last executing test programs: 6m4.15855873s ago: executing program 1 (id=13629): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000000db, 0x20044804) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 5m59.010251619s ago: executing program 1 (id=13636): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x5}}, 0x80, r2}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2}) 5m52.807292521s ago: executing program 1 (id=13641): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) 5m47.884816869s ago: executing program 1 (id=13648): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0x837, &(0x7f0000000340)={0x0, 0xa8b1, 0x400, 0x2, 0x3d0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m39.773028077s ago: executing program 1 (id=13657): r0 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0xfffffffc, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0xd070, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) 5m33.086654592s ago: executing program 1 (id=13662): r0 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x401, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0xd}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 5m26.895181591s ago: executing program 4 (id=13668): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x0, 0x83, 0x2, 0x3, 0x200007f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454c, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x4038, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb35, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xffffffff, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5m17.410776834s ago: executing program 4 (id=13674): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000780)=""/4110, 0x100e) 5m16.012994842s ago: executing program 32 (id=13662): r0 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x401, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0xd}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 5m8.801620132s ago: executing program 4 (id=13680): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) 4m56.478540456s ago: executing program 4 (id=13693): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) 4m54.274056832s ago: executing program 4 (id=13697): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000662000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 4m51.703656153s ago: executing program 0 (id=13698): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 4m51.633166284s ago: executing program 4 (id=13700): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 4m44.462434199s ago: executing program 0 (id=13704): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x12b1, &(0x7f0000000200)={0x0, 0x9697, 0x80, 0xa, 0x20c}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 4m36.79290218s ago: executing program 0 (id=13707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4m35.130194559s ago: executing program 33 (id=13700): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 4m33.13889275s ago: executing program 3 (id=13711): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) 4m32.845225964s ago: executing program 3 (id=13712): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000) 4m32.596895639s ago: executing program 3 (id=13713): socket$kcm(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) 4m30.87719766s ago: executing program 0 (id=13715): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', '', [], 0xa, "3036716d1dd5df3bff373b9b18f0cdd95003303bf4da2db783563424d1486e4100add8a8"}, 0x28) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) 4m27.677172236s ago: executing program 0 (id=13717): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m27.677034856s ago: executing program 3 (id=13718): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 4m26.907431241s ago: executing program 3 (id=13719): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xcb}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 4m21.537008107s ago: executing program 3 (id=13721): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xbf44, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m15.488423114s ago: executing program 0 (id=13723): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x0, 0xff, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) getsockname(r0, 0x0, &(0x7f0000000180)) 4m3.971079047s ago: executing program 34 (id=13721): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xbf44, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m55.971704287s ago: executing program 35 (id=13723): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x0, 0xff, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) getsockname(r0, 0x0, &(0x7f0000000180)) 17.666133081s ago: executing program 2 (id=13810): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, 0x0) 12.8458466s ago: executing program 2 (id=13811): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x4, 0xffffffffffffffff, &(0x7f0000000c80)) 6.255424115s ago: executing program 2 (id=13812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 3.783184247s ago: executing program 2 (id=13813): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 913.390529ms ago: executing program 2 (id=13814): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 0s ago: executing program 2 (id=13815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000001c0)="f22e268f426df30fc7f96626dcdf66baf80cb8f426338aef66bafc0c66ed0f79a9b6000000b9800000c00f3235002000000f300f206466bad104b0faee0f01c8b9a80800000f32", 0x47}], 0x1, 0x30, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): s `syz.4.10982'. [ 718.746493][T31777] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10982'. [ 718.766590][T31778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10983'. [ 718.856960][ T5931] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 718.950582][T31788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10988'. [ 719.009553][ T5931] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 719.009581][ T5931] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 719.009598][ T5931] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 719.009616][ T5931] usb 1-1: config 220 has no interface number 2 [ 719.009693][ T5931] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 719.009717][ T5931] usb 1-1: config 220 interface 0 has no altsetting 0 [ 719.009734][ T5931] usb 1-1: config 220 interface 76 has no altsetting 0 [ 719.009750][ T5931] usb 1-1: config 220 interface 1 has no altsetting 0 [ 719.015509][ T5931] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 719.015537][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.015556][ T5931] usb 1-1: Product: syz [ 719.015569][ T5931] usb 1-1: Manufacturer: syz [ 719.015582][ T5931] usb 1-1: SerialNumber: syz [ 719.287992][ T5931] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 719.288025][ T5931] uvcvideo 1-1:220.0: No valid video chain found. [ 719.288081][ T5931] usb 1-1: selecting invalid altsetting 0 [ 719.358775][ T5931] usb 1-1: selecting invalid altsetting 0 [ 719.358813][ T5931] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 719.389918][ T5931] usb 1-1: USB disconnect, device number 6 [ 719.563581][T31832] netlink: 'syz.4.11004': attribute type 3 has an invalid length. [ 719.722779][T31843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11008'. [ 720.494040][T31875] bond3: (slave bond_slave_1): Device is not our slave [ 720.494062][T31875] bond3: option active_slave: invalid value (bond_slave_1) [ 720.522205][T31875] bond3 (unregistering): Released all slaves [ 720.612449][T31957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11034'. [ 720.987342][ T5886] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 721.139318][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.139349][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.139368][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 721.139403][ T5886] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 721.139425][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.144827][ T5886] usb 2-1: config 0 descriptor?? [ 721.634218][ T5886] hid-multitouch 0003:0EEF:72D0.0023: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.1-1/input0 [ 721.823327][ T5886] usb 2-1: USB disconnect, device number 127 [ 722.146941][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 722.309124][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 722.311492][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 722.311523][ T10] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.311548][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 722.311580][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 722.311601][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.388952][ T10] usb 5-1: config 0 descriptor?? [ 722.619426][T32090] delete_channel: no stack [ 722.866456][ T10] input: HID 28bd:0933 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0024/input/input74 [ 723.006960][ T10] uclogic 0003:28BD:0933.0024: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0 [ 723.036307][ T10] usb 5-1: USB disconnect, device number 6 [ 723.958100][T32176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11117'. [ 723.958158][T32176] tipc: Enabling of bearer rejected, failed to enable media [ 727.087261][T32358] ieee802154 phy0 wpan0: encryption failed: -22 [ 727.881124][ T37] kauditd_printk_skb: 566 callbacks suppressed [ 727.881141][ T37] audit: type=1326 audit(1763529160.165:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32399 comm="syz.0.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504019f6c9 code=0x7ffc0000 [ 727.881184][ T37] audit: type=1326 audit(1763529160.165:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32399 comm="syz.0.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504019f6c9 code=0x7ffc0000 [ 727.881222][ T37] audit: type=1326 audit(1763529160.165:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32399 comm="syz.0.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504019f6c9 code=0x7ffc0000 [ 727.881257][ T37] audit: type=1326 audit(1763529160.165:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32399 comm="syz.0.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504019f6c9 code=0x7ffc0000 [ 727.895427][ T37] audit: type=1326 audit(1763529160.175:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32399 comm="syz.0.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f504019f6c9 code=0x7ffc0000 [ 727.895475][ T37] audit: type=1326 audit(1763529160.175:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32399 comm="syz.0.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504019f6c9 code=0x7ffc0000 [ 727.895514][ T37] audit: type=1326 audit(1763529160.175:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32399 comm="syz.0.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504019f6c9 code=0x7ffc0000 [ 727.900112][ T37] audit: type=1326 audit(1763529160.185:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32399 comm="syz.0.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504019f6c9 code=0x7ffc0000 [ 727.901019][ T37] audit: type=1326 audit(1763529160.185:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32399 comm="syz.0.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504019f6c9 code=0x7ffc0000 [ 727.904468][ T37] audit: type=1326 audit(1763529160.185:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32399 comm="syz.0.11226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504019f6c9 code=0x7ffc0000 [ 728.436036][T32434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11242'. [ 728.676943][T32444] Invalid logical block size (8192) [ 730.168876][T32537] netlink: 'syz.4.11291': attribute type 10 has an invalid length. [ 730.186926][ T5886] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 730.234089][T32537] batman_adv: batadv0: Adding interface: team0 [ 730.234106][T32537] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.234135][T32537] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 730.255732][T32537] netlink: 'syz.4.11291': attribute type 10 has an invalid length. [ 730.255755][T32537] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11291'. [ 730.255938][T32537] team0: entered promiscuous mode [ 730.255953][T32537] team_slave_0: entered promiscuous mode [ 730.256182][T32537] team_slave_1: entered promiscuous mode [ 730.256406][T32537] geneve0: entered promiscuous mode [ 730.256606][T32537] veth0_to_bridge: entered promiscuous mode [ 730.263898][T32537] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.264252][T32537] batman_adv: batadv0: Interface activated: team0 [ 730.264291][T32537] batman_adv: batadv0: Interface deactivated: team0 [ 730.264314][T32537] batman_adv: batadv0: Removing interface: team0 [ 730.382448][T32537] bridge0: port 3(team0) entered blocking state [ 730.382676][T32537] bridge0: port 3(team0) entered disabled state [ 730.382942][T32537] team0: entered allmulticast mode [ 730.382957][T32537] team_slave_0: entered allmulticast mode [ 730.382976][T32537] team_slave_1: entered allmulticast mode [ 730.382993][T32537] geneve0: entered allmulticast mode [ 730.383009][T32537] veth0_to_bridge: entered allmulticast mode [ 730.397690][T32537] bridge0: port 3(team0) entered blocking state [ 730.397832][T32537] bridge0: port 3(team0) entered forwarding state [ 730.427020][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 730.446714][ T5886] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 730.446870][ T5886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.446890][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 730.449854][ T5886] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 730.449879][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.449898][ T5886] usb 1-1: Product: syz [ 730.449911][ T5886] usb 1-1: Manufacturer: syz [ 730.449925][ T5886] usb 1-1: SerialNumber: syz [ 730.487032][ T1126] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.488418][ T1126] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.488459][ T1126] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.488491][ T1126] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.665341][T32518] usb usb8: usbfs: process 32518 (syz.0.11283) did not claim interface 0 before use [ 730.687070][ T5886] usb 1-1: 0:2 : does not exist [ 730.722704][ T5886] usb 1-1: USB disconnect, device number 7 [ 731.154472][T32600] netlink: 'syz.1.11313': attribute type 3 has an invalid length. [ 731.383426][T32615] wireguard: wg0: Could not create IPv4 socket [ 732.427017][ T5886] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 732.533063][T32687] xfrm0 speed is unknown, defaulting to 1000 [ 732.579489][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.579519][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.579541][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.579582][ T5886] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 732.579603][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.586219][ T5886] usb 1-1: config 0 descriptor?? [ 732.647872][T32701] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11361'. [ 732.648014][T32701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11361'. [ 733.043986][ T5886] hid-udraw 0003:20D6:CB17.0025: unbalanced collection at end of report description [ 733.044903][ T5886] hid-udraw 0003:20D6:CB17.0025: parse failed [ 733.045012][ T5886] hid-udraw 0003:20D6:CB17.0025: probe with driver hid-udraw failed with error -22 [ 733.221774][ T5853] usb 1-1: USB disconnect, device number 8 [ 733.511576][T32687] lo speed is unknown, defaulting to 1000 [ 734.141716][ T311] vivid-000: disconnect [ 734.152077][ T310] vivid-000: reconnect [ 736.948062][ T503] xt_NFQUEUE: number of queues (65297) out of range (got 111634) [ 737.505895][ T544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11479'. [ 737.596952][ T5853] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 737.769309][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.769340][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.769376][ T5853] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 737.769397][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.775470][ T5853] usb 1-1: config 0 descriptor?? [ 738.215787][ T5853] pyra 0003:1E7D:2CF6.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 738.259487][ T587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11501'. [ 738.259509][ T587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11501'. [ 738.259534][ T587] netlink: 'syz.1.11501': attribute type 12 has an invalid length. [ 738.259636][ T587] netlink: 'syz.1.11501': attribute type 13 has an invalid length. [ 738.400059][ T5853] pyra 0003:1E7D:2CF6.0026: couldn't init struct pyra_device [ 738.400114][ T5853] pyra 0003:1E7D:2CF6.0026: couldn't install mouse [ 738.402667][ T5853] pyra 0003:1E7D:2CF6.0026: probe with driver pyra failed with error -71 [ 738.412704][ T593] CUSE: unknown device info "ÿ" [ 738.412719][ T593] CUSE: unknown device info "" [ 738.412728][ T593] CUSE: DEVNAME unspecified [ 738.430091][ T5853] usb 1-1: USB disconnect, device number 9 [ 739.627082][ T5853] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 739.776886][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 739.779185][ T5853] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 739.779208][ T5853] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 739.779226][ T5853] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 739.779245][ T5853] usb 1-1: config 1 has no interface number 0 [ 739.779316][ T5853] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 739.779340][ T5853] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 739.779377][ T5853] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 739.779397][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.827484][ T5853] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 740.023265][ T5853] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 740.454376][ T5853] usb 1-1: USB disconnect, device number 10 [ 740.478379][ T5853] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 740.537854][ T742] syz.4.11562 (742): attempted to duplicate a private mapping with mremap. This is not supported. [ 741.289910][ T792] netlink: 'syz.0.11580': attribute type 6 has an invalid length. [ 741.300553][ T792] netlink: 'syz.0.11580': attribute type 6 has an invalid length. [ 741.456588][ T805] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11588'. [ 742.076949][ T5853] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 742.229308][ T5853] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 742.229356][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.229379][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.229399][ T5853] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 742.229440][ T5853] usb 1-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 742.229470][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.235242][ T5853] usb 1-1: config 0 descriptor?? [ 742.541446][ T872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11614'. [ 742.683240][ T5853] wacom 0003:056A:0015.0027: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 742.710118][ T5853] wacom 0003:056A:0015.0027: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.0-1/input0 [ 742.713990][ T5853] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0015.0027/input/input75 [ 742.889606][ T5886] usb 1-1: USB disconnect, device number 11 [ 742.948732][ T908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11628'. [ 743.386973][ T5853] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 743.559381][ T5853] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.559410][ T5853] usb 2-1: config 0 interface 0 has no altsetting 0 [ 743.559443][ T5853] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 743.559464][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.564813][ T5853] usb 2-1: config 0 descriptor?? [ 743.985608][ T5853] kye 0003:0458:5019.0028: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 744.016427][ T5853] kye 0003:0458:5019.0028: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 744.016458][ T5853] kye 0003:0458:5019.0028: tablet-enabling feature report not found [ 744.016471][ T5853] kye 0003:0458:5019.0028: tablet enabling failed [ 744.195608][ T1019] tipc: Started in network mode [ 744.195637][ T1019] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 744.195685][ T1019] tipc: Enabling of bearer rejected, failed to enable media [ 744.221035][ T5853] usb 2-1: USB disconnect, device number 2 [ 744.445822][ T1043] vxcan3: entered promiscuous mode [ 744.646934][ T993] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 744.797096][ T993] usb 1-1: Using ep0 maxpacket: 8 [ 744.799463][ T993] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 744.799489][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.829211][ T993] usb 1-1: config 0 descriptor?? [ 745.246069][ T993] uvcvideo 1-1:0.0: Found UVC 0.00 device (2833:0201) [ 745.246156][ T993] uvcvideo 1-1:0.0: No valid video chain found. [ 745.472015][ T5785] usb 1-1: USB disconnect, device number 12 [ 745.665737][ T1146] netlink: 'syz.4.11704': attribute type 3 has an invalid length. [ 746.854485][ T1219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11737'. [ 747.397512][ T1251] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11750'. [ 747.633612][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.633714][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.522185][ T1325] vlan3: entered promiscuous mode [ 748.522205][ T1325] bridge0: entered promiscuous mode [ 749.136344][ T1371] sp0: Synchronizing with TNC [ 749.456949][ T5785] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 749.609438][ T5785] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 749.609465][ T5785] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 749.609483][ T5785] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 749.609501][ T5785] usb 1-1: config 220 has no interface number 2 [ 749.609594][ T5785] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 749.609616][ T5785] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 749.609641][ T5785] usb 1-1: config 220 interface 0 has no altsetting 0 [ 749.609658][ T5785] usb 1-1: config 220 interface 76 has no altsetting 0 [ 749.609675][ T5785] usb 1-1: config 220 interface 1 has no altsetting 0 [ 749.619488][ T5785] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 749.619514][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.619532][ T5785] usb 1-1: Product: syz [ 749.619545][ T5785] usb 1-1: Manufacturer: syz [ 749.619558][ T5785] usb 1-1: SerialNumber: syz [ 749.627236][ T5886] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 749.780230][ T5886] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 749.780256][ T5886] usb 5-1: config 0 has no interface number 0 [ 749.780287][ T5886] usb 5-1: config 0 interface 29 has no altsetting 0 [ 749.784055][ T5886] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 749.784131][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.784150][ T5886] usb 5-1: Product: syz [ 749.784163][ T5886] usb 5-1: Manufacturer: syz [ 749.784177][ T5886] usb 5-1: SerialNumber: syz [ 749.816535][ T5886] usb 5-1: config 0 descriptor?? [ 749.877436][ T5785] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 749.877468][ T5785] uvcvideo 1-1:220.0: No valid video chain found. [ 749.877656][ T5785] usb 1-1: selecting invalid altsetting 0 [ 749.967718][ T5785] usb 1-1: selecting invalid altsetting 0 [ 749.967756][ T5785] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 749.989813][ T5785] usb 1-1: USB disconnect, device number 13 [ 750.035884][ T5886] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 750.237334][ T5886] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 750.237358][ T5886] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 750.237391][ T5886] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 750.401715][ T5886] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -22 [ 750.457649][ T5886] usb 5-1: USB disconnect, device number 7 [ 751.197743][ C1] vkms_vblank_simulate: vblank timer overrun [ 751.645967][ T1550] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11869'. [ 751.677225][ T5785] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 751.834103][ T5785] usb 5-1: Using ep0 maxpacket: 8 [ 751.844305][ T5785] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 751.844332][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.844350][ T5785] usb 5-1: Product: syz [ 751.844363][ T5785] usb 5-1: Manufacturer: syz [ 751.844377][ T5785] usb 5-1: SerialNumber: syz [ 751.877098][ T5785] usb 5-1: config 0 descriptor?? [ 751.882508][ T5785] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 751.882562][ T5785] dvb-usb: bulk message failed: -22 (2/0) [ 751.909052][ T5785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 751.911887][ T5785] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 751.911952][ T5785] usb 5-1: media controller created [ 752.032049][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.148132][ T5785] cxusb: set interface failed [ 752.148151][ T5785] dvb-usb: bulk message failed: -22 (1/0) [ 752.336488][ T5785] DVB: Unable to find symbol mt352_attach() [ 752.336504][ T5785] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 752.498547][ T5785] rc_core: IR keymap rc-dvico-portable not found [ 752.498570][ T5785] Registered IR keymap rc-empty [ 752.500829][ T5785] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 752.505346][ T5785] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input78 [ 752.510425][ T5785] dvb-usb: schedule remote query interval to 100 msecs. [ 752.510447][ T5785] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 752.525640][ T5785] usb 5-1: USB disconnect, device number 8 [ 752.856279][ T5785] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 753.297190][ T1231] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 753.449697][ T1231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.449742][ T1231] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 753.449763][ T1231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.455486][ T1231] usb 2-1: config 0 descriptor?? [ 753.886532][ T1231] kye 0003:0458:5016.0029: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 753.907296][ T1231] kye 0003:0458:5016.0029: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 753.907326][ T1231] kye 0003:0458:5016.0029: tablet-enabling feature report not found [ 753.907339][ T1231] kye 0003:0458:5016.0029: tablet enabling failed [ 754.100444][ T1231] usb 2-1: USB disconnect, device number 3 [ 754.696926][ T5785] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 754.848509][ T5785] usb 5-1: Using ep0 maxpacket: 32 [ 754.851036][ T5785] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 754.851063][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.863537][ T5785] usb 5-1: config 0 descriptor?? [ 755.072246][ T5785] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 755.083976][ T5785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 755.088060][ T5785] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 755.088115][ T5785] usb 5-1: media controller created [ 755.146935][ T993] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 755.182263][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.277964][ T5785] az6027: usb out operation failed. (-71) [ 755.279846][ T5785] az6027: usb out operation failed. (-71) [ 755.279863][ T5785] stb0899_attach: Driver disabled by Kconfig [ 755.279872][ T5785] az6027: no front-end attached [ 755.279872][ T5785] [ 755.280282][ T5785] az6027: usb out operation failed. (-71) [ 755.280296][ T5785] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 755.283417][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input79 [ 755.296897][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 755.299584][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.299629][ T993] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 755.299651][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.301389][ T5785] dvb-usb: schedule remote query interval to 400 msecs. [ 755.301407][ T5785] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 755.316381][ T5785] usb 5-1: USB disconnect, device number 9 [ 755.401438][ T993] usb 1-1: config 0 descriptor?? [ 755.579336][ T5785] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 755.857435][ T993] lg-g15 0003:046D:C222.002A: hidraw0: USB HID v10.03 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 756.074858][ T993] usb 1-1: USB disconnect, device number 14 [ 756.376955][ T5785] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 756.526963][ T5785] usb 2-1: Using ep0 maxpacket: 32 [ 756.529587][ T5785] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 756.529611][ T5785] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 756.529629][ T5785] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 756.529681][ T5785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 756.529701][ T5785] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 756.529724][ T5785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 756.529747][ T5785] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 756.529769][ T5785] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 756.529809][ T5785] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 756.529829][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.542553][ T5785] usb 2-1: config 0 descriptor?? [ 756.544724][ T1859] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 756.764096][ T5785] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 756.956118][ T993] usb 2-1: USB disconnect, device number 4 [ 756.968957][ T993] usblp0: removed [ 757.434569][ T1930] syz.0.11996 (1930) used greatest stack depth: 16520 bytes left [ 758.922989][ T2031] gtp1: entered promiscuous mode [ 758.923022][ T2031] gtp1: entered allmulticast mode [ 759.255058][ T2056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12054'. [ 759.326894][ T993] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 759.480943][ T993] usb 2-1: Using ep0 maxpacket: 32 [ 759.483444][ T993] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 759.483473][ T993] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 759.483497][ T993] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 759.486551][ T993] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 759.486578][ T993] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 759.486599][ T993] usb 2-1: Product: syz [ 759.486612][ T993] usb 2-1: Manufacturer: syz [ 759.486625][ T993] usb 2-1: SerialNumber: syz [ 759.573099][ T2044] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 759.598388][ T993] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input80 [ 759.928781][ T993] usb 2-1: USB disconnect, device number 5 [ 760.047072][ T993] appletouch 2-1:1.0: input: appletouch disconnected [ 760.090495][ T2109] loop2: detected capacity change from 0 to 7 [ 760.113749][ T2109] Dev loop2: unable to read RDB block 7 [ 760.113794][ T2109] loop2: AHDI p1 p2 p3 [ 760.113826][ T2109] loop2: partition table partially beyond EOD, truncated [ 760.113991][ T2109] loop2: p1 start 1601398130 is beyond EOD, truncated [ 760.114007][ T2109] loop2: p2 start 1702059890 is beyond EOD, truncated [ 760.473460][ T2139] netlink: 'syz.0.12083': attribute type 9 has an invalid length. [ 760.473485][ T2139] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12083'. [ 760.953323][ T2173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12095'. [ 761.716922][ T5785] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 761.869536][ T5785] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.869569][ T5785] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.871674][ T5785] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 761.871701][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 761.871719][ T5785] usb 1-1: SerialNumber: syz [ 762.121768][ T5785] usb 1-1: 0:2 : does not exist [ 762.197298][ T5785] usb 1-1: USB disconnect, device number 15 [ 762.907105][ T2275] netem: change failed [ 763.156967][ T5785] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 763.315024][ T5785] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 763.315052][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.315070][ T5785] usb 1-1: Product: syz [ 763.315083][ T5785] usb 1-1: Manufacturer: syz [ 763.315096][ T5785] usb 1-1: SerialNumber: syz [ 763.328633][ T5785] usb 1-1: config 0 descriptor?? [ 763.553068][ T5785] usb 1-1: USB disconnect, device number 16 [ 766.302652][ T2519] serio: Serial port ttyS3 [ 766.549488][ T2542] program syz.0.12237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 766.745928][ T2558] netlink: 'syz.1.12244': attribute type 1 has an invalid length. [ 766.745947][ T2558] netlink: 'syz.1.12244': attribute type 3 has an invalid length. [ 766.745960][ T2558] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12244'. [ 767.140197][ T2590] input: syz1 as /devices/virtual/input/input81 [ 767.417408][ T2608] macsec1: entered promiscuous mode [ 767.417571][ T2608] macsec1: entered allmulticast mode [ 767.417588][ T2608] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 767.636990][ T5853] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 767.790683][ T5853] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 767.790710][ T5853] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.790728][ T5853] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 767.790803][ T5853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.793054][ T5853] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 767.793078][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 767.793097][ T5853] usb 2-1: Product: syz [ 767.793110][ T5853] usb 2-1: Manufacturer: syz [ 767.879134][ T5853] cdc_wdm 2-1:1.0: skipping garbage [ 767.879154][ T5853] cdc_wdm 2-1:1.0: skipping garbage [ 767.901789][ T5853] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 767.901810][ T5853] cdc_wdm 2-1:1.0: Unknown control protocol [ 768.224272][ T2670] netlink: set zone limit has 4 unknown bytes [ 769.284069][ T5853] kernel read not supported for file /mdstat (pid: 5853 comm: kworker/1:3) [ 769.616954][ T5785] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 769.768067][ T5785] usb 1-1: Using ep0 maxpacket: 8 [ 769.770645][ T5785] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 769.770702][ T5785] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 769.770722][ T5785] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 769.770743][ T5785] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 769.770764][ T5785] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.770799][ T5785] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 769.770817][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.010118][ T5785] usb 1-1: GET_CAPABILITIES returned 0 [ 770.010167][ T5785] usbtmc 1-1:16.0: can't read capabilities [ 770.215944][ T5785] usb 1-1: USB disconnect, device number 17 [ 770.344978][ T2852] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 770.345209][ T2852] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 770.384933][ T5853] usb 2-1: USB disconnect, device number 6 [ 772.666910][ T993] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 772.827021][ T993] usb 2-1: Using ep0 maxpacket: 16 [ 772.829439][ T993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.829463][ T993] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 772.829499][ T993] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 772.829521][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.838525][ T993] usb 2-1: config 0 descriptor?? [ 773.064210][ T993] usb 2-1: USB disconnect, device number 7 [ 773.177592][ T3009] input: syz0 as /devices/virtual/input/input82 [ 773.724403][ T3050] netlink: 'syz.1.12418': attribute type 25 has an invalid length. [ 773.724424][ T3050] netlink: 'syz.1.12418': attribute type 7 has an invalid length. [ 773.746979][ T5853] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 773.920006][ T5853] usb 5-1: config 0 has an invalid interface number: 123 but max is 0 [ 773.920034][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.920052][ T5853] usb 5-1: config 0 has no interface number 0 [ 773.928931][ T5853] usb 5-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 773.928959][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.928977][ T5853] usb 5-1: Product: syz [ 773.928990][ T5853] usb 5-1: Manufacturer: syz [ 773.929004][ T5853] usb 5-1: SerialNumber: syz [ 773.981316][ T5853] usb 5-1: config 0 descriptor?? [ 774.010011][ T3068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12424'. [ 774.012355][ T5853] cdc_acm 5-1:0.123: More than one union descriptor, skipping ... [ 774.201333][ T5853] usb 5-1: USB disconnect, device number 10 [ 775.180440][ T3130] kvm: kvm [3129]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xf6 [ 775.696890][ T993] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 775.857063][ T993] usb 2-1: Using ep0 maxpacket: 32 [ 775.859938][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.859968][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.860004][ T993] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 775.860025][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.870519][ T993] usb 2-1: config 0 descriptor?? [ 776.309812][ T993] koneplus 0003:1E7D:2D51.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 776.697719][ T993] usb 2-1: USB disconnect, device number 8 [ 777.125646][ T3251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12494'. [ 777.125678][ T3251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12494'. [ 777.377155][ T3261] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12500'. [ 779.456894][ T1231] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 779.606899][ T1231] usb 2-1: Using ep0 maxpacket: 32 [ 779.609216][ T1231] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 779.609240][ T1231] usb 2-1: config 0 has no interface number 0 [ 779.612482][ T1231] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 779.612508][ T1231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.612527][ T1231] usb 2-1: Product: syz [ 779.612546][ T1231] usb 2-1: Manufacturer: syz [ 779.612559][ T1231] usb 2-1: SerialNumber: syz [ 779.679169][ T1231] usb 2-1: config 0 descriptor?? [ 779.683381][ T1231] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 779.915399][ T1231] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 779.952174][ T1231] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 780.312791][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 780.314447][ T1231] usb 2-1: USB disconnect, device number 9 [ 780.345271][ T1231] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 780.368250][ T1231] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 780.370903][ T1231] quatech2 2-1:0.51: device disconnected [ 781.441917][ T3526] mkiss: ax0: crc mode is auto. [ 781.602401][ T3545] netlink: 'syz.4.12614': attribute type 30 has an invalid length. [ 781.724572][ T3545] bond3: option arp_missed_max: invalid value (0) [ 781.724595][ T3545] bond3: option arp_missed_max: allowed values 1 - 255 [ 781.785090][ T3545] bond3 (unregistering): Released all slaves [ 782.222942][ T3641] Attempt to restore checkpoint with obsolete wellknown handles [ 782.267178][ T3642] mkiss: ax0: crc mode is auto. [ 784.860245][ T3769] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12690'. [ 785.227023][ T5853] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 785.379239][ T5853] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 785.379267][ T5853] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 785.379284][ T5853] usb 5-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 785.379301][ T5853] usb 5-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 785.379320][ T5853] usb 5-1: config 220 has no interface number 2 [ 785.379393][ T5853] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 785.379418][ T5853] usb 5-1: config 220 interface 0 has no altsetting 0 [ 785.379435][ T5853] usb 5-1: config 220 interface 76 has no altsetting 0 [ 785.379451][ T5853] usb 5-1: config 220 interface 1 has no altsetting 0 [ 785.384084][ T5853] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 785.384120][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.384139][ T5853] usb 5-1: Product: syz [ 785.384152][ T5853] usb 5-1: Manufacturer: syz [ 785.384166][ T5853] usb 5-1: SerialNumber: syz [ 785.650179][ T5853] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 785.650213][ T5853] uvcvideo 5-1:220.0: No valid video chain found. [ 785.650276][ T5853] usb 5-1: selecting invalid altsetting 0 [ 785.796627][ T5853] usb 5-1: selecting invalid altsetting 0 [ 785.796663][ T5853] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 785.814473][ T5853] usb 5-1: USB disconnect, device number 11 [ 786.660403][ T3876] veth1_macvtap: left promiscuous mode [ 786.660430][ T3876] macsec0: entered promiscuous mode [ 786.727071][ T3879] veth1_macvtap: entered promiscuous mode [ 786.734538][ T3879] macsec0: left promiscuous mode [ 786.767184][ T5785] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 786.844684][ T3884] veth1_to_batadv: entered promiscuous mode [ 786.846400][ T3884] batadv_slave_0: entered promiscuous mode [ 786.846610][ T3884] batadv_slave_0: left promiscuous mode [ 786.895033][ T3884] veth1_to_batadv: left promiscuous mode [ 786.916850][ T5785] usb 5-1: Using ep0 maxpacket: 32 [ 786.921011][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.921042][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.921078][ T5785] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 786.921098][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.987362][ T5785] usb 5-1: config 0 descriptor?? [ 787.006628][ T5785] hub 5-1:0.0: USB hub found [ 787.090393][ T3902] team0: entered allmulticast mode [ 787.090416][ T3902] team_slave_0: entered allmulticast mode [ 787.090437][ T3902] team_slave_1: entered allmulticast mode [ 787.194418][ T5785] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 787.443844][ T3919] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 787.655844][ T5785] hid-generic 0003:046D:C31C.002C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 787.907230][ T5853] usb 5-1: USB disconnect, device number 12 [ 788.135522][ T3975] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.12765'. [ 788.206936][ T5785] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 788.356886][ T5785] usb 1-1: Using ep0 maxpacket: 16 [ 788.359347][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.359393][ T5785] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 788.359414][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.365740][ T5785] usb 1-1: config 0 descriptor?? [ 788.468879][ T3995] program syz.4.12775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 788.840910][ T5785] mcp2221 0003:04D8:00DD.002D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 789.246155][ T5785] usb 1-1: USB disconnect, device number 18 [ 789.972174][ T4067] xfrm0 speed is unknown, defaulting to 1000 [ 790.652402][ T4107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12816'. [ 790.730874][ T4067] lo speed is unknown, defaulting to 1000 [ 790.915893][ T4114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12820'. [ 790.915923][ T4114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12820'. [ 791.966549][ T4164] netlink: 'syz.0.12836': attribute type 3 has an invalid length. [ 792.889984][ T4247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12866'. [ 793.242896][ T4255] batman_adv: batadv0: Adding interface: gretap2 [ 793.242920][ T4255] batman_adv: batadv0: Interface activated: gretap2 [ 793.837420][ T4294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12887'. [ 794.368212][ T4327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12902'. [ 795.198800][ T4353] bond0: (slave wlan1): Releasing backup interface [ 795.952343][ T4414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12944'. [ 795.952455][ T4414] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12944'. [ 800.399417][ T4666] netlink: 316 bytes leftover after parsing attributes in process `syz.4.13005'. [ 800.806427][ T4732] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 800.806427][ T4732] The task syz.0.13032 (4732) triggered the difference, watch for misbehavior. [ 802.173927][ T4800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 802.184984][ T4800] bond0: (slave bond3): Enslaving as an active interface with an up link [ 804.281482][ T4943] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13117'. [ 804.888887][ T4969] xfrm0 speed is unknown, defaulting to 1000 [ 805.548031][ T5013] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.13149'. [ 805.651161][ T4969] lo speed is unknown, defaulting to 1000 [ 805.707019][ T993] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 805.863802][ T993] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 805.863830][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.887305][ T993] usb 5-1: config 0 descriptor?? [ 805.891411][ T993] cp210x 5-1:0.0: cp210x converter detected [ 806.298224][ T993] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 806.340396][ T993] usb 5-1: cp210x converter now attached to ttyUSB0 [ 806.506127][ T993] usb 5-1: USB disconnect, device number 13 [ 806.521565][ T993] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 806.660766][ T993] cp210x 5-1:0.0: device disconnected [ 808.256944][ T993] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 808.382385][ T5211] xfrm0 speed is unknown, defaulting to 1000 [ 808.419742][ T993] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 808.419767][ T993] usb 5-1: config 0 has no interface number 0 [ 808.422971][ T993] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 808.422998][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.423016][ T993] usb 5-1: Product: syz [ 808.423029][ T993] usb 5-1: Manufacturer: syz [ 808.423042][ T993] usb 5-1: SerialNumber: syz [ 808.479488][ T993] usb 5-1: config 0 descriptor?? [ 808.708487][ T993] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 808.727082][ T993] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 808.727504][ T993] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 808.727559][ T993] usb 5-1: media controller created [ 808.778174][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.936444][ T993] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 809.035929][ T993] usb 5-1: USB disconnect, device number 14 [ 809.071512][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.071591][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.195237][ T5211] lo speed is unknown, defaulting to 1000 [ 809.445036][ T5277] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 809.445092][ T5277] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 809.445186][ T5277] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 809.445324][ T5277] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 809.445373][ T5277] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 809.445426][ T5277] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 809.445558][ T5277] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 809.445605][ T5277] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 809.445654][ T5277] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 809.445749][ T5277] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 810.137723][ T5319] erspan0: entered promiscuous mode [ 812.503930][ T5470] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13296'. [ 812.503967][ T5470] ksmbd: Unknown IPC event: 3, ignore. [ 813.243730][ T1231] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 813.457252][ T1231] usb 5-1: Using ep0 maxpacket: 32 [ 813.461056][ T1231] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 813.461081][ T1231] usb 5-1: config 0 has no interface number 0 [ 813.465419][ T1231] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 813.465447][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.465466][ T1231] usb 5-1: Product: syz [ 813.465479][ T1231] usb 5-1: Manufacturer: syz [ 813.465491][ T1231] usb 5-1: SerialNumber: syz [ 813.479209][ T1231] usb 5-1: config 0 descriptor?? [ 813.488890][ T1231] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 813.768318][ T1231] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 813.811006][ T1231] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 813.969084][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.969539][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.174468][ T44] usb 5-1: USB disconnect, device number 15 [ 814.193470][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 814.216480][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 814.236951][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 814.237724][ T44] quatech2 5-1:0.51: device disconnected [ 815.489289][ T5663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13370'. [ 816.758465][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.040541][ T5701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.614504][ T5902] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13414'. [ 817.759796][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 817.759815][ T37] audit: type=1326 audit(1763529250.045:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5913 comm="syz.1.13417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37ba1df6c9 code=0x0 [ 818.667616][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.158803][ T6018] bridge0: entered promiscuous mode [ 819.159785][ T6018] macvlan2: entered promiscuous mode [ 824.506845][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.520244][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.047089][ T6073] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 832.052628][ T6076] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 832.379295][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.000380][ C0] sched: DL replenish lagged too much [ 838.511004][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.158197][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.486927][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.427029][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.195442][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.972681][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.029704][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.122366][ T6160] bridge0: port 3(macvtap1) entered blocking state [ 858.141493][ T6160] bridge0: port 3(macvtap1) entered disabled state [ 858.141773][ T6160] macvtap1: entered allmulticast mode [ 858.141789][ T6160] bridge0: entered allmulticast mode [ 858.220133][ T6160] macvtap1: left allmulticast mode [ 858.220165][ T6160] bridge0: left allmulticast mode [ 859.717929][ T6174] netlink: 'syz.0.13511': attribute type 10 has an invalid length. [ 863.137170][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.467687][T24646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.645931][ T6174] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 865.658756][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13520'. [ 865.677472][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13520'. [ 869.377349][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.516993][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.525301][T24646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.530527][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.530596][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.539949][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.706948][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.311689][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.049361][ T6221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.071063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.735941][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.475481][ T993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.079080][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.061057][T31938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.757737][ T6247] sctp: [Deprecated]: syz.1.13540 (pid 6247) Use of int in max_burst socket option deprecated. [ 884.757737][ T6247] Use struct sctp_assoc_value instead [ 886.516340][ T1133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.658548][ T6238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.414772][T24646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.847092][ T6238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.038154][T31938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.560184][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.787436][ T1133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.547087][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.727624][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.987818][ T6320] Bluetooth: hci3: command 0x0406 tx timeout [ 914.812270][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.768178][ T5785] kernel write not supported for file [eventfd] (pid: 5785 comm: kworker/0:3) [ 918.606428][ T6238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.427673][T31938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.886918][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.140780][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.957648][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.957720][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.660611][ T1126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.157431][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.957151][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.187453][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.548366][ T6397] kthread_run failed with err -4 [ 944.365302][T31938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.166974][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.274347][T31938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.544439][ T6419] syz.4.13614: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 950.544658][ T6419] CPU: 1 UID: 0 PID: 6419 Comm: syz.4.13614 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 950.544681][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 950.544694][ T6419] Call Trace: [ 950.544702][ T6419] [ 950.544712][ T6419] dump_stack_lvl+0x189/0x250 [ 950.544750][ T6419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 950.544776][ T6419] ? __pfx__printk+0x10/0x10 [ 950.544802][ T6419] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 950.544823][ T6419] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 950.544847][ T6419] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 950.544872][ T6419] warn_alloc+0x22e/0x3b0 [ 950.544908][ T6419] ? __pfx_warn_alloc+0x10/0x10 [ 950.544942][ T6419] ? __get_vm_area_node+0x2bc/0x350 [ 950.544966][ T6419] ? nf_tables_newset+0x1330/0x2540 [ 950.544994][ T6419] __vmalloc_node_range_noprof+0x690/0x12d0 [ 950.545049][ T6419] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 950.545077][ T6419] ? rcu_is_watching+0x15/0xb0 [ 950.545096][ T6419] __kvmalloc_node_noprof+0x4a3/0x920 [ 950.545121][ T6419] ? nf_tables_newset+0x1330/0x2540 [ 950.545142][ T6419] ? nf_tables_newset+0x1330/0x2540 [ 950.545165][ T6419] ? nft_set_lookup+0x128/0x150 [ 950.545187][ T6419] ? nft_hash_privsize+0xcf/0xf0 [ 950.545210][ T6419] nf_tables_newset+0x1330/0x2540 [ 950.545248][ T6419] ? __pfx_nf_tables_newset+0x10/0x10 [ 950.545296][ T6419] ? __nla_parse+0x40/0x60 [ 950.545328][ T6419] nfnetlink_rcv+0x11e0/0x2590 [ 950.545396][ T6419] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 950.545448][ T6419] ? ref_tracker_free+0x61e/0x7c0 [ 950.545506][ T6419] ? __netlink_deliver_tap+0x807/0x850 [ 950.545527][ T6419] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.545568][ T6419] netlink_unicast+0x846/0xa10 [ 950.545596][ T6419] ? __pfx_netlink_unicast+0x10/0x10 [ 950.545617][ T6419] ? netlink_sendmsg+0x642/0xb30 [ 950.545635][ T6419] ? skb_put+0x11b/0x210 [ 950.545665][ T6419] netlink_sendmsg+0x805/0xb30 [ 950.545698][ T6419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.545729][ T6419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 950.545753][ T6419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.545774][ T6419] __sock_sendmsg+0x21c/0x270 [ 950.545803][ T6419] ____sys_sendmsg+0x508/0x820 [ 950.545831][ T6419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 950.545869][ T6419] ? import_iovec+0x74/0xa0 [ 950.545894][ T6419] ___sys_sendmsg+0x21f/0x2a0 [ 950.545919][ T6419] ? __pfx____sys_sendmsg+0x10/0x10 [ 950.545981][ T6419] ? __fget_files+0x2a/0x420 [ 950.546004][ T6419] ? __fget_files+0x3a6/0x420 [ 950.546039][ T6419] __x64_sys_sendmsg+0x1a1/0x260 [ 950.546070][ T6419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 950.546111][ T6419] ? do_syscall_64+0xbe/0xfa0 [ 950.546141][ T6419] do_syscall_64+0xfa/0xfa0 [ 950.546164][ T6419] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.546188][ T6419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.546207][ T6419] ? clear_bhb_loop+0x60/0xb0 [ 950.546230][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.546247][ T6419] RIP: 0033:0x7f5f32e5f6c9 [ 950.546266][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.546283][ T6419] RSP: 002b:00007f5f310be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.546309][ T6419] RAX: ffffffffffffffda RBX: 00007f5f330b5fa0 RCX: 00007f5f32e5f6c9 [ 950.546324][ T6419] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 950.546336][ T6419] RBP: 00007f5f32ee1f91 R08: 0000000000000000 R09: 0000000000000000 [ 950.546348][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.546359][ T6419] R13: 00007f5f330b6038 R14: 00007f5f330b5fa0 R15: 00007ffdfc4e12e8 [ 950.546395][ T6419] [ 950.796839][ T6419] Mem-Info: [ 950.796855][ T6419] active_anon:279 inactive_anon:4325 isolated_anon:0 [ 950.796855][ T6419] active_file:14334 inactive_file:41197 isolated_file:0 [ 950.796855][ T6419] unevictable:768 dirty:308 writeback:0 [ 950.796855][ T6419] slab_reclaimable:12306 slab_unreclaimable:122551 [ 950.796855][ T6419] mapped:29214 shmem:1374 pagetables:1132 [ 950.796855][ T6419] sec_pagetables:0 bounce:0 [ 950.796855][ T6419] kernel_misc_reclaimable:0 [ 950.796855][ T6419] free:1295440 free_pcp:344 free_cma:0 [ 950.796906][ T6419] Node 0 active_anon:1116kB inactive_anon:17300kB active_file:57076kB inactive_file:164788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116856kB dirty:1228kB writeback:0kB shmem:3960kB kernel_stack:14580kB pagetables:4380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 950.796952][ T6419] Node 1 active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 950.796993][ T6419] Node 0 DMA free:15356kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.797048][ T6419] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 950.797080][ T6419] Node 0 DMA32 free:1263408kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1116kB inactive_anon:17300kB active_file:57076kB inactive_file:164788kB unevictable:1536kB writepending:1228kB zspages:0kB present:3129332kB managed:2576076kB mlocked:0kB bounce:0kB free_pcp:1376kB local_pcp:640kB free_cma:0kB [ 950.797256][ T6419] lowmem_reserve[]: 0 0 1 1 1 [ 950.797287][ T6419] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.797340][ T6419] lowmem_reserve[]: 0 0 0 0 0 [ 950.797370][ T6419] Node 1 Normal free:3902996kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 950.797426][ T6419] lowmem_reserve[]: 0 0 0 0 0 [ 950.797457][ T6419] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 950.797606][ T6419] Node 0 DMA32: 1844*4kB (UME) 1061*8kB (UME) 658*16kB (UME) 773*32kB (UME) 327*64kB (UME) 223*128kB (UME) 72*256kB (UM) 23*512kB (UM) 6*1024kB (ME) 2*2048kB (M) 274*4096kB (UM) = 1263352kB [ 950.797751][ T6419] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 950.797840][ T6419] Node 1 Normal: 199*4kB (UME) 61*8kB (UE) 31*16kB (UE) 207*32kB (UE) 93*64kB (UME) 30*128kB (UME) 11*256kB (UM) 6*512kB (UM) 4*1024kB (UME) 6*2048kB (UME) 943*4096kB (M) = 3902996kB [ 950.797981][ T6419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 950.798000][ T6419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 950.798017][ T6419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 950.798031][ T6419] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 950.798047][ T6419] 56901 total pagecache pages [ 950.798055][ T6419] 0 pages in swap cache [ 950.798062][ T6419] Free swap = 124996kB [ 950.798069][ T6419] Total swap = 124996kB [ 950.798077][ T6419] 2097051 pages RAM [ 950.798084][ T6419] 0 pages HighMem/MovableOnly [ 950.798094][ T6419] 421006 pages reserved [ 950.798101][ T6419] 0 pages cma reserved [ 956.237105][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.738408][ T6434] tty tty23: ldisc open failed (-12), clearing slot 22 [ 957.676819][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.449975][T22062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.828090][ T6238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.144344][ T6238] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 967.159926][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.286891][ T6238] usb 1-1: Using ep0 maxpacket: 16 [ 968.354338][ T6238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.354388][ T6238] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 968.354409][ T6238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.398871][ T6238] usb 1-1: config 0 descriptor?? [ 971.091599][ T6238] usb 1-1: can't set config #0, error -71 [ 972.936956][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.196728][ T6238] usb 1-1: USB disconnect, device number 20 [ 976.972184][T22062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.412820][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.077398][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.630733][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.630930][ T6238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.392877][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.392975][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.102852][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.341821][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.820869][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.927492][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.849121][T31938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.098243][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.357000][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.678544][T22062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.674623][ T6239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.318442][T22062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.787063][ T6238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.465822][ T7223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.923975][T22921] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1030.950024][T22921] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1030.952154][T22921] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1030.963598][T22921] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1030.964515][T22921] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1033.141143][ T6320] Bluetooth: hci4: command tx timeout [ 1035.486801][ T6320] Bluetooth: hci4: command tx timeout [ 1035.600825][ T6238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.287242][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.896768][ T6555] bond0: (slave syz_tun): Releasing backup interface [ 1037.631294][ T6320] Bluetooth: hci4: command tx timeout [ 1039.525268][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.706850][ T6320] Bluetooth: hci4: command tx timeout [ 1039.723511][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.797556][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.836780][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.112429][T31938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.894073][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.066985][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.752028][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.820622][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.833313][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.408399][ T6238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.229003][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.427643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.303741][T22921] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1082.324185][T22921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1082.325693][T22921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1082.345964][T22921] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1082.375946][T22921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1084.507304][T22921] Bluetooth: hci3: command tx timeout [ 1086.980316][T22921] Bluetooth: hci3: command tx timeout [ 1089.836709][T22921] Bluetooth: hci3: command tx timeout [ 1091.877306][T22921] Bluetooth: hci3: command tx timeout [ 1091.913790][ T6320] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1091.939492][ T6320] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1091.941134][ T6320] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1091.947990][ T6320] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1091.971287][ T6320] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1094.890949][ T6320] Bluetooth: hci5: command tx timeout [ 1096.924730][T22921] Bluetooth: hci5: command tx timeout [ 1099.337813][T22921] Bluetooth: hci5: command tx timeout [ 1101.742487][T22921] Bluetooth: hci5: command tx timeout [ 1107.221481][ T6655] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1107.221515][ T6655] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.445175][ T6320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1107.608484][ T6320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1107.613234][ T6320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1107.614446][ T6320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1107.615790][ T6320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1107.643847][ T6753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1107.687929][ T6758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1107.693098][ T6758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1107.694283][ T6758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1107.695669][ T6758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1109.710460][T22921] Bluetooth: hci0: command tx timeout [ 1109.786924][T22921] Bluetooth: hci2: command tx timeout [ 1111.786811][T22921] Bluetooth: hci0: command tx timeout [ 1111.866839][T22921] Bluetooth: hci2: command tx timeout [ 1113.866829][T22921] Bluetooth: hci0: command tx timeout [ 1113.946713][T22921] Bluetooth: hci2: command tx timeout [ 1116.006857][T22921] Bluetooth: hci0: command tx timeout [ 1116.026728][T22921] Bluetooth: hci2: command tx timeout [ 1116.272568][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.272648][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.439739][T31607] bond0: (slave syz_tun): Releasing backup interface [ 1129.892975][ T6758] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1129.925510][ T6758] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1129.940629][ T6758] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1129.942265][ T6758] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1129.962660][ T6758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1132.416042][ T6758] Bluetooth: hci4: command tx timeout [ 1134.532800][ T6655] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.532834][ T6655] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.629837][ T6758] Bluetooth: hci4: command tx timeout [ 1136.878026][ T6758] Bluetooth: hci4: command tx timeout [ 1138.907678][ T6758] Bluetooth: hci4: command tx timeout [ 1144.279938][ T6655] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.279972][ T6655] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.528312][ T6748] xfrm0 speed is unknown, defaulting to 1000 [ 1151.374264][ T6655] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.374298][ T6655] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.671483][ T6320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1154.728382][ T6320] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1155.166865][ T6320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1155.221848][ T6320] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1155.222885][ T6320] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1157.521036][ T6758] Bluetooth: hci3: command tx timeout [ 1160.006907][ T6758] Bluetooth: hci3: command tx timeout [ 1162.177994][ T6758] Bluetooth: hci3: command tx timeout [ 1162.307008][ T6784] xfrm0 speed is unknown, defaulting to 1000 [ 1162.337183][ T6748] lo speed is unknown, defaulting to 1000 [ 1162.403032][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1162.464838][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1162.501147][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1162.533791][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1162.587789][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1162.594269][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1162.600848][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1162.607375][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1162.614198][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1162.620821][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1163.637754][ T6320] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1163.668288][ T6320] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1163.669817][ T6320] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1163.670995][ T6320] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1163.672263][ T6320] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1164.393905][ T6320] Bluetooth: hci3: command tx timeout [ 1164.728290][T22921] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1164.752231][T22921] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1164.933015][T22921] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1165.812810][T22921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1165.817253][T22921] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1167.407333][ C1] net_ratelimit: 619 callbacks suppressed [ 1167.407356][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1167.414543][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1167.427473][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1167.433904][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1167.440514][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1167.447069][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1167.453596][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1167.460134][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1167.466661][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1167.473148][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1168.301296][T22921] Bluetooth: hci6: command tx timeout [ 1168.302217][T22921] Bluetooth: hci5: command tx timeout [ 1168.894494][ T6655] bridge_slave_1: left allmulticast mode [ 1168.896299][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.546315][ T6320] Bluetooth: hci6: command tx timeout [ 1170.638440][ T6655] bridge_slave_0: left allmulticast mode [ 1170.638703][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.528194][ T6320] Bluetooth: hci5: command tx timeout [ 1172.417480][ C1] net_ratelimit: 683 callbacks suppressed [ 1172.417502][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1172.424038][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1172.430721][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1172.437274][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1172.444155][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1172.450961][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1172.457718][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1172.464347][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1172.471218][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1172.477878][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1172.776879][ T6320] Bluetooth: hci6: command tx timeout [ 1173.553120][ T6320] Bluetooth: hci5: command tx timeout [ 1175.503968][T22921] Bluetooth: hci6: command tx timeout [ 1175.654220][ T6320] Bluetooth: hci5: command tx timeout [ 1175.816212][ T6655] batman_adv: batadv0: Interface deactivated: gretap2 [ 1177.426839][ C1] net_ratelimit: 673 callbacks suppressed [ 1177.426861][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1177.433453][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1177.440907][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1177.447522][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1177.454367][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1177.460981][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1177.467610][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1177.474102][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1177.481165][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1177.487878][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1177.797558][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.797630][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.437151][ C1] net_ratelimit: 685 callbacks suppressed [ 1182.437174][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1182.444510][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1182.451679][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1182.459069][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1182.465912][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1182.472978][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1182.479930][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1182.487015][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1182.493734][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1182.500680][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1187.459096][ C1] net_ratelimit: 678 callbacks suppressed [ 1187.459118][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1187.465624][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1187.472706][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1187.479413][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1187.486020][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1187.492578][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1187.499490][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1187.505983][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1187.512685][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1187.519409][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1192.470296][ C1] net_ratelimit: 664 callbacks suppressed [ 1192.470318][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1192.477252][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1192.483872][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1192.490814][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1192.498161][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1192.504851][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1192.511576][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1192.518530][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1192.525227][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1192.532224][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1197.480082][ C1] net_ratelimit: 632 callbacks suppressed [ 1197.480103][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1197.486834][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1197.493324][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1197.499924][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1197.511166][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1197.517642][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1197.523958][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1197.530269][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1197.536958][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1197.543415][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1200.341451][T22921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1200.368740][T22921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1200.852514][T22921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1201.737676][T22921] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1201.739771][T22921] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1202.489325][ C1] net_ratelimit: 614 callbacks suppressed [ 1202.489347][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1202.495746][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1202.501960][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1202.508187][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1202.514116][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1202.520372][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1202.526418][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1202.533081][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1202.539288][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1202.545634][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1203.786873][ T6320] Bluetooth: hci2: command tx timeout [ 1206.461699][ T6320] Bluetooth: hci2: command tx timeout [ 1207.498171][ C1] net_ratelimit: 645 callbacks suppressed [ 1207.498194][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1207.505168][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1207.512364][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1207.519107][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1207.525721][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1207.532223][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1207.539186][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1207.545888][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1207.552654][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1207.559304][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1208.570725][ T6320] Bluetooth: hci2: command tx timeout [ 1210.735092][ T6320] Bluetooth: hci2: command tx timeout [ 1212.508367][ C1] net_ratelimit: 633 callbacks suppressed [ 1212.508389][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1212.519643][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1212.536918][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1212.544044][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1212.605424][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1212.612897][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1212.620192][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1212.627270][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1212.633800][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1212.660872][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1217.532800][ C1] net_ratelimit: 621 callbacks suppressed [ 1217.532822][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1217.561652][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1217.568761][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1217.575430][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1217.582205][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1217.588860][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1217.595781][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1217.602367][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1217.609135][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1217.615706][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1222.554152][ C1] net_ratelimit: 658 callbacks suppressed [ 1222.554174][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1222.561413][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1222.568693][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1222.575603][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1222.582683][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1222.636084][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1222.643112][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1222.650194][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1222.657299][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1222.664219][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1224.225092][T22921] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1224.284358][T22921] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1224.296900][T22921] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1224.298132][T22921] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1224.298908][T22921] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1224.624920][T22921] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1226.193720][T22921] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1226.203884][T22921] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1226.214995][T22921] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1226.658539][T22921] Bluetooth: hci7: command tx timeout [ 1227.561675][ C1] net_ratelimit: 668 callbacks suppressed [ 1227.561697][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1227.568293][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1227.574740][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1227.581286][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1227.587775][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1227.594361][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1227.600903][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1227.607460][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1227.614029][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1227.620560][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1228.075564][T22921] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1228.668445][T22921] Bluetooth: hci7: command tx timeout [ 1230.866056][ T6320] Bluetooth: hci7: command tx timeout [ 1231.463676][ T6320] Bluetooth: hci0: command 0x0406 tx timeout [ 1232.106729][ T6320] Bluetooth: hci8: command tx timeout [ 1232.569339][ C1] net_ratelimit: 682 callbacks suppressed [ 1232.569364][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1232.575990][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1232.582501][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1232.589173][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1232.595713][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1232.602461][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1232.609018][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1232.615583][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1232.622144][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1232.628725][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1233.703530][T22921] Bluetooth: hci7: command tx timeout [ 1234.909433][ T6320] Bluetooth: hci8: command tx timeout [ 1235.245181][ T6758] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1235.251065][ T6758] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1235.252572][ T6758] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1235.253826][ T6758] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1235.254623][ T6758] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1236.986747][ T6320] Bluetooth: hci8: command tx timeout [ 1237.307244][ T6320] Bluetooth: hci9: command tx timeout [ 1237.583184][ C1] net_ratelimit: 709 callbacks suppressed [ 1237.583206][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1237.608845][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1237.616452][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1237.649678][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1237.670737][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1237.689597][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1237.720669][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1237.788459][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1237.795209][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1237.903637][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1239.266705][ T6320] Bluetooth: hci8: command tx timeout [ 1239.267572][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.267641][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.895151][ T6320] Bluetooth: hci9: command tx timeout [ 1242.196665][ T6320] Bluetooth: hci9: command tx timeout [ 1242.608281][ C1] net_ratelimit: 562 callbacks suppressed [ 1242.608303][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1242.615735][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1242.622942][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1242.629623][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1242.636091][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1242.642809][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1242.649418][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1242.656020][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1242.662569][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1242.669177][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1244.390460][ T6320] Bluetooth: hci9: command tx timeout [ 1245.824761][T22921] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1245.854862][T22921] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1245.871783][T22921] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1245.874218][T22921] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1245.875017][T22921] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1247.618551][ C1] net_ratelimit: 609 callbacks suppressed [ 1247.618575][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1247.626280][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1247.674305][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1247.695390][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1247.713897][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1247.734507][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1247.752983][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1247.777291][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1247.784335][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1247.814184][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1247.952996][T22921] Bluetooth: hci10: command tx timeout [ 1250.027330][T22921] Bluetooth: hci10: command tx timeout [ 1252.106942][T22921] Bluetooth: hci10: command tx timeout [ 1252.485541][ T6655] batman_adv: batadv0: Removing interface: gretap2 [ 1252.631109][ C1] net_ratelimit: 557 callbacks suppressed [ 1252.631132][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1252.638032][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1252.644882][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1252.651745][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1252.658948][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1252.665926][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1252.672930][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1252.680373][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1252.687359][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1252.694229][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1254.378245][T22921] Bluetooth: hci10: command tx timeout [ 1256.597596][ T6758] Bluetooth: hci4: command 0x0406 tx timeout [ 1257.643336][ C1] net_ratelimit: 620 callbacks suppressed [ 1257.643359][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1257.650357][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1257.658525][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1257.666412][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1257.674713][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1257.682847][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1257.691121][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1257.699494][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1257.708873][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1257.718124][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1262.647918][ C1] net_ratelimit: 624 callbacks suppressed [ 1262.647941][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1262.654946][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1262.662199][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1262.669231][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1262.676145][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1262.683104][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1262.690368][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1262.698047][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1262.705252][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1262.712333][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1267.659077][ C1] net_ratelimit: 602 callbacks suppressed [ 1267.659098][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1267.666050][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1267.672964][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1267.680066][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1267.686966][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1267.693990][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1267.700919][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1267.707778][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1267.714794][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1267.721682][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1269.785172][ T6758] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1269.809792][ T6758] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1269.811368][ T6758] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1269.814010][ T6758] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1269.815939][ T6758] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1271.946808][ T6758] Bluetooth: hci11: command tx timeout [ 1272.671129][ C1] net_ratelimit: 580 callbacks suppressed [ 1272.671152][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1272.678213][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1272.685827][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1272.692985][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1272.700240][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1272.707116][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1272.714379][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1272.721377][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1272.728710][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1272.735812][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1274.026908][ T6758] Bluetooth: hci11: command tx timeout [ 1276.107244][ T6758] Bluetooth: hci11: command tx timeout [ 1277.681254][ C1] net_ratelimit: 624 callbacks suppressed [ 1277.681276][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1277.689846][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1277.697702][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1277.705252][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1277.713034][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1277.785067][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1277.806388][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1277.813534][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1277.843068][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1277.861441][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1278.186944][ T6758] Bluetooth: hci11: command tx timeout [ 1282.689576][ C1] net_ratelimit: 593 callbacks suppressed [ 1282.689599][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1282.707319][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1282.713841][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1282.720534][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1282.727339][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1282.733926][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1282.740662][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1282.747393][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1282.754022][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1282.760839][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1282.766636][T22921] Bluetooth: hci3: command 0x0406 tx timeout [ 1287.704848][ C1] net_ratelimit: 571 callbacks suppressed [ 1287.704872][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1287.720409][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1287.757403][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1287.765657][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1287.796841][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1287.805139][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1287.823608][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1287.832210][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1287.840882][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1287.849396][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1288.350658][ T6758] Bluetooth: hci5: command 0x0406 tx timeout [ 1291.143710][T22921] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1291.156120][T22921] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1291.688878][ T6753] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1291.692836][ T6753] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1291.751977][ T5804] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1291.774199][ T6753] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1291.775978][ T6753] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1291.792795][ T6753] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1291.806884][ T6320] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1291.885131][ T6753] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1292.667284][T22921] Bluetooth: hci6: command 0x0406 tx timeout [ 1292.712664][ C1] net_ratelimit: 596 callbacks suppressed [ 1292.712685][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1292.746011][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1292.765208][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1292.784320][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1292.842616][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1292.850445][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1292.879983][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1292.885883][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1292.917079][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1292.924278][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1293.946698][T22921] Bluetooth: hci13: command tx timeout [ 1294.049500][T22921] Bluetooth: hci12: command tx timeout [ 1296.026628][T22921] Bluetooth: hci13: command tx timeout [ 1296.106562][T22921] Bluetooth: hci12: command tx timeout [ 1297.727071][ C1] net_ratelimit: 572 callbacks suppressed [ 1297.727094][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1297.733866][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1297.781001][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1297.804438][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1297.824422][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1297.857912][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1297.865046][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1297.903066][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1297.939901][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1297.959022][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1298.106641][T22921] Bluetooth: hci13: command tx timeout [ 1298.526649][T22921] Bluetooth: hci12: command tx timeout [ 1300.437974][T22921] Bluetooth: hci13: command tx timeout [ 1300.587182][T22921] Bluetooth: hci12: command tx timeout [ 1300.592213][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.592283][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.738195][ C1] net_ratelimit: 601 callbacks suppressed [ 1302.738217][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1302.745909][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1302.753805][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1302.763099][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1302.769964][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1302.776762][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1302.783717][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1302.790830][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1302.798100][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1302.804758][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1303.205525][ T37] audit: type=1326 audit(1763529735.475:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.13805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d0f6c9 code=0x7ffc0000 [ 1303.206947][ T37] audit: type=1326 audit(1763529735.485:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7061 comm="syz.2.13805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c08d0f6c9 code=0x7ffc0000 [ 1307.749785][ C1] net_ratelimit: 595 callbacks suppressed [ 1307.749809][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1307.766790][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1307.774515][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1307.782581][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1307.790485][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1307.798846][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1307.807056][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1307.815587][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1307.823863][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1307.831890][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1308.805512][ T6758] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1308.821383][ T6758] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1308.827775][ T6758] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1308.830240][ T6758] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1308.836812][ T6758] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1311.167701][ T6758] Bluetooth: hci14: command tx timeout [ 1312.759714][ C1] net_ratelimit: 598 callbacks suppressed [ 1312.759737][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1312.767317][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1312.774350][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1312.781566][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1312.788653][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1312.795906][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1312.803054][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1312.810237][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1312.817801][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1312.824931][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1314.419234][ T6758] Bluetooth: hci14: command tx timeout [ 1315.686719][ T6655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.564567][ T6758] Bluetooth: hci14: command tx timeout [ 1317.767148][ C1] net_ratelimit: 627 callbacks suppressed [ 1317.767170][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1317.774769][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1317.782469][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1317.810372][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1317.818459][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1317.826031][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1317.834190][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1317.842016][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1317.849800][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1317.857612][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1318.668451][ T6758] Bluetooth: hci14: command tx timeout [ 1318.698262][ T6655] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1322.779015][ C1] net_ratelimit: 617 callbacks suppressed [ 1322.779038][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1322.786384][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1322.794134][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1322.801790][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1322.809258][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1322.816652][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1322.823925][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1322.831407][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1322.839019][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1322.846420][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1322.968680][ T6655] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1323.601736][ T6655] bond0 (unregistering): Released all slaves [ 1324.957169][ T6655] bond1 (unregistering): Released all slaves [ 1327.789562][ C1] net_ratelimit: 594 callbacks suppressed [ 1327.789584][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1327.796703][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1327.803744][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1327.810819][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1327.818004][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1327.825094][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1327.832326][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1327.839693][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1327.846806][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1327.853875][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1328.581060][T22921] Bluetooth: hci2: command 0x0406 tx timeout [ 1328.758176][ T38] INFO: task kworker/0:3:5785 blocked for more than 143 seconds. [ 1328.758200][ T38] Not tainted syzkaller #0 [ 1328.758211][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1328.758220][ T38] task:kworker/0:3 state:D stack:19960 pid:5785 tgid:5785 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1328.758269][ T38] Workqueue: events switchdev_deferred_process_work [ 1328.758300][ T38] Call Trace: [ 1328.758308][ T38] [ 1328.758323][ T38] __schedule+0x16f3/0x4c20 [ 1328.758356][ T38] ? sched_clock+0x3f/0x60 [ 1328.758378][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1328.758397][ T38] ? rtlock_slowlock_locked+0xd8/0x4010 [ 1328.758430][ T38] ? __pfx___schedule+0x10/0x10 [ 1328.758478][ T38] rt_mutex_schedule+0x77/0xf0 [ 1328.758497][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1328.758532][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1328.758557][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1328.758580][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1328.758602][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1328.758635][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 1328.758667][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1328.758694][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 1328.758716][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1328.758735][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1328.758758][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1328.758781][ T38] switchdev_deferred_process_work+0xe/0x20 [ 1328.758804][ T38] process_scheduled_works+0xae1/0x17b0 [ 1328.758857][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1328.758898][ T38] worker_thread+0x8a0/0xda0 [ 1328.758948][ T38] kthread+0x711/0x8a0 [ 1328.758976][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1328.758997][ T38] ? __pfx_kthread+0x10/0x10 [ 1328.759016][ T38] ? rt_spin_unlock+0x150/0x200 [ 1328.759042][ T38] ? rt_spin_unlock+0x161/0x200 [ 1328.759066][ T38] ? __pfx_kthread+0x10/0x10 [ 1328.759090][ T38] ret_from_fork+0x4bc/0x870 [ 1328.759114][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1328.759143][ T38] ? __switch_to_asm+0x39/0x70 [ 1328.759161][ T38] ? __switch_to_asm+0x33/0x70 [ 1328.759177][ T38] ? __pfx_kthread+0x10/0x10 [ 1328.759201][ T38] ret_from_fork_asm+0x1a/0x30 [ 1328.759239][ T38] [ 1328.759267][ T38] INFO: task kworker/u8:9:5958 blocked for more than 143 seconds. [ 1328.759280][ T38] Not tainted syzkaller #0 [ 1328.759290][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1328.759299][ T38] task:kworker/u8:9 state:D stack:19176 pid:5958 tgid:5958 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1328.759348][ T38] Workqueue: events_unbound linkwatch_event [ 1328.759369][ T38] Call Trace: [ 1328.759376][ T38] [ 1328.759388][ T38] __schedule+0x16f3/0x4c20 [ 1328.759426][ T38] ? __mod_timer+0xb64/0xf60 [ 1328.759457][ T38] ? __pfx___schedule+0x10/0x10 [ 1328.759499][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1328.759525][ T38] rt_mutex_schedule+0x77/0xf0 [ 1328.759543][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1328.759564][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1328.759603][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1328.759626][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1328.759647][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1328.759680][ T38] ? linkwatch_event+0xe/0x60 [ 1328.759707][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1328.759733][ T38] ? linkwatch_event+0xe/0x60 [ 1328.759751][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1328.759770][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1328.759792][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1328.759815][ T38] linkwatch_event+0xe/0x60 [ 1328.759834][ T38] process_scheduled_works+0xae1/0x17b0 [ 1328.759888][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1328.759927][ T38] worker_thread+0x8a0/0xda0 [ 1328.759977][ T38] kthread+0x711/0x8a0 [ 1328.760004][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1328.760025][ T38] ? __pfx_kthread+0x10/0x10 [ 1328.760045][ T38] ? rt_spin_unlock+0x150/0x200 [ 1328.760118][ T38] ? rt_spin_unlock+0x161/0x200 [ 1328.760136][ T38] ? __pfx_kthread+0x10/0x10 [ 1328.760161][ T38] ret_from_fork+0x4bc/0x870 [ 1328.760185][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1328.760214][ T38] ? __switch_to_asm+0x39/0x70 [ 1328.760230][ T38] ? __switch_to_asm+0x33/0x70 [ 1328.760246][ T38] ? __pfx_kthread+0x10/0x10 [ 1328.760271][ T38] ret_from_fork_asm+0x1a/0x30 [ 1328.760307][ T38] [ 1328.760361][ T38] INFO: task syz-executor:6852 blocked for more than 143 seconds. [ 1328.760374][ T38] Not tainted syzkaller #0 [ 1328.760384][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1328.760393][ T38] task:syz-executor state:D stack:21816 pid:6852 tgid:6852 ppid:1 task_flags:0x400140 flags:0x00080003 [ 1328.760434][ T38] Call Trace: [ 1328.760440][ T38] [ 1328.760452][ T38] __schedule+0x16f3/0x4c20 [ 1328.760503][ T38] ? __pfx___schedule+0x10/0x10 [ 1328.760546][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1328.760573][ T38] rt_mutex_schedule+0x77/0xf0 [ 1328.760591][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1328.760611][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1328.760651][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1328.760674][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1328.760696][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1328.760714][ T38] ? __lock_acquire+0xab9/0xd20 [ 1328.760748][ T38] ? register_nexthop_notifier+0x80/0x210 [ 1328.760785][ T38] ? register_nexthop_notifier+0x80/0x210 [ 1328.760804][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1328.760830][ T38] register_nexthop_notifier+0x80/0x210 [ 1328.760858][ T38] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 1328.760878][ T38] ? net_generic+0x1e/0x240 [ 1328.760900][ T38] ? net_generic+0x1e/0x240 [ 1328.760918][ T38] ? net_generic+0x1e/0x240 [ 1328.760942][ T38] ? __asan_memset+0x22/0x50 [ 1328.760967][ T38] ops_init+0x35c/0x5c0 [ 1328.760998][ T38] setup_net+0xfe/0x320 [ 1328.761020][ T38] ? __pfx_setup_net+0x10/0x10 [ 1328.761040][ T38] ? __mutex_rt_init+0x3b/0x50 [ 1328.761073][ T38] ? preinit_net+0x4ab/0x770 [ 1328.761093][ T38] copy_net_ns+0x34e/0x4e0 [ 1328.761117][ T38] create_new_namespaces+0x3f3/0x720 [ 1328.761143][ T38] ? security_capable+0x7e/0x2e0 [ 1328.761173][ T38] unshare_nsproxy_namespaces+0x11c/0x170 [ 1328.761198][ T38] ksys_unshare+0x4c8/0x8c0 [ 1328.761228][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 1328.761248][ T38] ? dnotify_flush+0x1e8/0x5c0 [ 1328.761268][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 1328.761301][ T38] __x64_sys_unshare+0x38/0x50 [ 1328.761322][ T38] do_syscall_64+0xfa/0xfa0 [ 1328.761344][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1328.761367][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.761385][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1328.761407][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.761424][ T38] RIP: 0033:0x7efd2a470ec7 [ 1328.761441][ T38] RSP: 002b:00007fff510ab6a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1328.761460][ T38] RAX: ffffffffffffffda RBX: 00007efd2a6c5f40 RCX: 00007efd2a470ec7 [ 1328.761475][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1328.761487][ T38] RBP: 00007efd2a6c67b8 R08: 0000000000000000 R09: 0000000000000000 [ 1328.761499][ T38] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 1328.761511][ T38] R13: 0000000000000003 R14: 00007fff510ab978 R15: 0000000000000000 [ 1328.761544][ T38] [ 1328.761553][ T38] INFO: task syz-executor:6857 blocked for more than 143 seconds. [ 1328.761566][ T38] Not tainted syzkaller #0 [ 1328.761575][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1328.761585][ T38] task:syz-executor state:D stack:23016 pid:6857 tgid:6857 ppid:1 task_flags:0x400140 flags:0x00080003 [ 1328.761632][ T38] Call Trace: [ 1328.761638][ T38] [ 1328.761651][ T38] __schedule+0x16f3/0x4c20 [ 1328.761702][ T38] ? __pfx___schedule+0x10/0x10 [ 1328.761745][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1328.761772][ T38] rt_mutex_schedule+0x77/0xf0 [ 1328.761790][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1328.761810][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1328.761850][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1328.761873][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1328.761894][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1328.761912][ T38] ? __lock_acquire+0xab9/0xd20 [ 1328.761945][ T38] ? register_nexthop_notifier+0x80/0x210 [ 1328.761981][ T38] ? register_nexthop_notifier+0x80/0x210 [ 1328.762000][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1328.762026][ T38] register_nexthop_notifier+0x80/0x210 [ 1328.762062][ T38] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 1328.762082][ T38] ? net_generic+0x1e/0x240 [ 1328.762102][ T38] ? net_generic+0x1e/0x240 [ 1328.762121][ T38] ? net_generic+0x1e/0x240 [ 1328.762145][ T38] ? __asan_memset+0x22/0x50 [ 1328.762169][ T38] ops_init+0x35c/0x5c0 [ 1328.762199][ T38] setup_net+0xfe/0x320 [ 1328.762220][ T38] ? __pfx_setup_net+0x10/0x10 [ 1328.762241][ T38] ? __mutex_rt_init+0x3b/0x50 [ 1328.762261][ T38] ? preinit_net+0x4ab/0x770 [ 1328.762282][ T38] copy_net_ns+0x34e/0x4e0 [ 1328.762305][ T38] create_new_namespaces+0x3f3/0x720 [ 1328.762330][ T38] ? security_capable+0x7e/0x2e0 [ 1328.762359][ T38] unshare_nsproxy_namespaces+0x11c/0x170 [ 1328.762384][ T38] ksys_unshare+0x4c8/0x8c0 [ 1328.762414][ T38] ? __pfx_ksys_unshare+0x10/0x10 [ 1328.762435][ T38] ? dnotify_flush+0x1e8/0x5c0 [ 1328.762453][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 1328.762485][ T38] __x64_sys_unshare+0x38/0x50 [ 1328.762508][ T38] do_syscall_64+0xfa/0xfa0 [ 1328.762529][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1328.762551][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.762570][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1328.762592][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.762609][ T38] RIP: 0033:0x7fc65f6b0ec7 [ 1328.762624][ T38] RSP: 002b:00007ffc2cc86098 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1328.762643][ T38] RAX: ffffffffffffffda RBX: 00007fc65f905f40 RCX: 00007fc65f6b0ec7 [ 1328.762657][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1328.762669][ T38] RBP: 00007fc65f9067b8 R08: 0000000000000000 R09: 0000000000000000 [ 1328.762680][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1328.762691][ T38] R13: 0000000000000003 R14: 00007ffc2cc86368 R15: 0000000000000000 [ 1328.762724][ T38] [ 1328.762753][ T38] [ 1328.762753][ T38] Showing all locks held in the system: [ 1328.762767][ T38] 3 locks held by rcuc/0/20: [ 1328.762779][ T38] 5 locks held by ksoftirqd/1/30: [ 1328.762791][ T38] 1 lock held by khungtaskd/38: [ 1328.762801][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1328.762872][ T38] 1 lock held by klogd/5154: [ 1328.762883][ T38] 2 locks held by getty/5551: [ 1328.762893][ T38] #0: ffff88823bf340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1328.762937][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1328.762985][ T38] 4 locks held by syz-executor/5783: [ 1328.762996][ T38] 3 locks held by kworker/0:3/5785: [ 1328.763006][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1328.763051][ T38] #1: ffffc90004ae7ba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1328.763099][ T38] #2: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1328.763147][ T38] 4 locks held by syz-executor/5795: [ 1328.763162][ T38] 3 locks held by kworker/u8:9/5958: [ 1328.763172][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1328.763220][ T38] #1: ffffc90005b87ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1328.763263][ T38] #2: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1328.763314][ T38] 3 locks held by kworker/u8:10/24646: [ 1328.763326][ T38] #0: ffff888030c52938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1328.763370][ T38] #1: ffffc90020e0fba0 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1328.763414][ T38] #2: ffff8880b883faa8 (&s->lock_key#8){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x1400 [ 1328.763459][ T38] 3 locks held by kworker/u8:14/31938: [ 1328.763470][ T38] #0: ffff88802fa9f938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1328.763514][ T38] #1: ffffc9001e9a7ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1328.763558][ T38] #2: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1328.763601][ T38] 4 locks held by kworker/u8:5/6655: [ 1328.763612][ T38] 2 locks held by syz-executor/6748: [ 1328.763622][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1328.763662][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 1328.763701][ T38] 6 locks held by kworker/u9:3/6758: [ 1328.763711][ T38] #0: ffff88803cf0b138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1328.763759][ T38] #1: ffffc900211cfba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1328.763803][ T38] #2: ffff88806f4c0e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1328.763862][ T38] #3: ffff88806f4c00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1328.763907][ T38] #4: ffffffff8e9cbcb8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1328.763953][ T38] #5: ffff88806b4f6b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1328.764003][ T38] 5 locks held by syz-executor/6784: [ 1328.764013][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1328.764052][ T38] #1: ffffffff8e5cc360 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1328.764101][ T38] #2: ffffffff8e5cc5a0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1328.764142][ T38] #3: ffff888031ead118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 1328.764185][ T38] #4: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 1328.764225][ T38] 6 locks held by syz-executor/6820: [ 1328.764236][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1328.764275][ T38] #1: ffffffff8e5cc360 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 1328.764316][ T38] #2: ffffffff8e5cc5a0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 1328.764357][ T38] #3: ffff8880380d5118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 1328.764399][ T38] #4: ffff8880380d5430 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3b0 [ 1328.764444][ T38] #5: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 1328.764484][ T38] 2 locks held by syz-executor/6852: [ 1328.764494][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1328.764534][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 1328.764577][ T38] 2 locks held by syz-executor/6857: [ 1328.764588][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1328.764627][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 1328.764671][ T38] 1 lock held by syz-executor/6894: [ 1328.764681][ T38] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1328.764726][ T38] 1 lock held by syz-executor/6920: [ 1328.764737][ T38] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1328.764782][ T38] 1 lock held by syz-executor/6929: [ 1328.764792][ T38] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1328.764836][ T38] 1 lock held by syz-executor/6938: [ 1328.764847][ T38] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1328.764890][ T38] 1 lock held by syz-executor/6960: [ 1328.764901][ T38] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1328.764945][ T38] 1 lock held by syz-executor/6998: [ 1328.764955][ T38] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1328.764999][ T38] 1 lock held by syz-executor/7031: [ 1328.765010][ T38] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1328.765055][ T38] 1 lock held by syz-executor/7036: [ 1328.765074][ T38] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1328.765119][ T38] 1 lock held by syz-executor/7068: [ 1328.765130][ T38] #0: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1328.765174][ T38] 1 lock held by syz-executor/7080: [ 1328.765185][ T38] [ 1328.765191][ T38] ============================================= [ 1328.765191][ T38] [ 1328.765201][ T38] NMI backtrace for cpu 1 [ 1328.765215][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1328.765234][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1328.765245][ T38] Call Trace: [ 1328.765253][ T38] [ 1328.765261][ T38] dump_stack_lvl+0x189/0x250 [ 1328.765288][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1328.765311][ T38] ? __pfx__printk+0x10/0x10 [ 1328.765345][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1328.765368][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1328.765391][ T38] ? __pfx__printk+0x10/0x10 [ 1328.765416][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1328.765439][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1328.765461][ T38] watchdog+0xf60/0xfa0 [ 1328.765489][ T38] ? watchdog+0x1e2/0xfa0 [ 1328.765518][ T38] kthread+0x711/0x8a0 [ 1328.765544][ T38] ? __pfx_watchdog+0x10/0x10 [ 1328.765565][ T38] ? __pfx_kthread+0x10/0x10 [ 1328.765585][ T38] ? rt_spin_unlock+0x150/0x200 [ 1328.765608][ T38] ? rt_spin_unlock+0x161/0x200 [ 1328.765626][ T38] ? __pfx_kthread+0x10/0x10 [ 1328.765649][ T38] ret_from_fork+0x4bc/0x870 [ 1328.765673][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1328.765700][ T38] ? __switch_to_asm+0x39/0x70 [ 1328.765716][ T38] ? __switch_to_asm+0x33/0x70 [ 1328.765732][ T38] ? __pfx_kthread+0x10/0x10 [ 1328.765755][ T38] ret_from_fork_asm+0x1a/0x30 [ 1328.765790][ T38] [ 1328.765797][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1328.765823][ C0] NMI backtrace for cpu 0 [ 1328.765845][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1328.765865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1328.765876][ C0] RIP: 0010:unwind_get_return_address+0x63/0x90 [ 1328.765902][ C0] Code: 37 00 74 08 48 89 df e8 bb 01 ad 00 48 8b 3b e8 93 d3 18 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 a0 01 ad 00 48 8b 03 02 31 c0 5b 41 5e 41 5f e9 cf e4 50 09 cc 89 d9 80 e1 07 80 c1 [ 1328.765918][ C0] RSP: 0018:ffffc90000195ee8 EFLAGS: 00000246 [ 1328.765933][ C0] RAX: ffffffff88a867a6 RBX: ffffc90000195f50 RCX: 4fb5bb78ac0bd500 [ 1328.765947][ C0] RDX: 0000000000000001 RSI: ffffffff8cf6550b RDI: ffffffff88a867a6 [ 1328.765960][ C0] RBP: ffffc90000195f90 R08: ffffc90000197578 R09: 0000000000000000 [ 1328.765973][ C0] R10: ffffc90000195f58 R11: fffff52000032bed R12: ffff88801b6e5a00 [ 1328.765986][ C0] R13: ffffffff89a2af7d R14: dffffc0000000000 R15: 1ffff92000032bea [ 1328.766000][ C0] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 1328.766015][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1328.766027][ C0] CR2: 00007f5be5de6019 CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 1328.766044][ C0] Call Trace: [ 1328.766050][ C0] [ 1328.766058][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1328.766082][ C0] arch_stack_walk+0xfc/0x150 [ 1328.766107][ C0] ? __napi_poll+0xb6/0x540 [ 1328.766132][ C0] stack_trace_save+0x9c/0xe0 [ 1328.766150][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1328.766166][ C0] ? nf_hook_slow+0xc5/0x220 [ 1328.766185][ C0] ? NF_HOOK+0x61b/0x6b0 [ 1328.766207][ C0] ? br_nf_forward_ip+0x647/0x7e0 [ 1328.766229][ C0] ? nf_hook_slow+0xc5/0x220 [ 1328.766250][ C0] kasan_save_track+0x3e/0x80 [ 1328.766269][ C0] ? kasan_save_track+0x3e/0x80 [ 1328.766288][ C0] ? __kasan_save_free_info+0x46/0x50 [ 1328.766305][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1328.766330][ C0] ? kmem_cache_free+0x19a/0x910 [ 1328.766351][ C0] ? br_nf_dev_queue_xmit+0x52d/0x2130 [ 1328.766373][ C0] ? NF_HOOK+0x61b/0x6b0 [ 1328.766393][ C0] ? br_nf_post_routing+0xb66/0xfe0 [ 1328.766415][ C0] ? nf_hook_slow+0xc5/0x220 [ 1328.766434][ C0] ? NF_HOOK+0x215/0x3c0 [ 1328.766449][ C0] ? br_forward_finish+0xd3/0x130 [ 1328.766465][ C0] ? br_nf_forward_finish+0xa40/0xe60 [ 1328.766487][ C0] ? NF_HOOK+0x61b/0x6b0 [ 1328.766507][ C0] ? br_nf_forward_ip+0x647/0x7e0 [ 1328.766529][ C0] ? nf_hook_slow+0xc5/0x220 [ 1328.766546][ C0] ? NF_HOOK+0x215/0x3c0 [ 1328.766564][ C0] ? __br_forward+0x41e/0x600 [ 1328.766583][ C0] ? br_handle_frame_finish+0x15a3/0x1c90 [ 1328.766606][ C0] ? br_nf_hook_thresh+0x3c6/0x4a0 [ 1328.766627][ C0] ? br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 1328.766643][ C0] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 1328.766658][ C0] ? br_handle_frame+0x971/0x1500 [ 1328.766680][ C0] ? __netif_receive_skb_core+0x10b9/0x4380 [ 1328.766702][ C0] ? __netif_receive_skb+0x72/0x380 [ 1328.766723][ C0] ? process_backlog+0x31e/0x900 [ 1328.766758][ C0] __kasan_save_free_info+0x46/0x50 [ 1328.766776][ C0] __kasan_slab_free+0x5c/0x80 [ 1328.766796][ C0] kmem_cache_free+0x19a/0x910 [ 1328.766816][ C0] ? br_nf_dev_queue_xmit+0x52d/0x2130 [ 1328.766839][ C0] ? __skb_ext_put+0x218/0x2e0 [ 1328.766861][ C0] br_nf_dev_queue_xmit+0x52d/0x2130 [ 1328.766890][ C0] ? NF_HOOK+0x9e/0x6b0 [ 1328.766911][ C0] NF_HOOK+0x61b/0x6b0 [ 1328.766937][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1328.766962][ C0] ? net_generic+0x1e/0x240 [ 1328.766983][ C0] ? net_generic+0x1e/0x240 [ 1328.767004][ C0] ? net_generic+0x1e/0x240 [ 1328.767024][ C0] ? skb_pull+0xc1/0x1d0 [ 1328.767047][ C0] br_nf_post_routing+0xb66/0xfe0 [ 1328.767068][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 1328.767095][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 1328.767119][ C0] nf_hook_slow+0xc5/0x220 [ 1328.767142][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1328.767163][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1328.767184][ C0] NF_HOOK+0x215/0x3c0 [ 1328.767206][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1328.767225][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1328.767247][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1328.767274][ C0] br_forward_finish+0xd3/0x130 [ 1328.767294][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1328.767322][ C0] br_nf_forward_finish+0xa40/0xe60 [ 1328.767351][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1328.767375][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1328.767398][ C0] ? NF_HOOK+0x9e/0x6b0 [ 1328.767420][ C0] ? NF_HOOK+0x9e/0x6b0 [ 1328.767441][ C0] NF_HOOK+0x61b/0x6b0 [ 1328.767466][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1328.767496][ C0] br_nf_forward_ip+0x647/0x7e0 [ 1328.767519][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 1328.767543][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1328.767567][ C0] nf_hook_slow+0xc5/0x220 [ 1328.767586][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1328.767607][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1328.767626][ C0] NF_HOOK+0x215/0x3c0 [ 1328.767648][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1328.767667][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1328.767689][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1328.767715][ C0] __br_forward+0x41e/0x600 [ 1328.767735][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1328.767755][ C0] ? skb_clone+0x246/0x3a0 [ 1328.767777][ C0] ? __pfx___br_forward+0x10/0x10 [ 1328.767803][ C0] br_handle_frame_finish+0x15a3/0x1c90 [ 1328.767832][ C0] ? skb_ext_add+0x148/0x8f0 [ 1328.767850][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1328.767872][ C0] ? __netif_receive_skb+0x72/0x380 [ 1328.767894][ C0] ? __napi_poll+0xb6/0x540 [ 1328.767914][ C0] ? net_rx_action+0x5f7/0xda0 [ 1328.767929][ C0] ? handle_softirqs+0x22f/0x710 [ 1328.767948][ C0] ? rcu_cpu_kthread+0xc3d/0x1b50 [ 1328.767969][ C0] ? smpboot_thread_fn+0x542/0xa60 [ 1328.767989][ C0] ? kthread+0x711/0x8a0 [ 1328.768009][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1328.768033][ C0] ? nf_hook_slow+0x176/0x220 [ 1328.768052][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1328.768075][ C0] br_nf_hook_thresh+0x3c6/0x4a0 [ 1328.768103][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1328.768127][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1328.768156][ C0] br_nf_pre_routing_finish_ipv6+0x999/0xd60 [ 1328.768173][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1328.768200][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 1328.768217][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 1328.768235][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1328.768253][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1328.768269][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 1328.768296][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1328.768323][ C0] br_handle_frame+0x971/0x1500 [ 1328.768351][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1328.768376][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1328.768402][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1328.768426][ C0] __netif_receive_skb_core+0x10b9/0x4380 [ 1328.768448][ C0] ? __lock_acquire+0xab9/0xd20 [ 1328.768475][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1328.768498][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1328.768522][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1328.768545][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1328.768569][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1328.768592][ C0] ? __lock_acquire+0xab9/0xd20 [ 1328.768615][ C0] ? __lock_acquire+0xab9/0xd20 [ 1328.768641][ C0] ? process_backlog+0x27b/0x900 [ 1328.768658][ C0] ? process_backlog+0x27b/0x900 [ 1328.768673][ C0] __netif_receive_skb+0x72/0x380 [ 1328.768700][ C0] ? process_backlog+0x27b/0x900 [ 1328.768714][ C0] process_backlog+0x31e/0x900 [ 1328.768737][ C0] __napi_poll+0xb6/0x540 [ 1328.768762][ C0] net_rx_action+0x5f7/0xda0 [ 1328.768779][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1328.768804][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1328.768822][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1328.768849][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1328.768863][ C0] ? kasan_save_track+0x4f/0x80 [ 1328.768882][ C0] ? kasan_save_track+0x3e/0x80 [ 1328.768901][ C0] ? __kasan_save_free_info+0x46/0x50 [ 1328.768918][ C0] ? smpboot_thread_fn+0x542/0xa60 [ 1328.768944][ C0] handle_softirqs+0x22f/0x710 [ 1328.768968][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1328.768993][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 1328.769014][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1328.769039][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 1328.769061][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 1328.769083][ C0] rcu_cpu_kthread+0xc3d/0x1b50 [ 1328.769109][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 1328.769139][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1328.769163][ C0] ? __lock_acquire+0xab9/0xd20 [ 1328.769184][ C0] ? __pfx___schedule+0x10/0x10 [ 1328.769213][ C0] ? schedule+0x91/0x360 [ 1328.769238][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1328.769257][ C0] smpboot_thread_fn+0x542/0xa60 [ 1328.769291][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1328.769327][ C0] kthread+0x711/0x8a0 [ 1328.769351][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1328.769370][ C0] ? __pfx_kthread+0x10/0x10 [ 1328.769396][ C0] ? rt_spin_unlock+0x150/0x200 [ 1328.769417][ C0] ? rt_spin_unlock+0x161/0x200 [ 1328.769435][ C0] ? __pfx_kthread+0x10/0x10 [ 1328.769458][ C0] ret_from_fork+0x4bc/0x870 [ 1328.769478][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1328.769501][ C0] ? __switch_to_asm+0x39/0x70 [ 1328.769517][ C0] ? __switch_to_asm+0x33/0x70 [ 1328.769532][ C0] ? __pfx_kthread+0x10/0x10 [ 1328.769555][ C0] ret_from_fork_asm+0x1a/0x30 [ 1328.769582][ C0] [ 1332.614156][T22921] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1332.633625][T22921] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1332.635576][T22921] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1332.638877][T22921] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1332.639729][T22921] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1332.804449][ C1] net_ratelimit: 554 callbacks suppressed [ 1332.804472][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1332.822077][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1332.830146][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1332.837848][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1332.845062][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1332.853107][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1332.864223][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1332.871695][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1332.879541][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1332.887519][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1334.799407][T22921] Bluetooth: hci15: command tx timeout [ 1336.826812][T22921] Bluetooth: hci15: command tx timeout [ 1337.808699][ C1] net_ratelimit: 594 callbacks suppressed [ 1337.808722][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1337.835260][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1337.862661][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1337.896617][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1337.923136][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1337.930061][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0) [ 1337.937127][ C1] bridge0: received packet on team0 with own address as source address (addr:62:d1:83:e8:0a:13, vlan:0)