last executing test programs: 9.59667761s ago: executing program 1 (id=63): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) 5.642901488s ago: executing program 2 (id=95): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0xffff187f, 0x4) 5.457203342s ago: executing program 2 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) 4.747258665s ago: executing program 1 (id=100): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="00172100000045e971e8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.698508324s ago: executing program 2 (id=101): r0 = fsopen(&(0x7f0000000440)='proc\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4.520789347s ago: executing program 2 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 3.884609716s ago: executing program 2 (id=104): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}]]}, 0x30}, 0x1, 0x0, 0x0, 0x200048d0}, 0x4000010) 3.38079262s ago: executing program 3 (id=106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.300188234s ago: executing program 0 (id=107): unshare(0x4000480) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x1f5) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x2001, 0x0) lseek(r0, 0x10001, 0x0) 3.16177467s ago: executing program 3 (id=108): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 3.079367056s ago: executing program 0 (id=109): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x4, 0x1, @thr={&(0x7f0000000200), 0x0}}, &(0x7f0000000140)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', 0x801, &(0x7f00000003c0)=ANY=[], 0x2, 0x185, &(0x7f00000001c0)="$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") timer_gettime(r0, &(0x7f00000000c0)) 2.89261862s ago: executing program 2 (id=110): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 2.363658069s ago: executing program 32 (id=110): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 2.355198111s ago: executing program 3 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd task.uid=0 exec.argv[0X=\"sh= exec.envp[\"PAT]=]=\"/bin\"\n', 0x4c) 2.258921198s ago: executing program 1 (id=113): mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x0, @private2, 0x3}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) 2.053012377s ago: executing program 3 (id=114): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ftruncate(r0, 0xc17e) ftruncate(r0, 0x84) 1.87567785s ago: executing program 1 (id=115): r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xee00]) setresgid(r2, 0xee01, 0x0) sendmmsg$unix(r1, &(0x7f000000b240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x800}}], 0x1, 0x0) 1.296480018s ago: executing program 1 (id=116): syz_open_dev$sndpcmc(0x0, 0x0, 0x2) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) 1.153630424s ago: executing program 3 (id=117): timer_create(0x0, 0x0, &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 979.712987ms ago: executing program 1 (id=118): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0x2, 0x1, 0x3, 0xc, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xd71, 0x0, 0x1, 0x10, 0x4}) 928.883506ms ago: executing program 0 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup3(r1, r0, 0x80000) 665.683416ms ago: executing program 0 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xf3}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x56}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c1}, 0x48c0) 271.550559ms ago: executing program 0 (id=121): io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018003f000000050017"], 0x50}}, 0x4080) 173.546467ms ago: executing program 3 (id=122): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0x2, @thr={0x0, 0x0}}) 0s ago: executing program 0 (id=123): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read(r1, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0xfffffdfc) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 55.353083][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.363041][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. syzkaller login: [ 75.531601][ T5766] cgroup: Unknown subsys name 'net' [ 75.698272][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.313668][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.885226][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.893306][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.902414][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.910004][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.917824][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.925282][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.934405][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.942243][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.950349][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.957650][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.983813][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.026167][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.034413][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.042072][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.050387][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.058319][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.066698][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.070795][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.076478][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.083844][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.088707][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.102598][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.111576][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.119127][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.534491][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 79.593508][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 79.664779][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 79.753801][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.761227][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.768700][ T5778] bridge_slave_0: entered allmulticast mode [ 79.775948][ T5778] bridge_slave_0: entered promiscuous mode [ 79.789539][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 79.828182][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.835495][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.842892][ T5778] bridge_slave_1: entered allmulticast mode [ 79.850216][ T5778] bridge_slave_1: entered promiscuous mode [ 79.931016][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.938217][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.948285][ T5780] bridge_slave_0: entered allmulticast mode [ 79.955408][ T5780] bridge_slave_0: entered promiscuous mode [ 79.965298][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.972484][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.979716][ T5780] bridge_slave_1: entered allmulticast mode [ 79.987150][ T5780] bridge_slave_1: entered promiscuous mode [ 79.996630][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.009180][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.016569][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.024512][ T5779] bridge_slave_0: entered allmulticast mode [ 80.031598][ T5779] bridge_slave_0: entered promiscuous mode [ 80.064300][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.073763][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.083427][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.090741][ T5779] bridge_slave_1: entered allmulticast mode [ 80.097631][ T5779] bridge_slave_1: entered promiscuous mode [ 80.168901][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.187105][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.194634][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.201917][ T5781] bridge_slave_0: entered allmulticast mode [ 80.208856][ T5781] bridge_slave_0: entered promiscuous mode [ 80.218524][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.232190][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.243680][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.255980][ T5778] team0: Port device team_slave_0 added [ 80.265917][ T5778] team0: Port device team_slave_1 added [ 80.272087][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.279280][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.286639][ T5781] bridge_slave_1: entered allmulticast mode [ 80.295471][ T5781] bridge_slave_1: entered promiscuous mode [ 80.371834][ T5779] team0: Port device team_slave_0 added [ 80.384146][ T5780] team0: Port device team_slave_0 added [ 80.392088][ T5780] team0: Port device team_slave_1 added [ 80.408736][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.415953][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.444846][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.468464][ T5779] team0: Port device team_slave_1 added [ 80.484271][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.491306][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.520095][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.540877][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.553580][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.571881][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.578870][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.605076][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.656593][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.669299][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.698421][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.727015][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.734260][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.760280][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.773274][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.780733][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.806764][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.821672][ T5781] team0: Port device team_slave_0 added [ 80.844947][ T5778] hsr_slave_0: entered promiscuous mode [ 80.852119][ T5778] hsr_slave_1: entered promiscuous mode [ 80.867449][ T5781] team0: Port device team_slave_1 added [ 80.911794][ T5780] hsr_slave_0: entered promiscuous mode [ 80.918387][ T5780] hsr_slave_1: entered promiscuous mode [ 80.925326][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.933831][ T5780] Cannot create hsr debugfs directory [ 80.975074][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.982799][ T5792] Bluetooth: hci0: command tx timeout [ 80.988411][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.015021][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.028317][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.035905][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.062363][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.090006][ T5779] hsr_slave_0: entered promiscuous mode [ 81.096415][ T5779] hsr_slave_1: entered promiscuous mode [ 81.102759][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.110428][ T5779] Cannot create hsr debugfs directory [ 81.139582][ T5792] Bluetooth: hci3: command tx timeout [ 81.142444][ T5782] Bluetooth: hci2: command tx timeout [ 81.219803][ T5782] Bluetooth: hci1: command tx timeout [ 81.275708][ T5781] hsr_slave_0: entered promiscuous mode [ 81.282213][ T5781] hsr_slave_1: entered promiscuous mode [ 81.288339][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.296913][ T5781] Cannot create hsr debugfs directory [ 81.613657][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.644962][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.656079][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.666209][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.719261][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.730831][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.752390][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.769649][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.871837][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.897651][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.908437][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.943554][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.996777][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.006868][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.016846][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.039085][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.101926][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.174649][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.194163][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.221018][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.244081][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.251368][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.263650][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.296917][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.304050][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.318496][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.325687][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.341313][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.348447][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.383413][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.414464][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.421646][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.452605][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.459776][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.479032][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.577385][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.607415][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.648536][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.655751][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.708644][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.715837][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.822668][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.026828][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.061013][ T5782] Bluetooth: hci0: command tx timeout [ 83.126266][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.229795][ T5782] Bluetooth: hci2: command tx timeout [ 83.230205][ T5792] Bluetooth: hci3: command tx timeout [ 83.250893][ T5778] veth0_vlan: entered promiscuous mode [ 83.301739][ T5792] Bluetooth: hci1: command tx timeout [ 83.324977][ T5778] veth1_vlan: entered promiscuous mode [ 83.344595][ T5779] veth0_vlan: entered promiscuous mode [ 83.407893][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.423004][ T5778] veth0_macvtap: entered promiscuous mode [ 83.437870][ T5779] veth1_vlan: entered promiscuous mode [ 83.476237][ T5778] veth1_macvtap: entered promiscuous mode [ 83.506097][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.548961][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.595239][ T5779] veth0_macvtap: entered promiscuous mode [ 83.636948][ T5780] veth0_vlan: entered promiscuous mode [ 83.646324][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.659370][ T5779] veth1_macvtap: entered promiscuous mode [ 83.694343][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.705280][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.717689][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.727568][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.777148][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.819889][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.835389][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.845118][ T5780] veth1_vlan: entered promiscuous mode [ 83.865578][ T5781] veth0_vlan: entered promiscuous mode [ 83.920965][ T5781] veth1_vlan: entered promiscuous mode [ 83.927609][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.939348][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.955166][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.004837][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.016607][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.026864][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.035908][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.112013][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.122585][ T5781] veth0_macvtap: entered promiscuous mode [ 84.132813][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.197587][ T5780] veth0_macvtap: entered promiscuous mode [ 84.212716][ T5781] veth1_macvtap: entered promiscuous mode [ 84.252689][ T5780] veth1_macvtap: entered promiscuous mode [ 84.260536][ T2891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.268401][ T2891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.308112][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.327600][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.337991][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.355244][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.367243][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.382676][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.397391][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.408774][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.425250][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.437228][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.454588][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.472925][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.483309][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.496603][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.518556][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.539498][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.553835][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.569808][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.585628][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.603727][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.631853][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.694861][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.729251][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.750603][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.770318][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.795557][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.825718][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.855683][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.903853][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.930176][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.939015][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959653][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.980086][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.991875][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.125567][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.142644][ T5792] Bluetooth: hci0: command tx timeout [ 85.157528][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.247548][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.260291][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.299905][ T5792] Bluetooth: hci2: command tx timeout [ 85.301117][ T5782] Bluetooth: hci3: command tx timeout [ 85.384288][ T5782] Bluetooth: hci1: command tx timeout [ 85.451345][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.459305][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.549329][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.573889][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.681653][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.702858][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.271473][ T5843] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.411826][ T5877] syz.3.13[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.458211][ T5877] loop3: detected capacity change from 0 to 64 [ 86.505837][ T5843] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.549508][ T5843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.567620][ T5843] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 86.619476][ T5843] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.671396][ T5843] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 86.706974][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.045215][ T5887] FAULT_INJECTION: forcing a failure. [ 87.045215][ T5887] name failslab, interval 1, probability 0, space 0, times 1 [ 87.109920][ T5887] CPU: 1 PID: 5887 Comm: syz.3.16 Not tainted syzkaller #0 [ 87.117291][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 87.127410][ T5887] Call Trace: [ 87.130737][ T5887] [ 87.133701][ T5887] dump_stack_lvl+0x18c/0x250 [ 87.138447][ T5887] ? show_regs_print_info+0x20/0x20 [ 87.143697][ T5887] ? load_image+0x420/0x420 [ 87.148293][ T5887] ? __lock_acquire+0x7d80/0x7d80 [ 87.153362][ T5887] should_fail_ex+0x394/0x4c0 [ 87.158093][ T5887] should_failslab+0x9/0x20 [ 87.162655][ T5887] slab_pre_alloc_hook+0x59/0x300 [ 87.167731][ T5887] ? __lock_acquire+0x7d80/0x7d80 [ 87.172810][ T5887] ? security_sk_alloc+0x4b/0x130 [ 87.177883][ T5887] ? security_sk_alloc+0x4b/0x130 [ 87.182976][ T5887] __kmem_cache_alloc_node+0x53/0x250 [ 87.188419][ T5887] ? security_sk_alloc+0x4b/0x130 [ 87.193505][ T5887] __kmalloc+0xa7/0x240 [ 87.197715][ T5887] security_sk_alloc+0x4b/0x130 [ 87.202621][ T5887] sk_prot_alloc+0x101/0x210 [ 87.207261][ T5887] sk_alloc+0x3a/0x350 [ 87.211372][ T5887] inet_create+0x7a9/0xfe0 [ 87.215829][ T5887] ? inet_create+0x9d/0xfe0 [ 87.220373][ T5887] __sock_create+0x49e/0x940 [ 87.225012][ T5887] __sys_socket+0xd7/0x1b0 [ 87.229492][ T5887] __x64_sys_socket+0x7a/0x90 [ 87.234214][ T5887] do_syscall_64+0x55/0xb0 [ 87.238682][ T5887] ? clear_bhb_loop+0x40/0x90 [ 87.243407][ T5887] ? clear_bhb_loop+0x40/0x90 [ 87.248144][ T5887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.254103][ T5887] RIP: 0033:0x7f6a75d9e159 [ 87.258574][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.278228][ T5887] RSP: 002b:00007f6a76c30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 87.286682][ T5887] RAX: ffffffffffffffda RBX: 00007f6a76025fa0 RCX: 00007f6a75d9e159 [ 87.294687][ T5887] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002 [ 87.302693][ T5887] RBP: 00007f6a75e3506b R08: 0000000000000000 R09: 0000000000000000 [ 87.310694][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.318696][ T5887] R13: 00007f6a76026038 R14: 00007f6a76025fa0 R15: 00007ffd692d9528 [ 87.326712][ T5887] [ 87.439995][ T5782] Bluetooth: hci0: command tx timeout [ 87.447475][ T5782] Bluetooth: hci2: command tx timeout [ 87.453096][ T5782] Bluetooth: hci3: command tx timeout [ 87.463382][ T5792] Bluetooth: hci1: command tx timeout [ 87.689407][ C0] sched: RT throttling activated [ 88.075817][ T5882] loop0: detected capacity change from 0 to 131072 [ 88.120812][ T5882] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 88.129153][ T5882] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.141131][ T5882] F2FS-fs (loop0): invalid crc value [ 88.201479][ T5882] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.263824][ T5843] gud: probe of 3-1:1.0 failed with error -71 [ 88.294249][ T5882] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 88.301617][ T5882] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 88.464486][ T5886] loop1: detected capacity change from 0 to 32768 [ 88.530099][ T5886] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.17 (5886) [ 88.581624][ T5843] usb 3-1: USB disconnect, device number 2 [ 88.719189][ T5886] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.773903][ T5886] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 88.808799][ T5886] BTRFS info (device loop1): setting nodatasum [ 88.835373][ T5886] BTRFS info (device loop1): force zlib compression, level 3 [ 88.870068][ T5886] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 88.927344][ T5886] BTRFS info (device loop1): use lzo compression, level 0 [ 88.959596][ T5886] BTRFS info (device loop1): turning on flush-on-commit [ 88.987276][ T5886] BTRFS info (device loop1): enabling auto defrag [ 89.028625][ T5886] BTRFS info (device loop1): max_inline at 4096 [ 89.060489][ T5886] BTRFS info (device loop1): using free space tree [ 89.260645][ T5886] BTRFS info (device loop1): enabling ssd optimizations [ 89.280105][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 89.748951][ T5778] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.178152][ T5771] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (5771) [ 90.269487][ T5785] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.483583][ T5785] usb 4-1: Using ep0 maxpacket: 32 [ 90.510599][ T5785] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 90.547859][ T5785] usb 4-1: config 0 has no interface number 0 [ 90.588327][ T5785] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 90.625097][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.649568][ T5785] usb 4-1: Product: syz [ 90.653887][ T5785] usb 4-1: Manufacturer: syz [ 90.658521][ T5785] usb 4-1: SerialNumber: syz [ 90.746913][ T5785] usb 4-1: config 0 descriptor?? [ 90.768678][ T5785] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 91.009847][ T5785] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 91.061796][ T5785] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 91.405521][ T5955] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET) [ 91.527230][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 91.550169][ T9] usb 4-1: USB disconnect, device number 2 [ 91.582846][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 91.609369][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 91.636892][ T9] quatech2 4-1:0.51: device disconnected [ 91.914539][ T28] audit: type=1800 audit(1790654871.609:2): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.40" name="addr_adrfam" dev="configfs" ino=7720 res=0 errno=0 [ 91.951673][ T56] cfg80211: failed to load regulatory.db [ 91.971365][ T12] tipc: Subscription rejected, illegal request [ 92.122177][ T5972] loop2: detected capacity change from 0 to 512 [ 92.139531][ T5768] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.168339][ T5972] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.44: iget: bad i_size value: 38620345925642 [ 92.319273][ T5972] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.44: couldn't read orphan inode 15 (err -117) [ 92.344840][ T5972] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.359201][ T5768] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.380749][ T5768] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.420509][ T5768] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.430233][ T5768] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 92.459089][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.496549][ T5768] usb 2-1: config 0 descriptor?? [ 92.548170][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 92.973672][ T5768] hid-multitouch 0003:0EEF:72C4.0001: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 93.255565][ T5768] usb 2-1: USB disconnect, device number 2 [ 93.579933][ T6000] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.926201][ T6013] ip_tables: iptables: counters copy to user failed while replacing table [ 93.927039][ T6011] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.261959][ T6020] netlink: 72 bytes leftover after parsing attributes in process `syz.3.62'. [ 94.918335][ T6034] syz.0.68 (6034) used greatest stack depth: 19480 bytes left [ 95.104688][ T6036] loop0: detected capacity change from 0 to 512 [ 95.137507][ T6036] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.69: iget: bad i_size value: 38620345925642 [ 95.186786][ T6036] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.69: couldn't read orphan inode 15 (err -117) [ 95.206383][ T6038] Illegal XDP return value 4292182728 on prog (id 7) dev N/A, expect packet loss! [ 95.264788][ T6036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.591552][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.858944][ T5768] IPVS: starting estimator thread 0... [ 96.972080][ T6071] IPVS: using max 20 ests per chain, 48000 per kthread [ 97.345915][ T6080] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.486774][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'. [ 98.489913][ T56] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.678783][ T6102] ima: policy update failed [ 98.696022][ T28] audit: type=1802 audit(1790654878.379:3): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.98" res=0 errno=0 [ 98.773200][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.810492][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.840715][ T56] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 98.889647][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.928468][ T56] usb 1-1: config 0 descriptor?? [ 98.988054][ T6105] loop3: detected capacity change from 0 to 1024 [ 99.035452][ T6105] ext4: Unknown parameter 'rootcontext' [ 99.082682][ T6105] mtrr: base(0x2becfee7ffe61d43000) is not aligned on a size(0x96c076bb000) boundary [ 99.379072][ T6113] loop2: detected capacity change from 0 to 1024 [ 99.396326][ T6113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.408286][ T56] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 99.437292][ T56] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 99.445160][ T5843] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.455618][ T6113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.485483][ T56] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0002/input/input6 [ 99.626959][ T56] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 99.658135][ T6113] overlayfs: invalid origin (0000007900b55a2d4f4bba8bad131b97fffe7a22e2c9188cae78f0cb1b8c4f5f2db472c08eaa258df76ea08c12f10f2595f703f26bfb95d7c195427a254027dc) [ 99.684056][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 99.699865][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.739947][ T56] usb 1-1: USB disconnect, device number 2 [ 99.750876][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.791898][ T5843] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 99.817371][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.838182][ T5843] usb 2-1: Product: syz [ 99.848680][ T5843] usb 2-1: Manufacturer: syz [ 99.866218][ T6117] fido_id[6117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 99.882279][ T5843] usb 2-1: SerialNumber: syz [ 99.927196][ T5843] usb 2-1: selecting invalid altsetting 1 [ 99.965880][ T5843] usb 2-1: unit 6 not found! [ 99.986008][ T5780] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 99.999284][ T5780] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 100.015996][ T5780] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 100.034478][ T5780] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 100.048641][ T5780] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 100.061514][ T5780] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 100.074277][ T5780] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 100.087007][ T5780] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 100.099269][ T5780] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 100.125647][ T5780] EXT4-fs warning (device loop2): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 100.743221][ T5843] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 100.773186][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.837033][ T145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.905352][ T5843] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 100.939848][ T5843] usb 2-1: USB disconnect, device number 3 [ 101.038882][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.067904][ T145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.199181][ T145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.249763][ T56] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.365919][ T145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.452171][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.485024][ T56] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.507562][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.534351][ T56] usb 1-1: Product: syz [ 101.560212][ T56] usb 1-1: Manufacturer: syz [ 101.584565][ T56] usb 1-1: SerialNumber: syz [ 101.882224][ T6128] loop0: detected capacity change from 0 to 8 [ 101.988906][ T6128] SQUASHFS error: Unable to read inode 0x11f [ 102.003699][ T6137] loop3: detected capacity change from 0 to 512 [ 102.059048][ T6137] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.124140][ T56] cdc_ncm 1-1:1.0: bind() failure [ 102.149553][ T6137] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.212667][ T56] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 102.252836][ T6137] EXT4-fs (loop3): 1 truncate cleaned up [ 102.276849][ T56] cdc_ncm 1-1:1.1: bind() failure [ 102.301886][ T6137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.411950][ T56] usb 1-1: USB disconnect, device number 3 [ 102.702250][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.234045][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.246075][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.258588][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.274294][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.282770][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 103.290781][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.355450][ T5768] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.574228][ T5768] usb 2-1: Using ep0 maxpacket: 32 [ 103.599112][ T5768] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 103.625641][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.662687][ T5768] usb 2-1: config 0 descriptor?? [ 103.730260][ T5768] as10x_usb: device has been detected [ 103.736708][ T5768] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 103.884237][ T5768] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 103.894774][ T6159] ------------[ cut here ]------------ [ 103.900370][ T6159] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 103.916003][ T6159] WARNING: CPU: 1 PID: 6159 at kernel/locking/mutex.c:582 __mutex_lock+0xb48/0xc80 [ 103.932472][ T6159] Modules linked in: [ 103.936430][ T6159] CPU: 1 PID: 6159 Comm: syz.1.118 Not tainted syzkaller #0 [ 103.944015][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.954211][ T6159] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 103.959616][ T6159] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d a1 63 f2 03 00 0f 85 d1 f5 ff ff 48 c7 c7 80 b7 ca 8a 48 c7 c6 20 b8 ca 8a e8 a8 4c b7 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 103.979358][ T6159] RSP: 0018:ffffc90003157ac0 EFLAGS: 00010246 [ 103.985527][ T6159] RAX: 4c79e212126d1700 RBX: ffff88801dfdcce0 RCX: 0000000000080000 [ 103.993618][ T6159] RDX: ffffc9000d35b000 RSI: 0000000000006726 RDI: 0000000000006727 [ 104.002016][ T6159] RBP: ffffc90003157c20 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 104.010183][ T6159] R10: dffffc0000000000 R11: ffffed10171e518b R12: 1ffff9200062af68 [ 104.018201][ T6159] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 104.026524][ T6159] FS: 00007feba2a0f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 104.036638][ T6159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.043498][ T6159] CR2: 0000001b2e11fff8 CR3: 000000002e7de000 CR4: 00000000003506e0 [ 104.051721][ T6159] Call Trace: [ 104.055037][ T6159] [ 104.058016][ T6159] ? __mutex_lock+0x30d/0xc80 [ 104.062772][ T6159] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 104.065961][ T5768] as10x_usb: error during firmware upload part1 [ 104.068456][ T6159] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 104.080446][ T6159] ? mutex_lock_nested+0x20/0x20 [ 104.085433][ T6159] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.091502][ T6159] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 104.097449][ T6159] ? mutex_unlock+0x10/0x10 [ 104.102262][ T6159] ? mutex_lock_nested+0x20/0x20 [ 104.107262][ T6159] ? _raw_spin_lock_irq+0xbb/0xf0 [ 104.112401][ T6159] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.117646][ T6159] as102_dvb_dmx_start_feed+0x70/0x280 [ 104.123282][ T6159] dmx_ts_feed_start_filtering+0x120/0x220 [ 104.129169][ T6159] ? dmx_ts_feed_stop_filtering+0x190/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 104.136234][ T6159] dvb_dmxdev_filter_start+0x422/0x10a0 [ 104.142045][ T6159] dvb_demux_do_ioctl+0x482/0x530 [ 104.147127][ T6159] dvb_usercopy+0x195/0x2b0 [ 104.151722][ T6159] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 104.157325][ T6159] ? dvb_generic_ioctl+0xb0/0xb0 [ 104.162373][ T6159] ? dvb_demux_poll+0x210/0x210 [ 104.167278][ T6159] dvb_demux_ioctl+0x29/0x30 [ 104.171968][ T6159] __se_sys_ioctl+0xfd/0x170 [ 104.176618][ T6159] do_syscall_64+0x55/0xb0 [ 104.181207][ T6159] ? clear_bhb_loop+0x40/0x90 [ 104.185938][ T6159] ? clear_bhb_loop+0x40/0x90 [ 104.190741][ T6159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.196690][ T6159] RIP: 0033:0x7feba1b9e159 [ 104.201189][ T6159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.220888][ T6159] RSP: 002b:00007feba2a0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.224882][ T5768] Registered device nBox DVB-T Dongle [ 104.229344][ T6159] RAX: ffffffffffffffda RBX: 00007feba1e25fa0 RCX: 00007feba1b9e159 [ 104.229364][ T6159] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 104.251939][ T6159] RBP: 00007feba1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 104.259969][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.267985][ T6159] R13: 00007feba1e26038 R14: 00007feba1e25fa0 R15: 00007ffe337cf338 [ 104.276063][ T6159] [ 104.279118][ T6159] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.286442][ T6159] CPU: 1 PID: 6159 Comm: syz.1.118 Not tainted syzkaller #0 [ 104.293762][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.303852][ T6159] Call Trace: [ 104.307165][ T6159] [ 104.310142][ T6159] dump_stack_lvl+0x18c/0x250 [ 104.314878][ T6159] ? show_regs_print_info+0x20/0x20 [ 104.320128][ T6159] ? load_image+0x420/0x420 [ 104.324679][ T6159] panic+0x2ca/0x720 [ 104.328613][ T6159] ? bpf_jit_dump+0xd0/0xd0 [ 104.333179][ T6159] __warn+0x2e0/0x470 [ 104.337196][ T6159] ? __mutex_lock+0xb48/0xc80 [ 104.341919][ T6159] ? __mutex_lock+0xb48/0xc80 [ 104.346660][ T6159] report_bug+0x2be/0x4f0 [ 104.351037][ T6159] ? __mutex_lock+0xb48/0xc80 [ 104.355751][ T6159] ? __mutex_lock+0xb48/0xc80 [ 104.360495][ T6159] ? __mutex_lock+0xb4a/0xc80 [ 104.365189][ T6159] handle_bug+0xcf/0x120 [ 104.369471][ T6159] exc_invalid_op+0x1a/0x50 [ 104.373994][ T6159] asm_exc_invalid_op+0x1a/0x20 [ 104.378863][ T6159] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 104.384179][ T6159] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d a1 63 f2 03 00 0f 85 d1 f5 ff ff 48 c7 c7 80 b7 ca 8a 48 c7 c6 20 b8 ca 8a e8 a8 4c b7 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 104.403811][ T6159] RSP: 0018:ffffc90003157ac0 EFLAGS: 00010246 [ 104.409897][ T6159] RAX: 4c79e212126d1700 RBX: ffff88801dfdcce0 RCX: 0000000000080000 [ 104.417894][ T6159] RDX: ffffc9000d35b000 RSI: 0000000000006726 RDI: 0000000000006727 [ 104.425880][ T6159] RBP: ffffc90003157c20 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 104.433876][ T6159] R10: dffffc0000000000 R11: ffffed10171e518b R12: 1ffff9200062af68 [ 104.441880][ T6159] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 104.449885][ T6159] ? __mutex_lock+0x30d/0xc80 [ 104.454598][ T6159] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 104.460246][ T6159] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 104.465897][ T6159] ? mutex_lock_nested+0x20/0x20 [ 104.470853][ T6159] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 104.476879][ T6159] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 104.482806][ T6159] ? mutex_unlock+0x10/0x10 [ 104.487328][ T6159] ? mutex_lock_nested+0x20/0x20 [ 104.492285][ T6159] ? _raw_spin_lock_irq+0xbb/0xf0 [ 104.497349][ T6159] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.502574][ T6159] as102_dvb_dmx_start_feed+0x70/0x280 [ 104.508053][ T6159] dmx_ts_feed_start_filtering+0x120/0x220 [ 104.513914][ T6159] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 104.519840][ T6159] dvb_dmxdev_filter_start+0x422/0x10a0 [ 104.525413][ T6159] dvb_demux_do_ioctl+0x482/0x530 [ 104.530460][ T6159] dvb_usercopy+0x195/0x2b0 [ 104.534991][ T6159] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 104.540561][ T6159] ? dvb_generic_ioctl+0xb0/0xb0 [ 104.545534][ T6159] ? dvb_demux_poll+0x210/0x210 [ 104.550412][ T6159] dvb_demux_ioctl+0x29/0x30 [ 104.555031][ T6159] __se_sys_ioctl+0xfd/0x170 [ 104.559647][ T6159] do_syscall_64+0x55/0xb0 [ 104.564097][ T6159] ? clear_bhb_loop+0x40/0x90 [ 104.568802][ T6159] ? clear_bhb_loop+0x40/0x90 [ 104.573502][ T6159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.579446][ T6159] RIP: 0033:0x7feba1b9e159 [ 104.583891][ T6159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.603537][ T6159] RSP: 002b:00007feba2a0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.611974][ T6159] RAX: ffffffffffffffda RBX: 00007feba1e25fa0 RCX: 00007feba1b9e159 [ 104.619959][ T6159] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 104.627952][ T6159] RBP: 00007feba1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 104.635953][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.643941][ T6159] R13: 00007feba1e26038 R14: 00007feba1e25fa0 R15: 00007ffe337cf338 [ 104.651959][ T6159] [ 104.655566][ T6159] Kernel Offset: disabled [ 104.659897][ T6159] Rebooting in 86400 seconds..