313.363962][T10241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.386648][T10241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.405865][ T5847] Bluetooth: hci3: command tx timeout [ 313.414048][T10403] team0: Port device team_slave_1 added [ 313.433568][T10241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.617795][T10403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.634321][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.660265][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.667118][T10403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.694277][T10403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.701434][T10403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.727354][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.742164][T10403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.880493][T10403] hsr_slave_0: entered promiscuous mode [ 313.888527][T10403] hsr_slave_1: entered promiscuous mode [ 313.953899][T10500] vivid-003: disconnect [ 313.974823][T10498] vivid-003: reconnect [ 314.241787][T10241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.289672][T10241] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.310179][T10154] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.317434][T10154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.381542][T10154] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.388834][T10154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.632812][T10403] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.667878][T10403] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.691920][T10403] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.719990][T10403] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.849331][ T5952] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 314.912602][T10403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.944240][T10403] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.964325][T10193] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.971753][T10193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.999544][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.006811][T10193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.027667][T10241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.046010][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 315.064801][ T5952] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 315.084391][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 315.099929][ T5952] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 315.111144][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.122458][ T5952] usb 6-1: Product: syz [ 315.127224][ T5952] usb 6-1: Manufacturer: syz [ 315.132050][ T5952] usb 6-1: SerialNumber: syz [ 315.142460][ T5952] usb 6-1: config 0 descriptor?? [ 315.151917][ T5952] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 315.163105][ T5952] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 315.180171][T10403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.243320][T10241] veth0_vlan: entered promiscuous mode [ 315.270311][T10241] veth1_vlan: entered promiscuous mode [ 315.326822][ T123] block nbd0: Possible stuck request ffff888025247000: control (read@0,1024B). Runtime 210 seconds [ 315.341451][ T123] block nbd0: Possible stuck request ffff8880252471c0: control (read@1024,1024B). Runtime 210 seconds [ 315.352951][ T123] block nbd0: Possible stuck request ffff888025247380: control (read@2048,1024B). Runtime 210 seconds [ 315.364470][ T123] block nbd0: Possible stuck request ffff888025247540: control (read@3072,1024B). Runtime 210 seconds [ 315.395300][T10241] veth0_macvtap: entered promiscuous mode [ 315.407421][T10241] veth1_macvtap: entered promiscuous mode [ 315.434187][T10241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.478422][T10241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.496768][ T5847] Bluetooth: hci3: command tx timeout [ 315.509666][T10241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.523847][T10241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.534631][T10241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.551663][T10520] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 315.571683][T10241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.781267][ T5952] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 315.794045][ T5952] em28xx 6-1:0.0: Config register raw data: 0x15 [ 315.851930][T10154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.868697][T10154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.899093][T10403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.974741][T10154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.992433][ T5952] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 316.000036][T10154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.017707][ T5952] em28xx 6-1:0.0: No AC97 audio processor [ 316.071532][ T5952] usb 6-1: USB disconnect, device number 25 [ 316.088042][ T5952] em28xx 6-1:0.0: Disconnecting em28xx [ 316.100296][ T5952] em28xx 6-1:0.0: Freeing device [ 316.126323][T10403] veth0_vlan: entered promiscuous mode [ 316.155302][T10403] veth1_vlan: entered promiscuous mode [ 316.235480][T10403] veth0_macvtap: entered promiscuous mode [ 316.248558][T10403] veth1_macvtap: entered promiscuous mode [ 316.289564][T10403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.318191][T10403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.401738][T10403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.411053][T10403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.420951][T10403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.429794][T10403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.563836][T10556] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 316.587692][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.602970][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.664378][T10153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.674134][T10153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.018097][T10153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.250775][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.277005][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.336845][T10570] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34 [ 317.518871][T10153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.855782][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.858594][T10153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.875879][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.886278][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.906511][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.915314][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.061537][T10153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.186099][ T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 318.344722][T10153] bridge_slave_1: left allmulticast mode [ 318.351172][T10153] bridge_slave_1: left promiscuous mode [ 318.357110][T10153] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.366413][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.378384][T10153] bridge_slave_0: left allmulticast mode [ 318.384080][T10153] bridge_slave_0: left promiscuous mode [ 318.389930][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 318.397120][T10153] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.415402][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 318.431293][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 318.454093][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 318.472016][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 318.480238][ T9] usb 2-1: Manufacturer: syz [ 318.497422][ T9] usb 2-1: config 0 descriptor?? [ 318.766198][ T9] rc_core: IR keymap rc-hauppauge not found [ 318.772451][ T9] Registered IR keymap rc-empty [ 318.777886][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.796769][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.821517][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 318.838893][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 318.869235][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.899820][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.919342][T10153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.936598][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.945544][T10153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.955950][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.957379][T10153] bond0 (unregistering): Released all slaves [ 318.977599][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.997891][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 318.998630][T10589] chnl_net:caif_netlink_parms(): no params data found [ 319.040808][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 319.068209][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 319.095971][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 319.117767][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 319.150906][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 319.161151][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 319.189789][ T9] usb 2-1: USB disconnect, device number 27 [ 319.267929][T10589] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.275197][T10589] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.283085][T10589] bridge_slave_0: entered allmulticast mode [ 319.292411][T10589] bridge_slave_0: entered promiscuous mode [ 319.303795][T10589] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.315059][T10589] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.322722][T10589] bridge_slave_1: entered allmulticast mode [ 319.330898][T10589] bridge_slave_1: entered promiscuous mode [ 319.343933][T10153] hsr_slave_0: left promiscuous mode [ 319.352246][T10153] hsr_slave_1: left promiscuous mode [ 319.358467][T10153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.366137][T10153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.374351][T10153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.381965][T10153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.404033][T10153] veth1_macvtap: left promiscuous mode [ 319.413737][T10153] veth0_macvtap: left promiscuous mode [ 319.419653][T10153] veth1_vlan: left promiscuous mode [ 319.425061][T10153] veth0_vlan: left promiscuous mode [ 319.976906][ T5847] Bluetooth: hci1: command tx timeout [ 320.180316][T10153] team0 (unregistering): Port device team_slave_1 removed [ 320.264982][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.276198][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.286619][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.295959][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.313491][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.380214][T10153] team0 (unregistering): Port device team_slave_0 removed [ 321.246423][T10589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.292419][T10589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.499986][T10589] team0: Port device team_slave_0 added [ 321.544302][T10589] team0: Port device team_slave_1 added [ 321.744398][T10589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.760617][T10589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.792780][T10589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.845088][T10589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.854273][T10589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.880496][T10589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.994542][T10589] hsr_slave_0: entered promiscuous mode [ 322.001803][T10589] hsr_slave_1: entered promiscuous mode [ 322.008907][T10589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.017110][T10589] Cannot create hsr debugfs directory [ 322.211511][T10153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.378958][ T51] Bluetooth: hci3: command tx timeout [ 322.460763][T10153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.612168][T10153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.689727][T10613] chnl_net:caif_netlink_parms(): no params data found [ 322.725007][T10153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.879413][T10613] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.892179][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.900806][T10613] bridge_slave_0: entered allmulticast mode [ 322.913295][T10613] bridge_slave_0: entered promiscuous mode [ 322.944191][T10613] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.952017][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.959482][T10613] bridge_slave_1: entered allmulticast mode [ 322.971306][T10613] bridge_slave_1: entered promiscuous mode [ 323.072957][T10613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.083433][T10153] bridge_slave_1: left allmulticast mode [ 323.094158][T10153] bridge_slave_1: left promiscuous mode [ 323.101360][T10153] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.111510][T10153] bridge_slave_0: left allmulticast mode [ 323.117704][T10153] bridge_slave_0: left promiscuous mode [ 323.123589][T10153] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.501626][T10153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.515099][T10153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.526100][T10153] bond0 (unregistering): Released all slaves [ 323.555021][T10613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.691952][T10613] team0: Port device team_slave_0 added [ 323.725454][T10613] team0: Port device team_slave_1 added [ 323.731741][T10589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.749459][T10589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.815930][T10589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 323.832558][T10613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.842235][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.870125][T10613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.885372][T10589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 323.909861][T10613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.918358][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.945264][T10613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.974564][T10153] hsr_slave_0: left promiscuous mode [ 323.984537][T10153] hsr_slave_1: left promiscuous mode [ 323.994074][T10153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.004866][T10153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.014811][T10153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.022643][T10153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.043197][T10153] veth1_macvtap: left promiscuous mode [ 324.048890][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 324.049168][T10641] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 324.062445][T10153] veth0_macvtap: left promiscuous mode [ 324.068588][T10153] veth1_vlan: left promiscuous mode [ 324.073910][T10153] veth0_vlan: left promiscuous mode [ 324.450577][ T51] Bluetooth: hci3: command tx timeout [ 324.553585][T10153] team0 (unregistering): Port device team_slave_1 removed [ 324.598850][T10153] team0 (unregistering): Port device team_slave_0 removed [ 324.918614][T10641] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 324.929357][T10641] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 324.948040][T10641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.954290][T10641] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 324.964534][T10641] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 325.390072][T10613] hsr_slave_0: entered promiscuous mode [ 325.407429][T10613] hsr_slave_1: entered promiscuous mode [ 325.576559][T10691] binder: 10688:10691 ioctl c0306201 2000000003c0 returned -14 [ 325.920862][T10589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.135995][ T5847] Bluetooth: hci1: command 0x040f tx timeout [ 326.190427][T10589] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.218738][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.225981][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.250834][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1697'. [ 326.312773][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.320038][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.453056][T10713] netlink: 'syz.5.1699': attribute type 10 has an invalid length. [ 326.461546][T10713] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.1699'. [ 326.815048][T10613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.893676][T10613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.933079][T10613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.964543][T10589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.975318][T10613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 327.006226][ T5847] Bluetooth: hci3: command 0x0419 tx timeout [ 327.075168][T10589] veth0_vlan: entered promiscuous mode [ 327.117570][T10589] veth1_vlan: entered promiscuous mode [ 327.172943][T10739] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1706'. [ 327.232762][T10589] veth0_macvtap: entered promiscuous mode [ 327.287120][T10589] veth1_macvtap: entered promiscuous mode [ 327.310844][T10613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.329600][ T30] audit: type=1326 audit(1752147889.584:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdf18e929 code=0x7ffc0000 [ 327.349830][T10589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.358958][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 327.420920][T10589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.429346][ T30] audit: type=1326 audit(1752147889.614:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdf18e929 code=0x7ffc0000 [ 327.451285][T10589] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.451324][T10589] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.451354][T10589] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.451384][T10589] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.481298][T10613] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.519763][ T30] audit: type=1326 audit(1752147889.614:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fdf18e929 code=0x7ffc0000 [ 327.555680][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 327.567606][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 327.581443][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.586034][ T30] audit: type=1326 audit(1752147889.614:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdf18e929 code=0x7ffc0000 [ 327.588677][T10153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.633412][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 327.634395][ T30] audit: type=1326 audit(1752147889.614:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdf18e929 code=0x7ffc0000 [ 327.652307][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 327.665557][ T30] audit: type=1326 audit(1752147889.614:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f4fdf18e929 code=0x7ffc0000 [ 327.699726][ T30] audit: type=1326 audit(1752147889.614:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdf18e929 code=0x7ffc0000 [ 327.711478][ T5952] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 327.734706][ T30] audit: type=1326 audit(1752147889.614:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdf18e929 code=0x7ffc0000 [ 327.746194][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 327.757674][ T30] audit: type=1326 audit(1752147889.614:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f4fdf18e929 code=0x7ffc0000 [ 327.782382][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 327.811601][ T30] audit: type=1326 audit(1752147889.614:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10742 comm="syz.5.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdf18e929 code=0x7ffc0000 [ 327.821188][T10187] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.840779][T10187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.856564][ T43] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 327.866590][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.881786][ T43] usb 2-1: Product: syz [ 327.886406][ T43] usb 2-1: Manufacturer: syz [ 327.892942][ T43] usb 2-1: SerialNumber: syz [ 327.933898][ T43] usb 2-1: config 0 descriptor?? [ 327.943617][T10735] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 327.956284][ T5952] usb 6-1: Using ep0 maxpacket: 32 [ 327.967668][ T5952] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 327.978171][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.998001][ T5952] usb 6-1: config 0 descriptor?? [ 328.014221][ T43] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input38 [ 328.029854][ T5952] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 328.051993][ T5190] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 328.057109][T10187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.092453][T10187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.122786][ T5190] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 328.146958][ T5190] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 328.171716][ T5190] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 328.188383][T10153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.206495][ T5847] Bluetooth: hci1: command 0x040f tx timeout [ 328.223323][T10153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.291697][T10756] netlink: 408 bytes leftover after parsing attributes in process `syz.6.1712'. [ 328.333170][T10735] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 328.349210][T10756] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1712'. [ 328.365520][ T5923] usb 2-1: USB disconnect, device number 28 [ 328.584047][T10613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.678867][T10613] veth0_vlan: entered promiscuous mode [ 328.694861][T10613] veth1_vlan: entered promiscuous mode [ 328.797367][T10154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.823772][T10613] veth0_macvtap: entered promiscuous mode [ 328.950751][T10766] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.958600][T10766] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.016275][ T5952] gspca_nw80x: reg_w err -71 [ 329.021122][ T5952] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 329.032643][ T5952] usb 6-1: USB disconnect, device number 26 [ 329.086101][ T5847] Bluetooth: hci3: command 0x0419 tx timeout [ 329.135556][T10766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.151951][T10766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.235095][T10766] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.245508][T10766] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.255437][T10766] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.264488][T10766] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.322554][T10154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.364320][T10613] veth1_macvtap: entered promiscuous mode [ 329.434497][T10154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.471120][T10613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.484663][T10613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.494478][T10613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.510095][T10613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.519336][T10613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.529230][T10613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.675115][T10154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.882700][T10774] syz.6.1717 (10774) used greatest stack depth: 17312 bytes left [ 330.296634][T10160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.304503][T10160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.349677][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.359626][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.375309][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.385986][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.393654][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.447661][T10154] bridge_slave_1: left allmulticast mode [ 330.453393][T10154] bridge_slave_1: left promiscuous mode [ 330.477908][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.490171][T10154] bridge_slave_0: left allmulticast mode [ 330.498255][T10154] bridge_slave_0: left promiscuous mode [ 330.504070][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.643977][T10797] program syz.1.1725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.159833][T10154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.169040][ T5847] Bluetooth: hci3: command 0x0419 tx timeout [ 331.199153][T10154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.223021][T10154] bond0 (unregistering): Released all slaves [ 331.255219][T10160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.290588][T10160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.344112][T10805] ALSA: mixer_oss: invalid OSS volume '' [ 331.545837][T10807] serio: Serial port ptm0 [ 331.878686][T10154] hsr_slave_0: left promiscuous mode [ 331.885227][T10154] hsr_slave_1: left promiscuous mode [ 331.894741][T10154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.902306][T10154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.911109][T10154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.919231][T10154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.946792][T10154] veth1_macvtap: left promiscuous mode [ 331.952569][T10154] veth0_macvtap: left promiscuous mode [ 331.958574][T10154] veth1_vlan: left promiscuous mode [ 331.964100][T10154] veth0_vlan: left promiscuous mode [ 332.455910][ T5847] Bluetooth: hci1: command tx timeout [ 332.747498][T10154] team0 (unregistering): Port device team_slave_1 removed [ 332.798392][T10154] team0 (unregistering): Port device team_slave_0 removed [ 333.401221][T10788] chnl_net:caif_netlink_parms(): no params data found [ 333.513872][T10788] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.521773][T10788] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.532448][T10788] bridge_slave_0: entered allmulticast mode [ 333.544226][T10788] bridge_slave_0: entered promiscuous mode [ 333.553316][T10788] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.560637][T10788] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.567953][T10788] bridge_slave_1: entered allmulticast mode [ 333.575225][T10788] bridge_slave_1: entered promiscuous mode [ 333.622898][T10788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.637347][T10788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.685402][T10154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.724414][T10788] team0: Port device team_slave_0 added [ 333.733734][T10788] team0: Port device team_slave_1 added [ 333.784259][T10154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.800645][T10788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.809666][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.836524][T10788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.866642][T10154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.882243][T10788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.892040][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.920243][T10788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.959930][T10154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.015287][T10788] hsr_slave_0: entered promiscuous mode [ 334.022490][T10788] hsr_slave_1: entered promiscuous mode [ 334.028978][T10788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.036718][T10788] Cannot create hsr debugfs directory [ 334.140577][T10835] input: syz1 as /devices/virtual/input/input39 [ 334.525872][ T5847] Bluetooth: hci1: command tx timeout [ 334.660803][T10154] bridge_slave_1: left allmulticast mode [ 334.672652][T10154] bridge_slave_1: left promiscuous mode [ 334.688214][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.715207][T10154] bridge_slave_0: left allmulticast mode [ 334.725825][T10154] bridge_slave_0: left promiscuous mode [ 334.734023][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.813222][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.822435][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.831865][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.843080][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.860824][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.308570][T10154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.321619][T10154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.332549][T10154] bond0 (unregistering): Released all slaves [ 335.425662][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 335.595719][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 335.619076][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 335.654639][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 335.664145][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 335.672534][ T9] usb 6-1: Product: syz [ 335.676416][T10871] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1754'. [ 335.677034][ T9] usb 6-1: Manufacturer: syz [ 335.695133][ T9] usb 6-1: SerialNumber: syz [ 335.703576][ T9] usb 6-1: config 0 descriptor?? [ 335.716052][T10865] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 335.732306][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 335.738455][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 335.818037][T10875] program syz.1.1755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.841379][T10154] hsr_slave_0: left promiscuous mode [ 335.848721][T10154] hsr_slave_1: left promiscuous mode [ 335.854894][T10154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.863346][T10154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.873638][T10154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.881455][T10154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.912283][T10154] veth1_macvtap: left promiscuous mode [ 335.918314][T10154] veth0_macvtap: left promiscuous mode [ 335.924168][T10154] veth1_vlan: left promiscuous mode [ 335.931134][T10154] veth0_vlan: left promiscuous mode [ 336.307001][ T5952] usb 6-1: USB disconnect, device number 27 [ 336.605954][ T51] Bluetooth: hci1: command tx timeout [ 336.807537][T10154] team0 (unregistering): Port device team_slave_1 removed [ 336.904590][T10154] team0 (unregistering): Port device team_slave_0 removed [ 336.934084][ T51] Bluetooth: hci3: command tx timeout [ 337.466978][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 337.636061][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 337.652933][ T9] usb 7-1: config index 0 descriptor too short (expected 6683, got 27) [ 337.653573][T10856] chnl_net:caif_netlink_parms(): no params data found [ 337.671985][ T9] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 337.694862][ T9] usb 7-1: config 0 has no interface number 0 [ 337.711323][ T9] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.763057][ T9] usb 7-1: config 0 interface 85 has no altsetting 0 [ 337.807122][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 337.827342][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.835412][ T9] usb 7-1: Product: syz [ 337.854992][ T9] usb 7-1: Manufacturer: syz [ 337.868012][ T9] usb 7-1: SerialNumber: syz [ 337.882339][ T9] usb 7-1: config 0 descriptor?? [ 338.015272][T10788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.078023][T10788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.098390][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.111490][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.121822][T10856] bridge_slave_0: entered allmulticast mode [ 338.138109][T10856] bridge_slave_0: entered promiscuous mode [ 338.151303][T10788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.165294][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.179301][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.188286][T10856] bridge_slave_1: entered allmulticast mode [ 338.199942][T10856] bridge_slave_1: entered promiscuous mode [ 338.209526][T10788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 338.271162][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.285442][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.350618][T10856] team0: Port device team_slave_0 added [ 338.373795][T10856] team0: Port device team_slave_1 added [ 338.427907][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.434999][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.445789][ T5951] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 338.472682][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.489002][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.496674][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.522116][ T9] appletouch 7-1:0.85: Geyser mode initialized. [ 338.523453][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.541142][ T9] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input40 [ 338.614449][T10856] hsr_slave_0: entered promiscuous mode [ 338.622530][ T5951] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 338.634131][T10856] hsr_slave_1: entered promiscuous mode [ 338.645170][ T5951] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 338.656670][ T5951] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 338.679502][ T5951] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 338.693280][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.696642][ T51] Bluetooth: hci1: command tx timeout [ 338.706317][T10924] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 338.719782][ T5951] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.749998][ T10] usb 7-1: USB disconnect, device number 7 [ 338.793762][ T10] appletouch 7-1:0.85: input: appletouch disconnected [ 338.938464][T10788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.008971][ T51] Bluetooth: hci3: command tx timeout [ 339.058704][T10788] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.096894][T10187] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.104137][T10187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.121002][T10157] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.128341][T10157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.200102][ T5909] usb 2-1: USB disconnect, device number 29 [ 339.308552][T10788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.613607][T10856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 339.626345][T10856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 339.642772][T10856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.683988][T10856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.852546][T10788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.893669][T10963] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1782'. [ 339.998133][T10788] veth0_vlan: entered promiscuous mode [ 340.030206][T10856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.055352][T10788] veth1_vlan: entered promiscuous mode [ 340.055811][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 340.100729][T10856] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.120856][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.128052][T10153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.172162][T10153] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.179409][T10153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.201251][T10788] veth0_macvtap: entered promiscuous mode [ 340.223453][T10788] veth1_macvtap: entered promiscuous mode [ 340.233888][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 340.256302][ T9] usb 6-1: config 0 has no interface number 0 [ 340.278463][T10788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.302488][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 340.312697][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.330497][ T9] usb 6-1: Product: syz [ 340.335876][ T9] usb 6-1: Manufacturer: syz [ 340.341459][ T9] usb 6-1: SerialNumber: syz [ 340.351407][ T9] usb 6-1: config 0 descriptor?? [ 340.356839][T10788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.391796][T10788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.401429][T10788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.419559][T10788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.428709][T10788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.570310][ T9] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 340.606714][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 340.635707][T10157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.636272][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 340.643555][T10157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.663592][ T9] usb 6-1: media controller created [ 340.692648][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.832691][ T9] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 341.053310][T10157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.071625][T10157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.087966][ T51] Bluetooth: hci3: command tx timeout [ 341.397882][T10856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.527681][T10856] veth0_vlan: entered promiscuous mode [ 341.592466][T10856] veth1_vlan: entered promiscuous mode [ 341.680154][T10856] veth0_macvtap: entered promiscuous mode [ 341.707961][T10856] veth1_macvtap: entered promiscuous mode [ 341.851984][T10154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.905940][ T9] usb 6-1: USB disconnect, device number 28 [ 341.935537][T10856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.962075][T10856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.008358][T10856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.044203][T10856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.065686][T10856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.084040][T10856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.269544][T10154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.388174][T10154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.404742][T10157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.414183][T10157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.452052][T10193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.460539][T10193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.490114][T10154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.671927][T10154] bridge_slave_1: left allmulticast mode [ 342.678085][T10154] bridge_slave_1: left promiscuous mode [ 342.685505][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.696427][T10154] bridge_slave_0: left allmulticast mode [ 342.702108][T10154] bridge_slave_0: left promiscuous mode [ 342.708065][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.973232][T10992] loop7: detected capacity change from 0 to 6 [ 343.035260][T10992] Dev loop7: unable to read RDB block 6 [ 343.063308][T10992] loop7: unable to read partition table [ 343.074229][T10992] loop7: partition table beyond EOD, truncated [ 343.085228][T10992] loop_reread_partitions: partition scan of loop7 (ݷU@:B${Wɴ) failed (rc=-5) [ 343.421903][T10154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.447405][T10154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.479212][T10154] bond0 (unregistering): Released all slaves [ 343.495466][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.505986][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.515123][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.524694][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.542783][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.861005][T10154] hsr_slave_0: left promiscuous mode [ 343.882526][T10154] hsr_slave_1: left promiscuous mode [ 343.908452][T10154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.916524][T10154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.934445][T10154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.942185][T10154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.963850][T10154] veth1_macvtap: left promiscuous mode [ 343.972920][T10154] veth0_macvtap: left promiscuous mode [ 343.978726][T10154] veth1_vlan: left promiscuous mode [ 343.984014][T10154] veth0_vlan: left promiscuous mode [ 344.453850][T10154] team0 (unregistering): Port device team_slave_1 removed [ 344.502292][T10154] team0 (unregistering): Port device team_slave_0 removed [ 344.914191][T10998] chnl_net:caif_netlink_parms(): no params data found [ 345.116772][T10998] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.124025][T10998] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.131985][T10998] bridge_slave_0: entered allmulticast mode [ 345.139352][T10998] bridge_slave_0: entered promiscuous mode [ 345.148316][T10998] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.155500][T10998] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.163033][T10998] bridge_slave_1: entered allmulticast mode [ 345.172119][T10998] bridge_slave_1: entered promiscuous mode [ 345.279056][T10998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.319570][T10998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.405957][ T123] block nbd0: Possible stuck request ffff888025247000: control (read@0,1024B). Runtime 240 seconds [ 345.417238][ T123] block nbd0: Possible stuck request ffff8880252471c0: control (read@1024,1024B). Runtime 240 seconds [ 345.436574][ T123] block nbd0: Possible stuck request ffff888025247380: control (read@2048,1024B). Runtime 240 seconds [ 345.448029][ T123] block nbd0: Possible stuck request ffff888025247540: control (read@3072,1024B). Runtime 240 seconds [ 345.491119][T10998] team0: Port device team_slave_0 added [ 345.529448][T10998] team0: Port device team_slave_1 added [ 345.646716][ T5847] Bluetooth: hci1: command tx timeout [ 345.727457][T11021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.735936][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.746493][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.756894][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.773971][T10998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.783935][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.786446][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.825339][T10998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.838955][T10998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.842100][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.846054][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.846108][T10998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.980786][T10154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.273686][T10154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.311437][T10998] hsr_slave_0: entered promiscuous mode [ 346.343024][T10998] hsr_slave_1: entered promiscuous mode [ 346.364582][T10998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.384472][T10998] Cannot create hsr debugfs directory [ 346.458249][T10154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.620346][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.628792][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.693761][T11048] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1812'. [ 346.782812][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.797691][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.858362][T11042] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.869473][T11042] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.878728][T11042] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.887839][T11042] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.030866][T10154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.607266][T10154] bridge_slave_1: left allmulticast mode [ 347.613287][T10154] bridge_slave_1: left promiscuous mode [ 347.619307][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.637792][T10154] bridge_slave_0: left allmulticast mode [ 347.643744][T10154] bridge_slave_0: left promiscuous mode [ 347.654831][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.736116][ T5952] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 347.745701][ T51] Bluetooth: hci1: command tx timeout [ 347.919906][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.931348][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.947476][ T5952] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 347.959165][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.969538][ T51] Bluetooth: hci3: command tx timeout [ 347.988737][ T5952] usb 6-1: config 0 descriptor?? [ 348.285236][T10154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.304356][T10154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.323286][T10154] bond0 (unregistering): Released all slaves [ 348.415136][T11070] can0: slcan on ttyS3. [ 348.425349][ T5952] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 348.463624][ T5952] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 348.496957][T11071] can0 (unregistered): slcan off ttyS3. [ 348.605494][T11019] chnl_net:caif_netlink_parms(): no params data found [ 348.644636][ T5952] cp2112 0003:10C4:EA90.0021: Part Number: 0x82 Device Version: 0xFE [ 348.892297][T10154] hsr_slave_0: left promiscuous mode [ 348.900361][T10154] hsr_slave_1: left promiscuous mode [ 348.906947][T10154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.914532][T10154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.927353][T10154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.935936][T10154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.970602][T10154] veth1_macvtap: left promiscuous mode [ 348.976837][T10154] veth0_macvtap: left promiscuous mode [ 348.982550][T10154] veth1_vlan: left promiscuous mode [ 348.988155][T10154] veth0_vlan: left promiscuous mode [ 349.059666][ T5952] cp2112 0003:10C4:EA90.0021: error setting SMBus config [ 349.083104][ T5952] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -71 [ 349.103738][ T5952] usb 6-1: USB disconnect, device number 29 [ 349.493383][T11096] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1831'. [ 349.805762][ T51] Bluetooth: hci1: command tx timeout [ 349.833871][T11100] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 349.930148][T10154] team0 (unregistering): Port device team_slave_1 removed [ 349.982243][T10154] team0 (unregistering): Port device team_slave_0 removed [ 350.049910][ T51] Bluetooth: hci3: command tx timeout [ 351.285930][T11096] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 351.479927][T11019] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.489813][T11019] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.501020][T11019] bridge_slave_0: entered allmulticast mode [ 351.516485][T11019] bridge_slave_0: entered promiscuous mode [ 351.560552][T11019] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.574681][T11019] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.584634][T11019] bridge_slave_1: entered allmulticast mode [ 351.600195][T11019] bridge_slave_1: entered promiscuous mode [ 351.660086][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 351.703897][T11019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.729903][T11019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.755437][T10998] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.827703][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.845125][T10998] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.849739][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 351.872151][T10998] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.885871][ T51] Bluetooth: hci1: command tx timeout [ 351.898198][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 351.911335][T11019] team0: Port device team_slave_0 added [ 351.928842][T11019] team0: Port device team_slave_1 added [ 351.941872][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.957214][T10998] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.997538][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.034194][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.072066][ T24] usb 7-1: config 0 descriptor?? [ 352.097767][T11019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.104782][T11019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.145853][ T51] Bluetooth: hci3: command tx timeout [ 352.185945][T11019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.269332][T11019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.295209][T11019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.349275][T11019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.563168][ T24] plantronics 0003:047F:FFFF.0022: ignoring exceeding usage max [ 352.583245][T11019] hsr_slave_0: entered promiscuous mode [ 352.599228][ T24] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 352.616893][T11019] hsr_slave_1: entered promiscuous mode [ 352.629357][T10998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.657346][T11137] netlink: 'syz.5.1846': attribute type 9 has an invalid length. [ 352.665213][T11137] netlink: 211988 bytes leftover after parsing attributes in process `syz.5.1846'. [ 352.781284][T10998] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.802436][T11141] kvm: kvm [11140]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000280 [ 352.821417][T10157] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.828682][T10157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.844520][T10157] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.851803][T10157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.976273][ T5909] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 353.153552][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 353.166769][ T5909] usb 2-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 353.177441][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.199474][ T5909] usb 2-1: config 0 descriptor?? [ 353.419524][T11019] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.427291][ T5909] usbhid 2-1:0.0: can't add hid device: -71 [ 353.434537][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 353.447196][ T5909] usb 2-1: USB disconnect, device number 30 [ 353.454064][T10998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.463238][T11019] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.478740][T11019] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.497179][T11019] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.621257][T10998] veth0_vlan: entered promiscuous mode [ 353.638582][T10998] veth1_vlan: entered promiscuous mode [ 353.669969][T11019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.703463][T11019] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.725412][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.732644][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.761670][T10157] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.768888][T10157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.783565][T10998] veth0_macvtap: entered promiscuous mode [ 353.805070][T10998] veth1_macvtap: entered promiscuous mode [ 353.864847][T10998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.892921][T10998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.907416][T10998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.916594][T10998] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.925305][T10998] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.936792][T10998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.073059][T10157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.085061][T10157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.137304][T10153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.150470][T10153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.206252][ T51] Bluetooth: hci3: command tx timeout [ 354.312638][T11019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.358348][T11019] veth0_vlan: entered promiscuous mode [ 354.371542][T11019] veth1_vlan: entered promiscuous mode [ 354.422864][T11019] veth0_macvtap: entered promiscuous mode [ 354.448993][T11019] veth1_macvtap: entered promiscuous mode [ 354.512877][T11019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.553287][T11019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.573837][T11019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.611820][T11019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.720171][ T5909] usb 7-1: USB disconnect, device number 8 [ 354.732251][T11019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.776980][T11019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.127542][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.782557][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.856718][T10154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.895772][T10154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.936087][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.972118][T10157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.986737][T10157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.015343][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.761999][ T13] bridge_slave_1: left allmulticast mode [ 356.773793][ T13] bridge_slave_1: left promiscuous mode [ 356.782084][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.827972][ T13] bridge_slave_0: left allmulticast mode [ 356.838158][ T13] bridge_slave_0: left promiscuous mode [ 356.844989][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.053639][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.066464][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.074886][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.083628][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.101951][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.235740][ T5923] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 357.397361][ T5923] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 357.431403][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.466847][ T5923] usb 6-1: config 0 descriptor?? [ 357.562967][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.595544][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.607633][ T13] bond0 (unregistering): Released all slaves [ 357.702392][ T5923] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 357.911664][ T5923] [drm:udl_init] *ERROR* Selecting channel failed [ 357.926575][ T13] hsr_slave_0: left promiscuous mode [ 357.934228][ T13] hsr_slave_1: left promiscuous mode [ 357.950637][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.961746][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.965186][ T5923] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 357.976803][ T5923] [drm] Initialized udl on minor 2 [ 357.985172][ T5923] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 357.986701][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.999821][ T5923] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 358.011796][ T902] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 358.020085][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.022740][ T5923] usb 6-1: USB disconnect, device number 30 [ 358.034259][ T902] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 358.066531][ T13] veth1_macvtap: left promiscuous mode [ 358.072143][ T13] veth0_macvtap: left promiscuous mode [ 358.080917][ T13] veth1_vlan: left promiscuous mode [ 358.087341][ T13] veth0_vlan: left promiscuous mode [ 358.585171][ T13] team0 (unregistering): Port device team_slave_1 removed [ 358.641179][ T13] team0 (unregistering): Port device team_slave_0 removed [ 359.085426][T11186] chnl_net:caif_netlink_parms(): no params data found [ 359.168549][ T5847] Bluetooth: hci1: command tx timeout [ 359.208193][T11186] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.215480][T11186] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.222935][T11186] bridge_slave_0: entered allmulticast mode [ 359.232309][T11186] bridge_slave_0: entered promiscuous mode [ 359.241361][T11186] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.248925][T11186] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.256410][T11186] bridge_slave_1: entered allmulticast mode [ 359.264333][T11186] bridge_slave_1: entered promiscuous mode [ 359.310606][T11186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.323845][T11186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.429643][T11186] team0: Port device team_slave_0 added [ 359.443685][T11200] netlink: 'syz.6.1863': attribute type 2 has an invalid length. [ 359.451112][T11186] team0: Port device team_slave_1 added [ 359.485814][T11200] netlink: 'syz.6.1863': attribute type 1 has an invalid length. [ 359.669764][T11186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.684515][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.711267][T11186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.741331][T11186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.768885][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.848672][T11186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.954255][T11213] overlay: filesystem on ./bus is read-only [ 360.117856][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.176532][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.189055][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.204294][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.225304][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.246291][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.507881][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.577054][T11186] hsr_slave_0: entered promiscuous mode [ 360.596548][T11186] hsr_slave_1: entered promiscuous mode [ 360.603033][T11186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.617942][T11186] Cannot create hsr debugfs directory [ 360.728809][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.821897][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.847011][ T2152] kernel read not supported for file /dsp (pid: 2152 comm: kworker/1:2) [ 360.976100][ T5923] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 361.138149][ T5923] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 361.154865][ T5923] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 361.172975][ T5923] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 361.184395][ T5923] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 361.197696][ T13] bridge_slave_1: left allmulticast mode [ 361.198829][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.203689][ T13] bridge_slave_1: left promiscuous mode [ 361.218885][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.224913][T11247] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 361.236005][ T13] bridge_slave_0: left allmulticast mode [ 361.241956][ T13] bridge_slave_0: left promiscuous mode [ 361.245172][ T5923] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.253859][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.255417][ T5847] Bluetooth: hci1: command tx timeout [ 361.602772][ T5923] usb 6-1: USB disconnect, device number 31 [ 361.698775][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.711419][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.722291][ T13] bond0 (unregistering): Released all slaves [ 362.093609][T11218] chnl_net:caif_netlink_parms(): no params data found [ 362.286114][ T5847] Bluetooth: hci3: command tx timeout [ 362.440255][T11284] sctp: [Deprecated]: syz.1.1895 (pid 11284) Use of int in maxseg socket option. [ 362.440255][T11284] Use struct sctp_assoc_value instead [ 362.487014][ T13] hsr_slave_0: left promiscuous mode [ 362.500685][ T13] hsr_slave_1: left promiscuous mode [ 362.507218][ T5923] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 362.517134][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.524684][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.548540][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.562916][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.597177][ T13] veth1_macvtap: left promiscuous mode [ 362.603534][ T13] veth0_macvtap: left promiscuous mode [ 362.609598][ T13] veth1_vlan: left promiscuous mode [ 362.615171][ T13] veth0_vlan: left promiscuous mode [ 362.676585][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 362.684352][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.705890][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.736096][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.758489][ T5923] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 362.787069][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.810367][ T5923] usb 6-1: config 0 descriptor?? [ 363.206027][ T902] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 363.240866][ T5923] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 363.251208][ T5923] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 363.263491][ T5923] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 363.271696][ T5923] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 363.285332][ T5923] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 363.303125][ T13] team0 (unregistering): Port device team_slave_1 removed [ 363.304912][ T5923] input: HID 0955:7214 Haptics as /devices/virtual/input/input41 [ 363.330736][ T5847] Bluetooth: hci1: command tx timeout [ 363.362489][ T13] team0 (unregistering): Port device team_slave_0 removed [ 363.393850][ T5923] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 363.405496][ T902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 363.423470][ T5923] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 363.434340][ T902] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 363.438215][T11274] netlink: 'syz.5.1890': attribute type 2 has an invalid length. [ 363.443675][ T902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.462434][ T902] usb 7-1: config 0 descriptor?? [ 363.468450][T11297] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 363.480244][T11274] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1890'. [ 363.570296][ T10] usb 6-1: USB disconnect, device number 32 [ 363.586483][ T5923] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 363.623297][ T5923] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 363.642939][ T5923] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 363.654465][ T5923] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 363.957997][ T902] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 363.964849][ T902] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 363.989542][ T902] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 363.998056][ T902] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 364.004895][ T902] elan 0003:04F3:0755.0024: unknown main item tag 0x0 [ 364.020044][ T902] elan 0003:04F3:0755.0024: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 364.330015][T11218] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.353715][T11218] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.361806][T11218] bridge_slave_0: entered allmulticast mode [ 364.374099][ T5847] Bluetooth: hci3: command tx timeout [ 364.393582][T11218] bridge_slave_0: entered promiscuous mode [ 364.403705][T11218] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.411385][T11218] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.418836][T11218] bridge_slave_1: entered allmulticast mode [ 364.426647][T11218] bridge_slave_1: entered promiscuous mode [ 364.523520][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1905'. [ 364.593805][T11218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.618341][T11218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.645835][ T2152] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 364.688094][T11186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 364.736946][T11218] team0: Port device team_slave_0 added [ 364.743309][T11186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 364.764683][T11186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 364.804936][T11218] team0: Port device team_slave_1 added [ 364.820508][ T2152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.832626][ T2152] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.847073][ T2152] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 364.856703][T11186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.863556][ T2152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.883542][ T2152] usb 2-1: config 0 descriptor?? [ 364.911924][T11218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.919140][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.945494][T11218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.989324][T11218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.996739][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.023621][T11218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.169366][T11218] hsr_slave_0: entered promiscuous mode [ 365.186664][T11218] hsr_slave_1: entered promiscuous mode [ 365.307826][ T2152] hid-rmi 0003:1532:011D.0025: unknown main item tag 0x1 [ 365.323401][ T2152] hid-rmi 0003:1532:011D.0025: hidraw1: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.1-1/input0 [ 365.406000][ T5847] Bluetooth: hci1: command tx timeout [ 365.528016][ T902] usb 2-1: USB disconnect, device number 31 [ 365.596357][T11186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.687810][T11186] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.714043][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.721304][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.753215][ T10] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 365.787904][ T10] hid-generic 0000:0000:0000.0026: hidraw1: HID v0.00 Device [syz1] on syz0 [ 365.811449][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.818740][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.909565][ T5952] usb 7-1: USB disconnect, device number 9 [ 365.952315][T11186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.424114][T11186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.446855][ T5847] Bluetooth: hci3: command tx timeout [ 366.519449][T11218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.568391][T11343] loop6: detected capacity change from 0 to 2098 [ 366.610012][T11218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.707293][T11218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.739747][T11218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.960070][T11186] veth0_vlan: entered promiscuous mode [ 367.028776][T11186] veth1_vlan: entered promiscuous mode [ 367.131883][T11218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.196337][T11218] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.251839][T10154] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.259086][T10154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.328901][T11186] veth0_macvtap: entered promiscuous mode [ 367.363607][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.370955][T10193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.438062][T11186] veth1_macvtap: entered promiscuous mode [ 367.534430][T11186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.572448][T11186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.612861][T11186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.634575][T11186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.647292][T11186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.665644][T11186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.888989][T10154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.920446][T10154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.054574][T10187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.079711][T10187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.337346][ T43] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 368.508104][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.525994][ T5847] Bluetooth: hci3: command tx timeout [ 368.537525][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 368.560127][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 368.583986][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.605982][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.615313][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.675419][ T43] usb 6-1: config 0 descriptor?? [ 368.736941][T11218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.931755][T10187] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.145871][T10187] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.168938][ T43] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 369.211498][T11218] veth0_vlan: entered promiscuous mode [ 369.317570][T10187] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.336517][T11218] veth1_vlan: entered promiscuous mode [ 369.393133][T11218] veth0_macvtap: entered promiscuous mode [ 369.435189][ T43] usb 6-1: USB disconnect, device number 33 [ 369.446966][T10187] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.477360][T11218] veth1_macvtap: entered promiscuous mode [ 369.510714][T11218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.544065][T11218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.571599][T11218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.587866][T11218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.596776][T11218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.605514][T11218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.724229][T10187] bridge_slave_1: left allmulticast mode [ 369.732796][T10187] bridge_slave_1: left promiscuous mode [ 369.739700][T10187] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.750522][T10187] bridge_slave_0: left allmulticast mode [ 369.758462][T10187] bridge_slave_0: left promiscuous mode [ 369.764279][T10187] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.603293][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.613353][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.623388][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.646089][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.654861][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.870823][T10187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.886366][T10187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.900715][T10187] bond0 (unregistering): Released all slaves [ 370.985844][ T5951] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 371.036049][T10154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.043943][T10154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.148443][ T5951] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.156936][ T5951] usb 2-1: config 0 has no interface number 0 [ 371.166415][ T5951] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 371.185999][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.212065][ T5951] usb 2-1: Product: syz [ 371.225895][ T5951] usb 2-1: Manufacturer: syz [ 371.232283][ T5951] usb 2-1: SerialNumber: syz [ 371.243739][T10157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.249365][ T5951] usb 2-1: config 0 descriptor?? [ 371.273659][T10157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.481037][ T5951] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 371.522952][ T5951] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 371.551100][ T5951] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 371.564943][ T5951] usb 2-1: media controller created [ 371.596450][T10187] hsr_slave_0: left promiscuous mode [ 371.606014][T10187] hsr_slave_1: left promiscuous mode [ 371.612412][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.620682][T10187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.633691][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.643656][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.652354][T10187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.686217][T10187] veth1_macvtap: left promiscuous mode [ 371.692218][T10187] veth0_macvtap: left promiscuous mode [ 371.698314][T10187] veth1_vlan: left promiscuous mode [ 371.703720][T10187] veth0_vlan: left promiscuous mode [ 371.726136][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 371.902591][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 371.910606][ T24] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 371.931525][ T24] usb 7-1: config 0 has no interface number 0 [ 371.938019][ T24] usb 7-1: config 0 interface 85 has no altsetting 0 [ 371.949304][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 371.960095][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.969168][ T24] usb 7-1: Product: syz [ 371.973387][ T24] usb 7-1: Manufacturer: syz [ 371.979433][ T24] usb 7-1: SerialNumber: syz [ 371.987083][ T24] usb 7-1: config 0 descriptor?? [ 372.006260][ T24] appletouch 7-1:0.85: Could not find int-in endpoint [ 372.013099][ T24] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 372.028418][ T24] usbhid 7-1:0.85: couldn't find an input interrupt endpoint [ 372.302410][ T9] usb 7-1: USB disconnect, device number 10 [ 372.528659][T10187] team0 (unregistering): Port device team_slave_1 removed [ 372.580323][T10187] team0 (unregistering): Port device team_slave_0 removed [ 372.687806][ T5847] Bluetooth: hci1: command tx timeout [ 372.768457][ T5951] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 372.850233][ T5951] usb 2-1: USB disconnect, device number 32 [ 373.728202][T11401] chnl_net:caif_netlink_parms(): no params data found [ 374.030661][T11401] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.038389][T11401] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.048371][T11401] bridge_slave_0: entered allmulticast mode [ 374.062155][T11401] bridge_slave_0: entered promiscuous mode [ 374.071825][T11401] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.079201][T11401] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.086614][T11401] bridge_slave_1: entered allmulticast mode [ 374.094549][T11401] bridge_slave_1: entered promiscuous mode [ 374.135995][T11401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.149308][T11401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.215136][T11401] team0: Port device team_slave_0 added [ 374.245895][T11401] team0: Port device team_slave_1 added [ 374.325183][T11401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.338351][T11401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.365987][T11401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.379369][T11401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.386498][T11401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.413115][T11401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.472505][T10187] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.583563][T10187] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.661615][T10187] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.684817][T11401] hsr_slave_0: entered promiscuous mode [ 374.691978][T11401] hsr_slave_1: entered promiscuous mode [ 374.702557][T11401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.714729][T11401] Cannot create hsr debugfs directory [ 374.774367][ T5847] Bluetooth: hci1: command tx timeout [ 374.797549][T10187] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.977779][T10187] bridge_slave_1: left allmulticast mode [ 374.983478][T10187] bridge_slave_1: left promiscuous mode [ 374.990777][T10187] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.001088][T10187] bridge_slave_0: left allmulticast mode [ 375.007532][T10187] bridge_slave_0: left promiscuous mode [ 375.013336][T10187] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.346452][T10187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.357744][T10187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.367896][T10187] bond0 (unregistering): Released all slaves [ 375.496105][ T123] block nbd0: Possible stuck request ffff888025247000: control (read@0,1024B). Runtime 270 seconds [ 375.508282][ T123] block nbd0: Possible stuck request ffff8880252471c0: control (read@1024,1024B). Runtime 270 seconds [ 375.519908][ T123] block nbd0: Possible stuck request ffff888025247380: control (read@2048,1024B). Runtime 270 seconds [ 375.530988][ T123] block nbd0: Possible stuck request ffff888025247540: control (read@3072,1024B). Runtime 270 seconds [ 375.760253][T10187] hsr_slave_0: left promiscuous mode [ 375.768015][T10187] hsr_slave_1: left promiscuous mode [ 375.773908][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.781513][T10187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.789863][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.798291][T10187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.820958][T10187] veth1_macvtap: left promiscuous mode [ 375.826777][T10187] veth0_macvtap: left promiscuous mode [ 375.832406][T10187] veth1_vlan: left promiscuous mode [ 375.837919][T10187] veth0_vlan: left promiscuous mode [ 376.453043][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.477771][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.486365][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.500839][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.522474][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.788621][T10187] team0 (unregistering): Port device team_slave_1 removed [ 376.840269][T10187] team0 (unregistering): Port device team_slave_0 removed [ 376.849952][ T5847] Bluetooth: hci1: command tx timeout [ 377.833450][T11401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 377.850137][T11401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 377.869507][T11401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 377.893930][T11491] macvlan2: entered promiscuous mode [ 377.906329][T11491] bridge0: entered promiscuous mode [ 377.948548][T11494] macvlan3: entered promiscuous mode [ 377.991421][T11401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 378.606081][ T5847] Bluetooth: hci3: command tx timeout [ 378.671244][T11401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.716288][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.722669][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.782546][T11401] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.811677][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.818901][T10153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.850457][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.857678][T10193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.926427][ T5847] Bluetooth: hci1: command tx timeout [ 378.932093][T11470] chnl_net:caif_netlink_parms(): no params data found [ 379.325930][ T5951] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 379.449413][T11470] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.459039][T11470] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.476518][T11470] bridge_slave_0: entered allmulticast mode [ 379.494713][T11470] bridge_slave_0: entered promiscuous mode [ 379.519235][T11470] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.527006][T11470] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.535780][ T5951] usb 2-1: config 0 has no interfaces? [ 379.541775][ T5951] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.551356][T11470] bridge_slave_1: entered allmulticast mode [ 379.565355][T11470] bridge_slave_1: entered promiscuous mode [ 379.572769][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.598450][ T5951] usb 2-1: config 0 descriptor?? [ 379.643598][T11470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.673891][T11470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.807694][T11470] team0: Port device team_slave_0 added [ 379.818757][T11470] team0: Port device team_slave_1 added [ 379.884022][T11470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.894075][T11555] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 379.894075][T11555] The task syz.6.1984 (11555) triggered the difference, watch for misbehavior. [ 379.912204][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.912292][T11470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.914697][T11470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.957137][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.992530][T11470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.031999][T11535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.041255][T11535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.053192][ T24] usb 2-1: USB disconnect, device number 33 [ 380.087845][T11401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.114777][T11470] hsr_slave_0: entered promiscuous mode [ 380.136272][T11470] hsr_slave_1: entered promiscuous mode [ 380.413553][T11401] veth0_vlan: entered promiscuous mode [ 380.463842][T11401] veth1_vlan: entered promiscuous mode [ 380.538260][T11401] veth0_macvtap: entered promiscuous mode [ 380.622041][T11401] veth1_macvtap: entered promiscuous mode [ 380.679248][T11401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.686510][ T5847] Bluetooth: hci3: command tx timeout [ 380.959956][T11401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.016023][T11401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.024798][T11401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.056776][T11401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.083249][T11401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.214778][T11470] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.286640][T11470] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.310700][T11470] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.447352][T11470] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.971922][T10157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.001123][T10157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.015305][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 382.015323][ T30] audit: type=1326 audit(1752147944.274:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11594 comm="syz.1.1998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f174298e929 code=0x0 [ 382.099629][T10193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.112743][T10193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.205205][T11470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.299499][T11470] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.322138][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.329450][T10174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.347884][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.355086][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.431924][T11470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.576380][T10174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.739154][T10174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.766341][ T5847] Bluetooth: hci3: command tx timeout [ 382.934393][T10174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.039256][T10174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.099505][T11470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.187533][T11470] veth0_vlan: entered promiscuous mode [ 383.222694][T11470] veth1_vlan: entered promiscuous mode [ 383.291175][T10174] bridge_slave_1: left allmulticast mode [ 383.297147][T10174] bridge_slave_1: left promiscuous mode [ 383.302955][T10174] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.313934][T10174] bridge_slave_0: left allmulticast mode [ 383.322007][T10174] bridge_slave_0: left promiscuous mode [ 383.328830][T10174] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.723134][T10174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.786846][T10174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.800421][T10174] bond0 (unregistering): Released all slaves [ 383.831369][T11604] Invalid logical block size (3) [ 383.942336][T11470] veth0_macvtap: entered promiscuous mode [ 383.991105][T11470] veth1_macvtap: entered promiscuous mode [ 384.419205][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 384.434903][T11470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.436688][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 384.452168][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 384.464741][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 384.472726][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 384.494630][T11470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.535756][ T5952] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 384.572738][T10174] hsr_slave_0: left promiscuous mode [ 384.588397][T10174] hsr_slave_1: left promiscuous mode [ 384.594798][T10174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.630676][T10174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.638306][T11626] binder: 11625:11626 ioctl c0306201 200000001a80 returned -14 [ 384.653051][T10174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.661455][T10174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.698421][ T5952] usb 6-1: Using ep0 maxpacket: 16 [ 384.708640][ T5952] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 384.726152][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.734828][ T5952] usb 6-1: Product: syz [ 384.744668][T10174] veth1_macvtap: left promiscuous mode [ 384.751779][ T5952] usb 6-1: Manufacturer: syz [ 384.755581][T10174] veth0_macvtap: left promiscuous mode [ 384.762012][ T5952] usb 6-1: SerialNumber: syz [ 384.768486][T10174] veth1_vlan: left promiscuous mode [ 384.774839][T10174] veth0_vlan: left promiscuous mode [ 384.785890][ T5952] usb 6-1: config 0 descriptor?? [ 384.797910][ T5952] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 384.845774][ T51] Bluetooth: hci3: command tx timeout [ 385.015408][ T5952] gp8psk: usb in 128 operation failed. [ 385.036620][ T5952] gp8psk: usb in 137 operation failed. [ 385.042406][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 385.067645][ T5952] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 385.080014][ T5952] usb 6-1: media controller created [ 385.107226][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.133156][ T5952] gp8psk_fe: Frontend revision 1 attached [ 385.142384][ T5952] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 385.157404][ T5952] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 385.393720][ T5952] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 385.416496][ T5952] gp8psk: found Genpix USB device pID = 201 (hex) [ 385.444329][T10174] team0 (unregistering): Port device team_slave_1 removed [ 385.490655][T10174] team0 (unregistering): Port device team_slave_0 removed [ 385.641729][ T5952] usb 6-1: USB disconnect, device number 34 [ 385.785519][ T5952] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 385.954866][T11470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.967097][T11470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.977326][T11470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.986098][T11470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.525848][ T51] Bluetooth: hci1: command tx timeout [ 387.651104][T11634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 387.657534][T11634] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 387.666194][T11634] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 387.673758][T11634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.679920][T11634] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 387.687584][T11634] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 387.797387][T10174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.820973][T10174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.936378][T11657] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2017'. [ 387.947036][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.954912][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.965929][ T2152] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 388.021582][T11627] chnl_net:caif_netlink_parms(): no params data found [ 388.046107][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 388.136104][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 388.155967][ T2152] usb 6-1: Using ep0 maxpacket: 8 [ 388.163118][ T2152] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 388.178329][ T2152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.210565][ T2152] pvrusb2: Hardware description: Terratec Grabster AV400 [ 388.224065][ T2152] pvrusb2: ********** [ 388.232331][ T2152] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 388.249093][ T2152] pvrusb2: Important functionality might not be entirely working. [ 388.267451][ T2152] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 388.279079][ T2152] pvrusb2: ********** [ 388.296850][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.315780][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.342131][ T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 388.356001][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.374551][ T9] usb 7-1: config 0 descriptor?? [ 388.423439][ T2343] pvrusb2: Invalid write control endpoint [ 388.475293][T10187] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.520639][T11627] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.548960][T11627] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.576046][T11627] bridge_slave_0: entered allmulticast mode [ 388.584448][T11627] bridge_slave_0: entered promiscuous mode [ 388.630887][T11627] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.641514][T11627] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.649282][T11627] bridge_slave_1: entered allmulticast mode [ 388.649593][T11650] pvrusb2: Invalid write control endpoint [ 388.657867][T11627] bridge_slave_1: entered promiscuous mode [ 388.718933][ T2343] pvrusb2: Invalid write control endpoint [ 388.727404][ T43] usb 6-1: USB disconnect, device number 35 [ 388.748505][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 388.775629][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 388.793567][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 388.814469][ T2343] pvrusb2: Device being rendered inoperable [ 388.834165][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 388.838964][T10187] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.842369][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 388.856472][ T9] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 388.879254][ T9] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 388.879423][ T2343] pvrusb2: Attached sub-driver cx25840 [ 388.910936][ T9] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 388.913055][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 388.942123][ T9] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 388.945275][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 388.950807][ T9] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 388.990251][ T9] cm6533_jd 0003:0D8C:0022.0028: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 389.034732][T10187] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.063035][T11627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.083796][T11627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.136155][ T9] usb 7-1: USB disconnect, device number 11 [ 389.163476][T10187] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.193490][T11627] team0: Port device team_slave_0 added [ 389.204913][T11627] team0: Port device team_slave_1 added [ 389.271285][T11627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.291966][T11627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.330018][T11627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.344576][T11627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.354524][T11627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.382694][T11627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.440294][T11627] hsr_slave_0: entered promiscuous mode [ 389.447666][T11627] hsr_slave_1: entered promiscuous mode [ 389.454407][T11627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.462994][T11627] Cannot create hsr debugfs directory [ 389.554625][T10187] bridge_slave_1: left allmulticast mode [ 389.564387][T10187] bridge_slave_1: left promiscuous mode [ 389.570913][T10187] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.580987][T10187] bridge_slave_0: left allmulticast mode [ 389.587110][T10187] bridge_slave_0: left promiscuous mode [ 389.592838][T10187] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.725970][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 389.940970][T10187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.953158][T10187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.963772][T10187] bond0 (unregistering): Released all slaves [ 390.239566][T10187] hsr_slave_0: left promiscuous mode [ 390.247123][T10187] hsr_slave_1: left promiscuous mode [ 390.253000][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.261514][T10187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.269694][T10187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.277366][T10187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.303181][T10187] veth1_macvtap: left promiscuous mode [ 390.309193][T10187] veth0_macvtap: left promiscuous mode [ 390.314812][T10187] veth1_vlan: left promiscuous mode [ 390.320246][T10187] veth0_vlan: left promiscuous mode [ 390.773560][T10187] team0 (unregistering): Port device team_slave_1 removed [ 390.819751][T10187] team0 (unregistering): Port device team_slave_0 removed [ 391.389113][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 391.410560][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 391.419160][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 391.434958][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 391.443077][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 391.805867][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 392.171951][T11695] bridge0: port 3(vlan2) entered blocking state [ 392.216473][T11695] bridge0: port 3(vlan2) entered disabled state [ 392.256179][T11695] vlan2: entered allmulticast mode [ 392.266422][T11695] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 392.300377][T11695] vlan2: entered promiscuous mode [ 392.305491][T11695] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 392.774100][T11627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.799986][T11684] chnl_net:caif_netlink_parms(): no params data found [ 392.843150][T11627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.967103][T11627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 393.027611][T11627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 393.217969][T11684] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.232295][T11684] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.246357][T11684] bridge_slave_0: entered allmulticast mode [ 393.256896][T11684] bridge_slave_0: entered promiscuous mode [ 393.286700][T11684] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.305147][T11684] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.320837][T11684] bridge_slave_1: entered allmulticast mode [ 393.339337][T11684] bridge_slave_1: entered promiscuous mode [ 393.370941][T11733] xt_CT: No such helper "pptp" [ 393.433725][T11684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.457388][T11684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.494006][ T51] Bluetooth: hci3: command tx timeout [ 393.604949][T11684] team0: Port device team_slave_0 added [ 393.657440][T11684] team0: Port device team_slave_1 added [ 393.788082][T11684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.795099][T11684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.834901][T11684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.859252][T11684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.872379][T11684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.898492][ T51] Bluetooth: hci1: command 0x040f tx timeout [ 393.918464][T11684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.048388][ T31] INFO: task syz.4.1165:9144 blocked for more than 143 seconds. [ 394.067002][ T31] Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 394.125686][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.175688][ T31] task:syz.4.1165 state:D stack:26536 pid:9144 tgid:9142 ppid:5840 task_flags:0x400140 flags:0x00004004 [ 394.247400][ T31] Call Trace: [ 394.250832][ T31] [ 394.253812][ T31] __schedule+0x16a2/0x4cb0 [ 394.305604][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.310555][ T31] ? schedule+0x165/0x360 [ 394.314951][ T31] ? __pfx___schedule+0x10/0x10 [ 394.365772][ T31] ? schedule+0x91/0x360 [ 394.370121][ T31] schedule+0x165/0x360 [ 394.374335][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.375734][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 394.416286][ T31] __mutex_lock+0x724/0xe80 [ 394.420875][ T31] ? __mutex_lock+0x51b/0xe80 [ 394.452544][ T31] ? sync_bdevs+0x1ac/0x340 [ 394.465815][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.470930][ T31] ? iput+0x398/0x9d0 [ 394.474957][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 394.483335][ T31] sync_bdevs+0x1ac/0x340 [ 394.487912][ T31] ksys_sync+0xb9/0x150 [ 394.492149][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 394.497074][ T31] ? __secure_computing+0xe2/0x2a0 [ 394.502268][ T31] __ia32_sys_sync+0xe/0x20 [ 394.506928][ T31] do_syscall_64+0xfa/0x3b0 [ 394.511493][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.516978][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.523165][ T31] ? clear_bhb_loop+0x60/0xb0 [ 394.528088][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.534061][ T31] RIP: 0033:0x7f0cca58e929 [ 394.538601][ T31] RSP: 002b:00007f0ccb3ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 394.547460][ T31] RAX: ffffffffffffffda RBX: 00007f0cca7b5fa0 RCX: 00007f0cca58e929 [ 394.555487][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 394.563696][ T31] RBP: 00007f0cca7b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 394.572018][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.580196][ T31] R13: 0000000000000000 R14: 00007f0cca7b5fa0 R15: 00007ffe9651e9f8 [ 394.588423][ T31] [ 394.642748][ T31] [ 394.642748][ T31] Showing all locks held in the system: [ 394.689543][ T31] 5 locks held by kworker/0:0/9: [ 394.694585][ T31] #0: ffff88801baf7948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 394.795664][ T31] #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 394.825772][ T31] #2: ffff888144f56198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 394.834822][ T31] #3: ffff888028113510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 394.865637][ T31] #4: ffff888144b02868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 394.875764][ T31] 3 locks held by kworker/0:1/10: [ 394.880864][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 394.925708][ T31] #1: ffffc900000f7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 394.975668][ T31] #2: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 395.015790][ T31] 1 lock held by khungtaskd/31: [ 395.020783][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 395.090904][ T31] 2 locks held by getty/5596: [ 395.105808][ T31] #0: ffff8880311250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 395.142626][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 395.201582][ T31] 1 lock held by udevd/5859: [ 395.215804][ T31] #0: ffff888143392358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 395.225228][ T31] 2 locks held by kworker/1:6/5952: [ 395.254965][ T31] #0: ffff8880b8739e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 395.280959][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 395.315885][ T31] 1 lock held by syz.1.980/8691: [ 395.320893][ T31] 1 lock held by syz.4.1165/9144: [ 395.350214][ T31] #0: ffff888143392358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 395.361250][ T31] 2 locks held by kworker/u8:14/10154: [ 395.377664][ T31] #0: ffff8880b8739e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 395.393083][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 395.404669][ T31] 1 lock held by syz-executor/11627: [ 395.411498][ T31] #0: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 395.422562][ T31] 1 lock held by syz.5.2051/11756: [ 395.427860][ T31] #0: ffffffff8f50b548 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 395.437362][ T31] [ 395.439729][ T31] ============================================= [ 395.439729][ T31] [ 395.492254][ T31] NMI backtrace for cpu 1 [ 395.492294][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 395.492314][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.492324][ T31] Call Trace: [ 395.492331][ T31] [ 395.492340][ T31] dump_stack_lvl+0x189/0x250 [ 395.492361][ T31] ? __wake_up_klogd+0xd9/0x110 [ 395.492388][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.492406][ T31] ? __pfx__printk+0x10/0x10 [ 395.492438][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 395.492462][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 395.492482][ T31] ? _printk+0xcf/0x120 [ 395.492506][ T31] ? __pfx__printk+0x10/0x10 [ 395.492528][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 395.492555][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 395.492580][ T31] watchdog+0xfee/0x1030 [ 395.492606][ T31] ? watchdog+0x1de/0x1030 [ 395.492638][ T31] kthread+0x711/0x8a0 [ 395.492663][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.492686][ T31] ? __pfx_kthread+0x10/0x10 [ 395.492708][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.492732][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.492757][ T31] ? __pfx_kthread+0x10/0x10 [ 395.492781][ T31] ret_from_fork+0x3f9/0x770 [ 395.492800][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.492820][ T31] ? __switch_to_asm+0x39/0x70 [ 395.492840][ T31] ? __switch_to_asm+0x33/0x70 [ 395.492858][ T31] ? __pfx_kthread+0x10/0x10 [ 395.492881][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.492915][ T31] [ 395.492921][ T31] Sending NMI from CPU 1 to CPUs 0: [ 395.566064][ T51] Bluetooth: hci3: command tx timeout [ 395.567474][ C0] NMI backtrace for cpu 0 [ 395.567488][ C0] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 395.567507][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.567518][ C0] Workqueue: hci3 hci_cmd_timeout [ 395.567564][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 395.567587][ C0] Code: e8 8e c3 7f fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f 1b e1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 395.567600][ C0] RSP: 0018:ffffc90000bb72b0 EFLAGS: 00000002 [ 395.567614][ C0] RAX: 1ffffffff33b9400 RBX: 00000000000003fd RCX: 0000000000000000 [ 395.567625][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 395.567635][ C0] RBP: ffffffff99dca730 R08: ffff8880244f0237 R09: 1ffff1100489e046 [ 395.567648][ C0] R10: dffffc0000000000 R11: ffffffff85406170 R12: dffffc0000000000 [ 395.567660][ C0] R13: 0000000000000000 R14: ffffffff99dca4a0 R15: 0000000000000000 [ 395.567671][ C0] FS: 0000000000000000(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 395.567684][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.567695][ C0] CR2: 00007f17436e7d60 CR3: 000000000df38000 CR4: 00000000003526f0 [ 395.567709][ C0] Call Trace: [ 395.567716][ C0] [ 395.567724][ C0] wait_for_lsr+0x19e/0x2f0 [ 395.567751][ C0] serial8250_console_write+0x134c/0x1ba0 [ 395.567779][ C0] ? __lock_acquire+0xab9/0xd20 [ 395.567796][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 395.567819][ C0] ? console_flush_all+0x13a/0xc40 [ 395.567841][ C0] ? console_flush_all+0x13a/0xc40 [ 395.567865][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 395.567887][ C0] ? console_flush_all+0x13a/0xc40 [ 395.567906][ C0] ? console_flush_all+0x13a/0xc40 [ 395.567928][ C0] console_flush_all+0x728/0xc40 [ 395.567950][ C0] ? console_flush_all+0x13a/0xc40 [ 395.567975][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 395.568001][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 395.568027][ C0] console_unlock+0xc4/0x270 [ 395.568048][ C0] ? __pfx_console_unlock+0x10/0x10 [ 395.568065][ C0] ? vprintk_emit+0x370/0x7a0 [ 395.568085][ C0] ? vprintk_emit+0x587/0x7a0 [ 395.568102][ C0] ? vprintk_emit+0x444/0x7a0 [ 395.568119][ C0] ? vprintk_emit+0x444/0x7a0 [ 395.568139][ C0] vprintk_emit+0x5b7/0x7a0 [ 395.568155][ C0] ? vprintk_emit+0x444/0x7a0 [ 395.568174][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 395.568197][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 395.568221][ C0] ? sched_clock_cpu+0x74/0x430 [ 395.568242][ C0] _printk+0xcf/0x120 [ 395.568265][ C0] ? __pfx__printk+0x10/0x10 [ 395.568293][ C0] ? do_raw_spin_lock+0x121/0x290 [ 395.568313][ C0] ? look_up_lock_class+0x74/0x170 [ 395.568342][ C0] bt_err+0x10b/0x160 [ 395.568357][ C0] ? __lock_acquire+0xab9/0xd20 [ 395.568374][ C0] ? __pfx_bt_err+0x10/0x10 [ 395.568397][ C0] hci_cmd_timeout+0xff/0x1e0 [ 395.568421][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 395.568440][ C0] process_scheduled_works+0xade/0x17b0 [ 395.568473][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 395.568500][ C0] worker_thread+0x8a0/0xda0 [ 395.568532][ C0] kthread+0x711/0x8a0 [ 395.568555][ C0] ? __pfx_worker_thread+0x10/0x10 [ 395.568572][ C0] ? __pfx_kthread+0x10/0x10 [ 395.568594][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.568617][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.568639][ C0] ? __pfx_kthread+0x10/0x10 [ 395.568661][ C0] ret_from_fork+0x3f9/0x770 [ 395.568678][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 395.568697][ C0] ? __switch_to_asm+0x39/0x70 [ 395.568716][ C0] ? __switch_to_asm+0x33/0x70 [ 395.568736][ C0] ? __pfx_kthread+0x10/0x10 [ 395.568757][ C0] ret_from_fork_asm+0x1a/0x30 [ 395.568786][ C0] [ 395.775968][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 395.775997][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 395.776038][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.776054][ T31] Call Trace: [ 395.776064][ T31] [ 395.776076][ T31] dump_stack_lvl+0x99/0x250 [ 395.776109][ T31] ? __asan_memcpy+0x40/0x70 [ 395.776138][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.776164][ T31] ? __pfx__printk+0x10/0x10 [ 395.776209][ T31] panic+0x2db/0x790 [ 395.776242][ T31] ? __pfx_panic+0x10/0x10 [ 395.776264][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 395.776296][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 395.776331][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 395.776371][ T31] watchdog+0x102d/0x1030 [ 395.776408][ T31] ? watchdog+0x1de/0x1030 [ 395.776451][ T31] kthread+0x711/0x8a0 [ 395.776487][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.776518][ T31] ? __pfx_kthread+0x10/0x10 [ 395.776551][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.776583][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.776614][ T31] ? __pfx_kthread+0x10/0x10 [ 395.776646][ T31] ret_from_fork+0x3f9/0x770 [ 395.776672][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.776702][ T31] ? __switch_to_asm+0x39/0x70 [ 395.776729][ T31] ? __switch_to_asm+0x33/0x70 [ 395.776755][ T31] ? __pfx_kthread+0x10/0x10 [ 395.776787][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.776833][ T31] [ 395.777993][ T31] Kernel Offset: disabled