last executing test programs: 3m32.578995842s ago: executing program 1 (id=1543): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m32.074272058s ago: executing program 1 (id=1552): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 3m31.777352308s ago: executing program 1 (id=1556): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc2}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) 3m31.497685238s ago: executing program 1 (id=1562): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x6, 0xb, 0x1}) 3m31.303783395s ago: executing program 1 (id=1566): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 3m31.018742034s ago: executing program 1 (id=1572): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, 0x0, 0x0) 3m14.889652782s ago: executing program 32 (id=1572): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, 0x0, 0x0) 44.643723122s ago: executing program 5 (id=4025): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x9, 0x8, 0x2, 0xdffff43e, 0x97}, &(0x7f0000004480)=0x98) 44.262152747s ago: executing program 5 (id=4031): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="9a"]) 42.527334735s ago: executing program 5 (id=4048): unshare(0x28020480) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 42.022251443s ago: executing program 3 (id=4052): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfc, 0x4, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x240400c0) 41.728696624s ago: executing program 3 (id=4054): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x21) 41.333608082s ago: executing program 3 (id=4056): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000007000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x970}, 0x94) 40.9606726s ago: executing program 3 (id=4058): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 40.592084008s ago: executing program 3 (id=4061): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x17, 0x0, 0x0) 40.488128414s ago: executing program 2 (id=4064): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000002240)=ANY=[]) 40.16002869s ago: executing program 2 (id=4066): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x6, @vbi={0xb5, 0x0, 0x6, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) 40.15896082s ago: executing program 3 (id=4067): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0x1c900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x94}, 0x0) 39.781475844s ago: executing program 2 (id=4069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 39.103068956s ago: executing program 0 (id=4074): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fallocate(r0, 0x11, 0x9, 0x100000000002) 38.884953066s ago: executing program 0 (id=4075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xedd8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) 38.543847024s ago: executing program 5 (id=4078): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x32, 0x2, 0x0, "444900e1b0faa9b0071c937f7f00002e0c0000ff070000ff0f0000c39b00"}) 38.333016844s ago: executing program 0 (id=4079): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 38.331996482s ago: executing program 2 (id=4080): r0 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, 0x0) 38.020508707s ago: executing program 5 (id=4082): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000280)={0x6, @raw_data="b291240559f3af8416e643928f71909057e263fa702f7a77138b30ba232670973c33b2af6fa71663efbfde79a59ce55a9ae40c8e42848299e7a3f8463c675798be9bffccaa967ff52d9c26f64d33c8b4fda12e0f79abc0160b98b313c42b0d67d5565e6a25ae10caee4d81b5d6a11228379320679dbc8c8c553109afdbce9cc91f4d9d4f7b1bf2d05bc2afa6b38c0194a556a172252e4f850fe7ba59a61456ba762b9c95f44fdbb2d2a1de4d47f88cb2759008000000201404bc02589bc0bcd7858644c000"}) 37.907154161s ago: executing program 0 (id=4084): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000440)={0x1, 0x0, {0x0, 0x0, 0x4001, 0x6}}) 37.905254036s ago: executing program 2 (id=4085): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000080)) 37.675802961s ago: executing program 5 (id=4086): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x21000000}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 37.484076077s ago: executing program 0 (id=4087): keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) 37.483564641s ago: executing program 2 (id=4088): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca002000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 37.147004869s ago: executing program 0 (id=4090): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 23.966247064s ago: executing program 33 (id=4067): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0x1c900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x94}, 0x0) 23.690774802s ago: executing program 4 (id=4106): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041}) 23.460438743s ago: executing program 4 (id=4107): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r0}, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'sha384-ssse3\x00'}}, 0x0, 0x0) 23.259316499s ago: executing program 4 (id=4108): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 21.130189707s ago: executing program 34 (id=4086): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x32, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x21000000}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 20.994882459s ago: executing program 35 (id=4088): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca002000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 20.592831426s ago: executing program 36 (id=4090): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 17.052131231s ago: executing program 4 (id=4112): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) 16.608787974s ago: executing program 4 (id=4113): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 16.346075439s ago: executing program 4 (id=4114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 37 (id=4114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): Device= 0.40 [ 278.585338][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.585358][ T6021] usb 1-1: Product: syz [ 278.585371][ T6021] usb 1-1: Manufacturer: syz [ 278.585385][ T6021] usb 1-1: SerialNumber: syz [ 278.987828][ T6021] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 279.126336][ T6021] usb 1-1: USB disconnect, device number 48 [ 279.232264][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.288632][T10694] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2209'. [ 280.635564][T10744] xfrm0: entered promiscuous mode [ 280.635594][T10744] xfrm0: entered allmulticast mode [ 280.648053][ T37] audit: type=1326 audit(2000002751.439:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10746 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5a78ebe9 code=0x7ffc0000 [ 280.648103][ T37] audit: type=1326 audit(2000002751.458:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10746 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5a78ebe9 code=0x7ffc0000 [ 280.685974][ T37] audit: type=1326 audit(2000002751.495:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10746 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fce5a78ebe9 code=0x7ffc0000 [ 280.813207][ T37] audit: type=1326 audit(2000002751.608:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10746 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5a78ebe9 code=0x7ffc0000 [ 280.813260][ T37] audit: type=1326 audit(2000002751.608:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10746 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5a78ebe9 code=0x7ffc0000 [ 281.024458][ T44] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 281.182169][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 281.185170][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 281.188308][ T44] usb 5-1: config 255 has an invalid interface number: 81 but max is 0 [ 281.188333][ T44] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 281.188354][ T44] usb 5-1: config 255 has no interface number 0 [ 281.188405][ T44] usb 5-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 281.188430][ T44] usb 5-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 281.188457][ T44] usb 5-1: config 255 interface 81 has no altsetting 0 [ 281.196900][ T44] usb 5-1: string descriptor 0 read error: -22 [ 281.197066][ T44] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 281.197088][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.265173][ T44] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.81/input/input29 [ 281.399249][ C1] usbtouchscreen 5-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 281.504082][T10776] netlink: 'syz.5.2244': attribute type 33 has an invalid length. [ 281.504106][T10776] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2244'. [ 281.616057][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 281.896198][ T44] usb 5-1: USB disconnect, device number 50 [ 281.896285][ C1] usbtouchscreen 5-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -19 [ 282.636436][T10809] netlink: 'syz.5.2256': attribute type 1 has an invalid length. [ 283.293912][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 283.394505][T10842] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 284.111038][T10878] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2283'. [ 284.129538][ T37] audit: type=1326 audit(2000002754.713:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 284.173784][ T37] audit: type=1326 audit(2000002754.751:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 284.173833][ T37] audit: type=1326 audit(2000002754.751:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 284.173873][ T37] audit: type=1326 audit(2000002754.751:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10875 comm="syz.2.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 284.308736][T10882] netlink: 'syz.4.2287': attribute type 1 has an invalid length. [ 284.308757][T10882] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2287'. [ 284.516500][T10890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.591864][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'. [ 285.058496][T10909] netlink: 'syz.2.2299': attribute type 4 has an invalid length. [ 285.204658][T10915] ip6gre1: entered allmulticast mode [ 285.614626][ T37] audit: type=1326 audit(2000002756.088:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10933 comm="syz.5.2309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5a78ebe9 code=0x7ffc0000 [ 286.788886][T10975] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2325'. [ 288.365861][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'. [ 289.350361][ T6021] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 289.522542][ T6021] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.522577][ T6021] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.522617][ T6021] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 289.522639][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.603087][ T6021] hub 5-1:4.0: USB hub found [ 289.807791][ T6021] hub 5-1:4.0: 2 ports detected [ 289.807848][ T6021] usb 5-1: selecting invalid altsetting 1 [ 289.807863][ T6021] hub 5-1:4.0: Using single TT (err -22) [ 290.024742][ T6021] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 290.024767][ T6021] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 290.109001][ T6021] usb 5-1: USB disconnect, device number 51 [ 290.117949][T11079] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2367'. [ 290.117989][T11079] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 290.296859][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 290.296877][ T37] audit: type=1326 audit(2000002760.485:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 290.296927][ T37] audit: type=1326 audit(2000002760.485:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 290.332996][ T37] audit: type=1326 audit(2000002760.513:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 290.451313][ T37] audit: type=1326 audit(2000002760.634:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 290.451364][ T37] audit: type=1326 audit(2000002760.634:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11082 comm="syz.2.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 292.481029][T11172] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 292.539812][T11176] netlink: zone id is out of range [ 292.539828][T11176] netlink: zone id is out of range [ 292.539836][T11176] netlink: zone id is out of range [ 292.539844][T11176] netlink: zone id is out of range [ 292.539851][T11176] netlink: zone id is out of range [ 292.539861][T11176] netlink: zone id is out of range [ 292.539869][T11176] netlink: zone id is out of range [ 292.539876][T11176] netlink: zone id is out of range [ 292.539884][T11176] netlink: zone id is out of range [ 292.539891][T11176] netlink: zone id is out of range [ 292.772935][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2414'. [ 293.301046][T11204] libceph: resolve '4' (ret=-3): failed [ 293.347269][ T6006] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 293.516942][ T6006] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 293.516970][ T6006] usb 1-1: config 0 has no interface number 0 [ 293.528049][ T6006] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 293.528077][ T6006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.528096][ T6006] usb 1-1: Product: syz [ 293.528110][ T6006] usb 1-1: Manufacturer: syz [ 293.528124][ T6006] usb 1-1: SerialNumber: syz [ 293.574631][ T6006] usb 1-1: config 0 descriptor?? [ 293.588999][ T6006] qmi_wwan 1-1:0.207: bogus CDC Union: master=0, slave=1 [ 293.636991][T11208] veth3: entered promiscuous mode [ 293.816038][ T6006] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22 [ 293.916785][T11221] netlink: 'syz.3.2434': attribute type 30 has an invalid length. [ 294.039309][ T6021] usb 1-1: USB disconnect, device number 49 [ 294.181275][T11232] netlink: 'syz.2.2437': attribute type 21 has an invalid length. [ 294.181375][T11232] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2437'. [ 294.288657][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 294.876142][T11262] netlink: 'syz.3.2454': attribute type 1 has an invalid length. [ 295.325086][T11284] netlink: 'syz.3.2466': attribute type 1 has an invalid length. [ 295.325106][T11284] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2466'. [ 295.325133][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'. [ 295.357261][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2464'. [ 295.378778][T11283] batadv1: entered promiscuous mode [ 295.516078][T11289] netlink: 'syz.3.2468': attribute type 5 has an invalid length. [ 296.863204][T11347] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2489'. [ 297.134049][T11343] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 298.066637][T11386] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2508'. [ 298.069345][T11386] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2508'. [ 298.180489][T11392] : renamed from bond_slave_0 (while UP) [ 298.276296][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2511'. [ 298.393298][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 298.448152][T11400] CIFS mount error: No usable UNC path provided in device string! [ 298.448152][T11400] [ 298.448181][T11400] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 298.528481][T11404] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 298.528710][T11404] (syz.4.2516,11404,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 298.528746][T11404] (syz.4.2516,11404,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 298.528765][T11404] (syz.4.2516,11404,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 298.528783][T11404] (syz.4.2516,11404,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 298.580397][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 298.580425][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.580444][ T10] usb 1-1: Product: syz [ 298.580456][ T10] usb 1-1: Manufacturer: syz [ 298.580470][ T10] usb 1-1: SerialNumber: syz [ 298.666556][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 298.883626][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 299.360812][ T6006] usb 1-1: USB disconnect, device number 50 [ 299.826933][ T31] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 300.007562][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 300.026565][ T31] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 300.026595][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.026615][ T31] usb 5-1: Product: syz [ 300.026629][ T31] usb 5-1: Manufacturer: syz [ 300.026642][ T31] usb 5-1: SerialNumber: syz [ 300.047711][ T31] usb 5-1: config 0 descriptor?? [ 300.068902][ T31] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 300.082431][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 300.082934][ T10] ath9k_htc: Failed to initialize the device [ 300.086739][ T6006] usb 1-1: ath9k_htc: USB layer deinitialized [ 300.369266][ T31] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 300.369820][ T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 300.379064][ T31] usb 5-1: USB disconnect, device number 52 [ 300.471485][T11469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2548'. [ 300.562863][T11469] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 300.576534][T11469] gretap1: entered promiscuous mode [ 300.576564][T11469] gretap1: entered allmulticast mode [ 300.579059][T11473] netlink: 4068 bytes leftover after parsing attributes in process `syz.5.2552'. [ 301.322555][ T31] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 301.493711][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 301.496081][ T31] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 301.496106][ T31] usb 5-1: config 8 has no interface number 0 [ 301.496149][ T31] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 301.496175][ T31] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 301.496201][ T31] usb 5-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 301.496226][ T31] usb 5-1: config 8 interface 206 has no altsetting 0 [ 301.499397][ T31] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 301.499422][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.499442][ T31] usb 5-1: Product: syz [ 301.499455][ T31] usb 5-1: Manufacturer: syz [ 301.499469][ T31] usb 5-1: SerialNumber: syz [ 301.797133][ T31] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 301.829434][ T31] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 302.016643][ T6021] usb 5-1: USB disconnect, device number 53 [ 302.035086][ T6021] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 302.036040][ T6021] garmin_gps 5-1:8.206: device disconnected [ 302.115292][T11521] ./file0: Can't open blockdev [ 302.821992][T11523] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.823157][T11523] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.599395][T11562] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2595'. [ 303.601930][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2595'. [ 304.220615][T11523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.337693][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'. [ 305.363717][ T770] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.394557][ T770] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.394605][ T770] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.394639][ T770] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.533651][T11587] program syz.3.2610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.627750][T11591] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2606'. [ 305.768941][T11596] /dev/nullb0: Can't open blockdev [ 306.411340][ T5992] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 306.578496][ T5992] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 306.578524][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.578543][ T5992] usb 4-1: Product: syz [ 306.578556][ T5992] usb 4-1: Manufacturer: syz [ 306.578569][ T5992] usb 4-1: SerialNumber: syz [ 306.628419][ T5992] usb 4-1: config 0 descriptor?? [ 306.632992][ T5992] ch341 4-1:0.0: ch341-uart converter detected [ 307.085156][ T5992] usb 4-1: failed to send control message: -71 [ 307.085215][ T5992] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 307.123629][ T5992] usb 4-1: USB disconnect, device number 51 [ 307.139375][ T5992] ch341 4-1:0.0: device disconnected [ 307.288086][T11638] netlink: 'syz.4.2633': attribute type 10 has an invalid length. [ 307.288110][T11638] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2633'. [ 307.292447][T11638] net_ratelimit: 189 callbacks suppressed [ 307.292466][T11638] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 307.848793][T11651] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 307.848813][T11651] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2638'. [ 308.444336][T11679] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 308.444336][T11679] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 308.533633][T11682] affs: No valid root block on device nbd3 [ 308.534141][T11683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2653'. [ 309.325137][T11706] netlink: 'syz.5.2665': attribute type 1 has an invalid length. [ 309.325158][T11706] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2665'. [ 310.152973][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 310.313273][ T44] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 310.323934][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 310.326287][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 310.326311][ T9] usb 1-1: config 0 has no interface number 0 [ 310.326359][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 310.326382][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 310.330357][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 310.330382][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.330400][ T9] usb 1-1: Product: syz [ 310.330413][ T9] usb 1-1: Manufacturer: syz [ 310.330427][ T9] usb 1-1: SerialNumber: syz [ 310.347888][ T9] usb 1-1: config 0 descriptor?? [ 310.351040][T11729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.351336][T11729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.505705][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 310.508491][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 310.510154][ T44] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 310.510175][ T44] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 310.510194][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.513342][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.513368][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.513386][ T44] usb 3-1: Product: syz [ 310.513399][ T44] usb 3-1: Manufacturer: syz [ 310.513414][ T44] usb 3-1: SerialNumber: syz [ 310.622859][T11729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.625282][T11729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 310.851265][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 310.851306][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 310.851606][ T9] asix 1-1:0.251: probe with driver asix failed with error -5 [ 310.889402][ T9] usb 1-1: USB disconnect, device number 51 [ 311.021408][T11761] netlink: 'syz.4.2693': attribute type 1 has an invalid length. [ 311.021429][T11761] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2693'. [ 311.063414][ T44] usb 3-1: 0:2 : does not exist [ 311.104786][ T44] usb 3-1: USB disconnect, device number 39 [ 311.258611][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.119978][ T6006] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 312.150849][T11809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2717'. [ 312.150875][T11809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2717'. [ 312.286601][ T6006] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 312.286633][ T6006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.286653][ T6006] usb 3-1: Product: syz [ 312.286667][ T6006] usb 3-1: Manufacturer: syz [ 312.286680][ T6006] usb 3-1: SerialNumber: syz [ 312.330099][ T6006] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 312.334190][T11815] netlink: 'syz.3.2720': attribute type 4 has an invalid length. [ 312.385384][ T5842] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 312.700860][ C1] usb 3-1: ath9k_htc: invalid pkt_len (b408) [ 312.702924][T11827] libceph: resolve '400' (ret=-3): failed [ 312.910854][T11830] wg1: entered promiscuous mode [ 312.910882][T11830] wg1: entered allmulticast mode [ 312.925140][ T9] usb 3-1: USB disconnect, device number 40 [ 312.957755][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2728'. [ 312.986015][T11836] Device name not specified. [ 312.986015][T11836] [ 313.485040][T11857] program syz.3.2740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.510390][ T5842] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 313.510575][ T5842] ath9k_htc: Failed to initialize the device [ 313.529435][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 313.969116][T11873] netlink: 'syz.0.2748': attribute type 237 has an invalid length. [ 314.044649][T11879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.189219][T11885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2754'. [ 314.439903][T11896] syz.0.2760 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 315.223584][T11932] netlink: 'syz.0.2778': attribute type 3 has an invalid length. [ 315.223606][T11932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2778'. [ 316.107177][T11974] netlink: 'syz.3.2797': attribute type 1 has an invalid length. [ 316.107223][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2797'. [ 316.310677][ T44] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 316.473477][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.473504][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.475700][ T44] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 316.475727][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 316.475747][ T44] usb 3-1: SerialNumber: syz [ 316.788575][ T44] usb 3-1: 0:2 : does not exist [ 316.788668][ T44] usb 3-1: unit 48 not found! [ 316.833826][ T44] usb 3-1: USB disconnect, device number 41 [ 316.905402][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.066117][T12011] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2813'. [ 317.116945][T12011] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2813'. [ 317.807323][T12042] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 318.267437][T12063] dlm: non-version read from control device 36 [ 318.323525][T12065] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 318.912767][T12091] tmpfs: Bad value for 'mpol' [ 319.256243][T12106] vcan0: entered promiscuous mode [ 319.256402][T12106] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 319.297682][T12107] libceph: resolve '4..' (ret=-3): failed [ 319.677986][T12124] netlink: 'syz.3.2865': attribute type 5 has an invalid length. [ 320.405211][ T6006] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 320.592778][ T6006] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.592815][ T6006] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 320.592877][ T6006] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.592900][ T6006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.637443][T12145] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 320.662548][ T6006] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.262955][ T9] usb 1-1: USB disconnect, device number 52 [ 321.371099][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2894'. [ 321.371127][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2894'. [ 321.463734][ T5992] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 321.624116][ T5992] usb 5-1: Using ep0 maxpacket: 16 [ 321.626476][ T5992] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 321.626559][ T5992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.626579][ T5992] usb 5-1: config 0 has no interface number 0 [ 321.657340][ T5992] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 321.657369][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.657387][ T5992] usb 5-1: Product: syz [ 321.657400][ T5992] usb 5-1: Manufacturer: syz [ 321.657413][ T5992] usb 5-1: SerialNumber: syz [ 321.669048][ T5992] usb 5-1: config 0 descriptor?? [ 321.704426][ T5992] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.800824][T12192] netlink: 'syz.2.2900': attribute type 10 has an invalid length. [ 321.800846][T12192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2900'. [ 321.813103][ T5992] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 321.892377][ T5992] usb 5-1: USB disconnect, device number 54 [ 321.939176][T12192] team0: Port device geneve0 added [ 321.971752][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.835307][ T5992] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 323.029060][ T5992] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.029118][ T5992] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 323.029141][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.104907][ T5992] usb 1-1: config 0 descriptor?? [ 323.317945][T12249] netlink: 'syz.3.2928': attribute type 10 has an invalid length. [ 323.318032][T12249] openvswitch: netlink: Flow key attr not present in new flow. [ 323.377234][ T5913] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 323.544846][ T5913] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 323.544875][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.544900][ T5913] usb 5-1: Product: syz [ 323.544914][ T5913] usb 5-1: Manufacturer: syz [ 323.544927][ T5913] usb 5-1: SerialNumber: syz [ 323.568104][ T44] usb 1-1: USB disconnect, device number 53 [ 323.642093][ T5913] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 323.703970][ T5992] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 325.119235][ T5992] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 325.119375][ T5992] ath9k_htc: Failed to initialize the device [ 325.157040][T12276] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 325.157389][T12276] /dev/nullb0: Can't open blockdev [ 325.484937][ T6006] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 325.665131][ T6006] usb 4-1: Using ep0 maxpacket: 8 [ 325.674057][ T6006] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 325.674086][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.674104][ T6006] usb 4-1: Product: syz [ 325.674118][ T6006] usb 4-1: Manufacturer: syz [ 325.674132][ T6006] usb 4-1: SerialNumber: syz [ 325.753661][ T6006] usb 4-1: config 0 descriptor?? [ 325.851300][ T6006] gspca_main: sq930x-2.14.0 probing 2770:930c [ 326.258880][ T6006] gspca_sq930x: ucbus_write failed -71 [ 326.258973][ T6006] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 326.312613][ T6006] usb 4-1: USB disconnect, device number 52 [ 327.266709][ T5913] usb 5-1: USB disconnect, device number 55 [ 327.284772][ T5913] usb 5-1: ath9k_htc: USB layer deinitialized [ 327.456264][T12311] netlink: 'syz.3.2959': attribute type 2 has an invalid length. [ 327.531830][T12311] : entered promiscuous mode [ 327.738955][ T5913] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 327.901005][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 327.903811][ T5913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 327.913943][ T5913] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 327.913971][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.913990][ T5913] usb 5-1: Product: syz [ 327.914003][ T5913] usb 5-1: Manufacturer: syz [ 327.914017][ T5913] usb 5-1: SerialNumber: syz [ 327.953130][ T5913] usb 5-1: config 0 descriptor?? [ 327.959475][T12308] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 328.021040][ T5913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 328.299860][ T5913] usb 5-1: USB disconnect, device number 56 [ 328.435233][ T6149] udevd[6149]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.252451][ T5992] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 330.420593][ T5992] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 330.420621][ T5992] usb 6-1: config 0 has no interface number 0 [ 330.424447][ T5992] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 330.424474][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.424493][ T5992] usb 6-1: Product: syz [ 330.424506][ T5992] usb 6-1: Manufacturer: syz [ 330.424520][ T5992] usb 6-1: SerialNumber: syz [ 330.488921][ T5992] usb 6-1: config 0 descriptor?? [ 330.732020][ T5992] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 330.732176][ T5992] usb 6-1: No valid video chain found. [ 330.769329][ T5992] usb 6-1: USB disconnect, device number 3 [ 330.923993][T12444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.357614][T12456] netlink: 'syz.2.3028': attribute type 1 has an invalid length. [ 332.250611][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3048'. [ 332.700994][T12517] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 332.827661][ T5992] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 332.988919][ T5992] usb 1-1: Using ep0 maxpacket: 16 [ 333.029920][ T5992] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 333.029950][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 333.029969][ T5992] usb 1-1: Product: syz [ 333.029982][ T5992] usb 1-1: SerialNumber: syz [ 333.081768][ T5992] usb 1-1: config 0 descriptor?? [ 333.106720][ T5992] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 333.107427][ T5992] usb 1-1: No valid video chain found. [ 333.342805][ T5992] usb 1-1: USB disconnect, device number 54 [ 333.631920][T12548] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 334.099124][T12566] C: renamed from team_slave_0 (while UP) [ 334.168458][T12566] netlink: 'syz.2.3082': attribute type 3 has an invalid length. [ 334.168480][T12566] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3082'. [ 334.169135][T12566] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 334.396639][ T37] audit: type=1107 audit(2000002801.717:33): pid=12577 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 334.670402][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3095'. [ 334.773170][T12593] xfrm1: entered promiscuous mode [ 334.773199][T12593] xfrm1: entered allmulticast mode [ 334.963871][T12600] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3101'. [ 335.070273][T12605] netlink: 'syz.5.3102': attribute type 9 has an invalid length. [ 335.148095][ T5992] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 335.275550][T12612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3104'. [ 335.316803][ T5992] usb 5-1: Using ep0 maxpacket: 8 [ 335.332578][ T5992] usb 5-1: unable to get BOS descriptor or descriptor too short [ 335.355632][ T5992] usb 5-1: config 7 has an invalid interface number: 6 but max is 0 [ 335.355658][ T5992] usb 5-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 335.355678][ T5992] usb 5-1: config 7 has no interface number 1 [ 335.355738][ T5992] usb 5-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254 [ 335.355767][ T5992] usb 5-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.355792][ T5992] usb 5-1: config 7 interface 6 has no altsetting 0 [ 335.375593][ T5992] usb 5-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e [ 335.375620][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.375639][ T5992] usb 5-1: Product: syz [ 335.375652][ T5992] usb 5-1: Manufacturer: syz [ 335.375665][ T5992] usb 5-1: SerialNumber: syz [ 335.587807][T12619] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 335.707375][ T5992] option 5-1:7.6: GSM modem (1-port) converter detected [ 335.812598][T12626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3111'. [ 335.812625][T12626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3111'. [ 335.835721][ T5992] usb 5-1: USB disconnect, device number 57 [ 335.839114][ T5992] option 5-1:7.6: device disconnected [ 336.782789][T12660] usb usb8: usbfs: process 12660 (syz.4.3128) did not claim interface 63 before use [ 336.817842][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3127'. [ 336.817879][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3127'. [ 337.286215][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 337.670812][T12692] netlink: 'syz.3.3143': attribute type 1 has an invalid length. [ 337.670832][T12692] netlink: 'syz.3.3143': attribute type 2 has an invalid length. [ 338.632832][T12734] bond0: option arp_validate: invalid value (18446744073491447809) [ 338.634448][ T67] bond0: (slave bond_slave_0): interface is now down [ 338.634478][ T67] bond0: (slave bond_slave_1): interface is now down [ 338.634491][ T67] bond0: (slave bridge0): interface is now down [ 338.667122][ T67] bond0: now running without any active interface! [ 339.370396][ T6021] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 339.544143][ T6021] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 339.544173][ T6021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.577909][ T6021] usb 4-1: config 0 descriptor?? [ 339.598651][ T6021] cp210x 4-1:0.0: cp210x converter detected [ 339.812651][ T6021] usb 4-1: cp210x converter now attached to ttyUSB0 [ 340.034491][ T6021] usb 4-1: USB disconnect, device number 53 [ 340.052037][ T6021] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 340.052807][ T6021] cp210x 4-1:0.0: device disconnected [ 340.288896][T12789] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 340.288925][T12789] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 341.006096][ T5992] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 341.048836][ T5913] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 341.180255][ T5992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 341.180288][ T5992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 341.193239][ T5992] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 341.193268][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.193287][ T5992] usb 6-1: Product: syz [ 341.193300][ T5992] usb 6-1: Manufacturer: syz [ 341.193314][ T5992] usb 6-1: SerialNumber: syz [ 341.213087][ T5992] usb 6-1: config 0 descriptor?? [ 341.254461][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.268241][ T5913] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 341.268268][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.268287][ T5913] usb 4-1: Product: syz [ 341.268299][ T5913] usb 4-1: Manufacturer: syz [ 341.268313][ T5913] usb 4-1: SerialNumber: syz [ 341.304009][ T5913] usb 4-1: config 0 descriptor?? [ 341.363317][ T6006] IPVS: starting estimator thread 0... [ 341.420280][ T5913] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 341.420738][ T5913] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 341.469811][T12816] IPVS: using max 9 ests per chain, 21600 per kthread [ 341.516147][ T5992] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input31 [ 341.565425][ T6006] usb 4-1: USB disconnect, device number 54 [ 341.800482][ T6006] usb 6-1: USB disconnect, device number 4 [ 341.851108][T12824] netlink: 'syz.4.3209': attribute type 1 has an invalid length. [ 341.851141][T12824] netlink: 'syz.4.3209': attribute type 1 has an invalid length. [ 344.549556][ T8748] Bluetooth: hci1: unexpected cc 0x0c5a length: 1 < 2 [ 346.534063][T13007] netlink: 'syz.5.3298': attribute type 2 has an invalid length. [ 346.686182][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'. [ 346.853888][T13017] netlink: 'syz.5.3303': attribute type 21 has an invalid length. [ 346.853991][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3303'. [ 346.954958][T13022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3306'. [ 346.954994][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3306'. [ 347.069840][T13022] bridge1: entered promiscuous mode [ 347.069871][T13022] bridge1: entered allmulticast mode [ 347.435203][T13042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.510571][T13044] netlink: 'syz.2.3316': attribute type 25 has an invalid length. [ 348.801142][T13100] netlink: 'syz.5.3343': attribute type 1 has an invalid length. [ 348.801163][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3343'. [ 349.410619][T13119] netlink: 'syz.0.3355': attribute type 29 has an invalid length. [ 349.434707][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 350.211650][T13144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3366'. [ 350.211676][T13144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3366'. [ 350.501654][T13156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3371'. [ 350.501680][T13156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3371'. [ 351.128642][T13182] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 351.129800][T13182] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 351.129816][T13182] overlayfs: missing 'lowerdir' [ 352.958286][T13250] netlink: 'syz.0.3412': attribute type 1 has an invalid length. [ 352.958306][T13250] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3412'. [ 352.958323][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 352.967067][T13251] kAFS: unable to lookup cell 'sy@0' [ 353.570731][T13279] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 353.570757][T13279] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 353.903516][T13295] netlink: 'syz.4.3436': attribute type 11 has an invalid length. [ 354.245738][T13307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.807705][ T6006] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 354.971303][ T6006] usb 6-1: Using ep0 maxpacket: 32 [ 354.976183][ T6006] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 354.976208][ T6006] usb 6-1: config 0 has no interface number 0 [ 354.976255][ T6006] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.976282][ T6006] usb 6-1: config 0 interface 85 has no altsetting 0 [ 355.019936][ T6006] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 355.019964][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.019984][ T6006] usb 6-1: Product: syz [ 355.019997][ T6006] usb 6-1: Manufacturer: syz [ 355.020011][ T6006] usb 6-1: SerialNumber: syz [ 355.056613][ T6006] usb 6-1: config 0 descriptor?? [ 355.288510][ T6006] appletouch 6-1:0.85: Failed to read mode from device. [ 355.288776][ T6006] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 355.318689][ T6006] usb 6-1: USB disconnect, device number 5 [ 355.908909][ T994] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 356.079870][ T994] usb 4-1: Using ep0 maxpacket: 8 [ 356.082644][ T994] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 356.082669][ T994] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 356.082688][ T994] usb 4-1: config 135 has no interface number 0 [ 356.082719][ T994] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 356.082772][ T994] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 356.082799][ T994] usb 4-1: config 135 interface 230 has no altsetting 0 [ 356.090290][ T994] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 356.090532][ T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.090553][ T994] usb 4-1: Product: syz [ 356.090566][ T994] usb 4-1: Manufacturer: syz [ 356.090578][ T994] usb 4-1: SerialNumber: syz [ 356.182680][ T994] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 356.182712][ T994] usb 4-1: No valid video chain found. [ 356.359369][ T6006] usb 4-1: USB disconnect, device number 55 [ 357.119810][T13420] openvswitch: netlink: IP tunnel dst address not specified [ 357.198827][T13423] netlink: 'syz.0.3498': attribute type 1 has an invalid length. [ 357.198859][T13423] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3498'. [ 357.246960][T13424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3499'. [ 357.278493][ T994] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 357.458909][ T994] usb 3-1: Using ep0 maxpacket: 8 [ 357.462878][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.462907][ T994] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 357.466282][ T994] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 357.466314][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.466335][ T994] usb 3-1: Product: syz [ 357.466353][ T994] usb 3-1: Manufacturer: syz [ 357.466368][ T994] usb 3-1: SerialNumber: syz [ 357.493116][ T994] usb 3-1: config 0 descriptor?? [ 357.974158][ T994] usb 3-1: USB disconnect, device number 42 [ 360.580909][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3567'. [ 360.655407][ T5992] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 360.830810][ T5992] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 360.830842][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.830862][ T5992] usb 1-1: Product: syz [ 360.830875][ T5992] usb 1-1: Manufacturer: syz [ 360.830890][ T5992] usb 1-1: SerialNumber: syz [ 360.839467][ T5992] usb 1-1: config 0 descriptor?? [ 360.887265][ T5992] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 361.200589][T13584] i2c i2c-0: Invalid block write size 35 [ 361.309595][ T5992] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 361.309615][ T5992] sq905c 1-1:0.0: Reading version command failed [ 361.309702][ T5992] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 361.329951][ T5992] usb 1-1: USB disconnect, device number 55 [ 361.398625][T13591] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3580'. [ 361.400106][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3581'. [ 362.024016][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3592'. [ 362.118280][T13618] 9pnet: Found fid 0 not clunked [ 362.438420][T13628] MTD: Couldn't look up './file1': -15 [ 363.274656][ T5992] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 363.437791][ T5992] usb 3-1: config 6 has an invalid interface number: 57 but max is 0 [ 363.437819][ T5992] usb 3-1: config 6 has no interface number 0 [ 363.437850][ T5992] usb 3-1: config 6 interface 57 has no altsetting 0 [ 363.443408][ T5992] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 363.443436][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.443454][ T5992] usb 3-1: Product: syz [ 363.443468][ T5992] usb 3-1: Manufacturer: syz [ 363.443480][ T5992] usb 3-1: SerialNumber: syz [ 363.694288][ T5992] usb-storage 3-1:6.57: USB Mass Storage device detected [ 363.800877][T13676] netlink: 'syz.3.3620': attribute type 13 has an invalid length. [ 363.923982][ T5992] usb 3-1: USB disconnect, device number 43 [ 364.151317][ T6006] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 364.311906][ T6006] usb 6-1: Using ep0 maxpacket: 32 [ 364.321005][ T6006] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 364.321030][ T6006] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.321048][ T6006] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 364.321068][ T6006] usb 6-1: config 0 has no interface number 1 [ 364.321125][ T6006] usb 6-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 364.321150][ T6006] usb 6-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.340417][ T6006] usb 6-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 364.340446][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.340465][ T6006] usb 6-1: Product: syz [ 364.340479][ T6006] usb 6-1: Manufacturer: syz [ 364.340493][ T6006] usb 6-1: SerialNumber: syz [ 364.368076][ T6006] usb 6-1: config 0 descriptor?? [ 364.568394][ T994] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 364.646247][ T6006] kaweth 6-1:0.235: Firmware present in device. [ 364.737422][ T994] usb 4-1: Using ep0 maxpacket: 16 [ 364.745688][ T994] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.745721][ T994] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 364.745743][ T994] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 364.745767][ T994] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 364.745790][ T994] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 364.748863][ T994] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.748891][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 364.748917][ T994] usb 4-1: SerialNumber: syz [ 364.834060][ T6006] kaweth 6-1:0.235: Error reading configuration (-71), no net device created [ 364.834358][ T6006] kaweth 6-1:0.235: probe with driver kaweth failed with error -5 [ 364.867074][T13696] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 364.877038][ T994] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 364.888573][ T6006] kaweth 6-1:0.0: Firmware present in device. [ 364.908427][ T6006] kaweth 6-1:0.0: Error reading configuration (-71), no net device created [ 364.908689][ T6006] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 364.908689][ T994] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 364.997055][ T6006] usb 6-1: USB disconnect, device number 6 [ 365.089056][ T5842] usb 4-1: USB disconnect, device number 56 [ 365.727288][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3649'. [ 366.343099][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 366.497054][T13766] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3665'. [ 366.518501][ T31] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 366.518530][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.518550][ T31] usb 5-1: Product: syz [ 366.518564][ T31] usb 5-1: Manufacturer: syz [ 366.518578][ T31] usb 5-1: SerialNumber: syz [ 366.585879][ T31] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 366.688722][ T31] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 366.841147][T13775] netlink: 'syz.5.3669': attribute type 3 has an invalid length. [ 366.841170][T13775] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3669'. [ 366.972856][ C1] usb 5-1: ath: unknown panic pattern! [ 367.069988][T13783] netlink: 'syz.0.3671': attribute type 15 has an invalid length. [ 367.177149][T13786] QAT: failed to copy from user cfg_data. [ 367.200459][ T994] usb 5-1: USB disconnect, device number 58 [ 367.392962][T13794] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3675'. [ 367.820642][ T31] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 367.820852][ T31] ath9k_htc: Failed to initialize the device [ 367.833226][ T994] usb 5-1: ath9k_htc: USB layer deinitialized [ 367.969250][T13816] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 368.419388][T13832] netlink: 'syz.3.3690': attribute type 10 has an invalid length. [ 368.481784][T13832] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 368.481819][T13832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.733253][T13843] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 368.733269][T13843] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 368.733281][T13843] overlayfs: conflicting options: userxattr,redirect_dir=on [ 369.131028][T13863] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 369.361090][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3706'. [ 370.469493][ T5154] Bluetooth: hci1: command 0x0406 tx timeout [ 370.544185][ T37] audit: type=1326 audit(2000002835.543:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13923 comm="syz.2.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 370.589433][ T37] audit: type=1326 audit(2000002835.571:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13923 comm="syz.2.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 370.589483][ T37] audit: type=1326 audit(2000002835.571:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13923 comm="syz.2.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 370.589524][ T37] audit: type=1326 audit(2000002835.581:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13923 comm="syz.2.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 370.589564][ T37] audit: type=1326 audit(2000002835.581:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13923 comm="syz.2.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28c2eebe9 code=0x7ffc0000 [ 371.572850][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3751'. [ 372.500667][ T994] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 372.598008][T13997] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 372.664938][ T994] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.664966][ T994] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.664985][ T994] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 372.665039][ T994] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.665065][ T994] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.667427][ T994] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.667451][ T994] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.667470][ T994] usb 3-1: Product: syz [ 372.667484][ T994] usb 3-1: Manufacturer: syz [ 372.759813][ T994] cdc_wdm 3-1:1.0: skipping garbage [ 372.759831][ T994] cdc_wdm 3-1:1.0: skipping garbage [ 372.783449][ T994] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 372.783479][ T994] cdc_wdm 3-1:1.0: Unknown control protocol [ 372.983255][T13987] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 373.009381][ T6006] usb 3-1: USB disconnect, device number 44 [ 374.515254][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3802'. [ 374.868990][T14089] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 374.869018][T14089] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 375.069333][T14089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.575821][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3826'. [ 376.524752][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 376.809211][T14170] netlink: 336 bytes leftover after parsing attributes in process `syz.3.3851'. [ 377.183184][ T5842] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 377.343415][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 377.346020][ T5842] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 377.346072][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 377.346097][ T5842] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 377.349186][ T5842] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 377.349212][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.349231][ T5842] usb 5-1: Product: syz [ 377.349245][ T5842] usb 5-1: Manufacturer: syz [ 377.349258][ T5842] usb 5-1: SerialNumber: syz [ 377.431759][ T5842] usb 5-1: config 0 descriptor?? [ 377.435169][T14174] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.480537][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 377.480633][ T5842] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 377.480823][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 377.729059][ T5842] usb 5-1: USB disconnect, device number 59 [ 377.732383][ T5842] mcba_usb 5-1:0.0 can0: device disconnected [ 378.360944][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3876'. [ 378.469974][T14229] bridge0: port 3(veth0_to_bridge) entered blocking state [ 378.470210][T14229] bridge0: port 3(veth0_to_bridge) entered disabled state [ 378.470432][T14229] veth0_to_bridge: entered allmulticast mode [ 378.474293][T14229] veth0_to_bridge: entered promiscuous mode [ 378.474517][T14229] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 378.475214][T14229] bridge0: port 3(veth0_to_bridge) entered blocking state [ 378.475359][T14229] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 379.098873][T14258] netlink: 'syz.2.3890': attribute type 8 has an invalid length. [ 379.789124][T14282] kernel profiling enabled (shift: 62) [ 379.789140][T14282] profiling shift: 62 too large [ 380.379535][ T44] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 380.555778][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 380.558572][ T44] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 380.558595][ T44] usb 3-1: config 0 has no interface number 0 [ 380.558642][ T44] usb 3-1: config 0 interface 148 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 380.558683][ T44] usb 3-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 380.558706][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.581259][ T44] usb 3-1: config 0 descriptor?? [ 380.584950][T14294] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 380.841208][ T44] usb 3-1: USB disconnect, device number 45 [ 380.860260][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.268175][T14322] random: crng reseeded on system resumption [ 381.893098][T14339] netlink: 'syz.5.3921': attribute type 11 has an invalid length. [ 381.893119][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3921'. [ 382.267255][T14352] binder: Bad value for 'stats' [ 382.489870][T14363] netlink: 380 bytes leftover after parsing attributes in process `syz.0.3933'. [ 382.496496][ T5913] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 382.684729][ T5913] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 382.684760][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.684780][ T5913] usb 6-1: Product: syz [ 382.684794][ T5913] usb 6-1: Manufacturer: syz [ 382.684808][ T5913] usb 6-1: SerialNumber: syz [ 382.732915][ T5913] r8152-cfgselector 6-1: Unknown version 0x0000 [ 382.732939][ T5913] r8152-cfgselector 6-1: config 0 descriptor?? [ 383.225597][ T44] r8152-cfgselector 6-1: USB disconnect, device number 7 [ 383.298253][ T5913] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 383.485116][ T5913] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 383.485156][ T5913] usb 4-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 383.485175][ T5913] usb 4-1: Product: syz [ 383.485188][ T5913] usb 4-1: Manufacturer: syz [ 383.485202][ T5913] usb 4-1: SerialNumber: syz [ 383.491800][T14393] netlink: 'syz.2.3947': attribute type 11 has an invalid length. [ 383.551573][ T5913] usb 4-1: config 0 descriptor?? [ 383.904576][T14401] sit0: entered promiscuous mode [ 383.955949][T14401] netlink: 'syz.4.3950': attribute type 1 has an invalid length. [ 383.955970][T14401] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3950'. [ 384.028399][ T5913] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 384.028686][ T5913] asix 4-1:0.0: probe with driver asix failed with error -71 [ 384.067981][ T5913] usb 4-1: USB disconnect, device number 57 [ 384.252144][T14409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3955'. [ 385.173267][T14449] tmpfs: Bad value for 'mpol' [ 386.355640][ T994] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 386.552501][ T994] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 386.552531][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.552550][ T994] usb 5-1: Product: syz [ 386.552563][ T994] usb 5-1: Manufacturer: syz [ 386.552577][ T994] usb 5-1: SerialNumber: syz [ 386.603172][ T994] usb 5-1: config 0 descriptor?? [ 386.822520][ T994] hso 5-1:0.0: Can't find BULK IN endpoint [ 386.823777][ T994] usb-storage 5-1:0.0: USB Mass Storage device detected [ 386.902210][T14513] netlink: 'syz.3.4005': attribute type 10 has an invalid length. [ 387.040506][ T5842] usb 5-1: USB disconnect, device number 60 [ 387.734682][ T5842] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 387.905806][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 387.930387][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 387.930416][ T5842] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 387.940555][ T5842] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 387.940583][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.940603][ T5842] usb 3-1: Product: syz [ 387.940616][ T5842] usb 3-1: Manufacturer: syz [ 387.940630][ T5842] usb 3-1: SerialNumber: syz [ 387.951536][ T5842] usb 3-1: config 0 descriptor?? [ 388.133936][T14557] macsec0: entered promiscuous mode [ 388.136751][T14557] macsec0: entered allmulticast mode [ 388.136771][T14557] veth1_macvtap: entered allmulticast mode [ 388.426340][ T44] usb 3-1: USB disconnect, device number 46 [ 388.567131][T14574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4034'. [ 388.567152][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4034'. [ 388.643502][ T5842] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 388.803808][ T5842] usb 6-1: Using ep0 maxpacket: 8 [ 388.807126][ T5842] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 388.807153][ T5842] usb 6-1: config 179 has no interface number 0 [ 388.807205][ T5842] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 388.807231][ T5842] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 388.807259][ T5842] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 388.807285][ T5842] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 388.807310][ T5842] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 388.807336][ T5842] usb 6-1: config 179 interface 65 has no altsetting 0 [ 388.807370][ T5842] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 388.807391][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.913555][ T5842] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input34 [ 388.974892][ T6006] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 388.996788][ T5190] input input34: unable to receive magic message: -110 [ 389.088205][ T5190] input input34: unable to receive magic message: -32 [ 389.135176][ T6006] usb 4-1: Using ep0 maxpacket: 32 [ 389.141881][ T6006] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 389.141907][ T6006] usb 4-1: config 0 has no interface number 0 [ 389.142702][ T6006] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 389.142728][ T6006] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 389.160944][ T6006] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 389.161981][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.162003][ T6006] usb 4-1: Product: syz [ 389.162017][ T6006] usb 4-1: Manufacturer: syz [ 389.162030][ T6006] usb 4-1: SerialNumber: syz [ 389.236621][ T5190] input input34: unable to receive magic message: -32 [ 389.253428][ T6006] usb 4-1: config 0 descriptor?? [ 389.301257][ T6006] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 389.332099][ T5190] input input34: unable to receive magic message: -32 [ 389.347441][ T6021] usb 6-1: USB disconnect, device number 8 [ 389.347470][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 389.347637][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 389.532146][ T6006] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 389.532465][ T6006] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 389.580544][T14588] netlink: 'syz.2.4044': attribute type 10 has an invalid length. [ 389.598412][T14588] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 389.602891][T14588] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 389.778414][ T6021] usb 4-1: USB disconnect, device number 58 [ 390.144346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 390.145179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 390.145770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 390.146353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 390.146942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 390.147532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 390.148124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 390.148708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 390.150046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 390.150709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 390.739754][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4053'. [ 392.169589][T14631] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4063'. [ 392.546135][T14638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4065'. [ 392.546168][T14638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4065'. [ 392.634695][T14638] ip6gretap1: entered allmulticast mode [ 392.731761][T14640] veth4: entered allmulticast mode [ 395.219700][T14682] netlink: 'syz.2.4088': attribute type 10 has an invalid length. [ 395.496078][ C0] net_ratelimit: 8228 callbacks suppressed [ 395.496097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 395.496742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 395.497361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 395.497944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 395.498592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 395.499172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 395.499771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 395.500406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 395.501004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 395.501957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 396.222563][T14695] netlink: 'syz.4.4094': attribute type 4 has an invalid length. [ 396.222584][T14695] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4094'. [ 396.703987][ C0] sched: DL replenish lagged too much [ 397.110644][T14705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4098'. [ 397.527400][ T5842] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 397.693703][ T5842] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 397.693733][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.693752][ T5842] usb 5-1: Product: syz [ 397.693765][ T5842] usb 5-1: Manufacturer: syz [ 397.693780][ T5842] usb 5-1: SerialNumber: syz [ 397.769370][ T5842] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 397.867456][ T5842] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 399.366805][ T5842] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 399.367008][ T5842] ath9k_htc: Failed to initialize the device [ 400.852561][ C0] net_ratelimit: 8206 callbacks suppressed [ 400.852581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 400.853252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 400.853888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 400.854515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 400.855208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 400.855867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 400.856519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 400.857160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 400.858210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 400.858838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 406.208105][ C0] net_ratelimit: 7931 callbacks suppressed [ 406.208125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 406.208753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 406.209786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 406.210381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 406.210968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 406.211560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 406.212209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 406.212790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 406.213433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 406.214020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 406.498648][ T5840] usb 5-1: USB disconnect, device number 61 [ 406.782235][ T5840] usb 5-1: ath9k_htc: USB layer deinitialized [ 408.966439][T14732] vivid-000: disconnect [ 408.970867][T14731] vivid-000: reconnect [ 409.383398][T14736] netlink: 'syz.4.4108': attribute type 2 has an invalid length. [ 409.383417][T14736] netlink: 'syz.4.4108': attribute type 11 has an invalid length. [ 409.383431][T14736] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4108'. [ 409.743046][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.759761][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.761224][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.764323][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.798956][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.564157][ C0] net_ratelimit: 8698 callbacks suppressed [ 411.564181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 411.564923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 411.565600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 411.566243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 411.567281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 411.567933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 411.568634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 411.569358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 411.570024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 411.570662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 412.036566][ T5154] Bluetooth: hci5: command tx timeout [ 412.517012][ T8748] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 412.542085][ T8748] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 412.543432][ T8748] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.544662][ T8748] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 412.545459][ T8748] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.030716][ T5154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 413.051550][ T5154] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 413.061233][ T5154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 413.062576][ T5154] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 413.063431][ T5154] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 413.419605][ T8748] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 413.442260][ T8748] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 413.444296][ T8748] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 413.462844][ T8748] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 413.483765][ T8748] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 414.258139][ T8748] Bluetooth: hci5: command tx timeout [ 414.856877][ T8748] Bluetooth: hci6: command tx timeout [ 415.258373][T14677] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4086'. [ 415.286213][ T8748] Bluetooth: hci7: command tx timeout [ 415.712241][ T8748] Bluetooth: hci8: command tx timeout [ 415.748926][T14750] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 416.481774][ T8748] Bluetooth: hci5: command tx timeout [ 416.920216][ C0] net_ratelimit: 8726 callbacks suppressed [ 416.920235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 416.920919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 416.921521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 416.922101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 416.923044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 416.923660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 416.924381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 416.925061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 416.925679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 416.926287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 417.080490][ T8748] Bluetooth: hci6: command tx timeout [ 417.514161][ T8748] Bluetooth: hci7: command tx timeout [ 417.937972][ T8748] Bluetooth: hci8: command tx timeout [ 417.991966][T14742] chnl_net:caif_netlink_parms(): no params data found [ 418.164308][T14744] chnl_net:caif_netlink_parms(): no params data found [ 418.705520][ T8748] Bluetooth: hci5: command tx timeout [ 419.304417][ T8748] Bluetooth: hci6: command tx timeout [ 419.735700][ T8748] Bluetooth: hci7: command tx timeout [ 420.159410][ T8748] Bluetooth: hci8: command tx timeout [ 421.528408][ T8748] Bluetooth: hci6: command tx timeout [ 421.955926][ T8748] Bluetooth: hci7: command tx timeout [ 422.276496][ C0] net_ratelimit: 8494 callbacks suppressed [ 422.276517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 422.277167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 422.277751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 422.278370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 422.278965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 422.279572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 422.280239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 422.280879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 422.281834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 422.282418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 422.399873][ T8748] Bluetooth: hci8: command tx timeout [ 427.632024][ C0] net_ratelimit: 8922 callbacks suppressed [ 427.632045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 427.632639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 427.633228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 427.633834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 427.634416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 427.635052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 427.635663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 427.636584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 427.637200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 427.637784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 432.988054][ C0] net_ratelimit: 8623 callbacks suppressed [ 432.988074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 432.988704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 432.989325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 432.990300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 432.991650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 432.992276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 432.993057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 432.993726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 432.994339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 432.994957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 433.381528][ T5154] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 433.537002][ T5154] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 433.558372][ T5154] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 433.562708][ T5154] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 433.563594][ T5154] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 435.810707][ T8748] Bluetooth: hci9: command tx timeout [ 438.034415][ T8748] Bluetooth: hci9: command tx timeout [ 438.344353][ C0] net_ratelimit: 8860 callbacks suppressed [ 438.344374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 438.344991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 438.345936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 438.346568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 438.347152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 438.347765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 438.348408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 438.348986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 438.349572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 438.350179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 440.257724][ T8748] Bluetooth: hci9: command tx timeout [ 442.481667][ T8748] Bluetooth: hci9: command tx timeout [ 443.700092][ C0] net_ratelimit: 8718 callbacks suppressed [ 443.700112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 443.700746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 443.701386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 443.701967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 443.702543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 443.703134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 443.703813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 443.704421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 443.705054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 443.706017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 446.675186][T14737] chnl_net:caif_netlink_parms(): no params data found [ 449.056003][ C0] net_ratelimit: 8472 callbacks suppressed [ 449.056024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 449.056654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 449.057385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 449.058063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 449.058715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 449.059739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 449.060366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 449.061010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 449.061628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 449.062300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 454.412215][ C0] net_ratelimit: 8496 callbacks suppressed [ 454.412236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 454.412898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 454.413531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 454.414148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 454.414782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 454.415457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 454.416078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 454.416718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 454.417898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 454.418553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 459.768344][ C0] net_ratelimit: 8420 callbacks suppressed [ 459.768368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 459.768995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 459.769613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 459.770269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 459.771245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 459.771950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 459.772569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 459.773183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 459.773832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 459.774449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 465.124215][ C0] net_ratelimit: 8431 callbacks suppressed [ 465.124235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 465.124859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 465.125440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 465.126061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 465.127122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 465.127716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 465.128300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 465.128913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 465.129495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 465.130108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 470.480464][ C0] net_ratelimit: 8196 callbacks suppressed [ 470.480484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 470.481160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 470.481779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 470.482396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 470.483006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 470.484080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 470.484757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 470.485403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 470.486012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 470.486626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 473.839604][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.874349][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.875613][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.877166][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.878710][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 475.836175][ C0] net_ratelimit: 8115 callbacks suppressed [ 475.836196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 475.836780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 475.837372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 475.837997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 475.838573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 475.839252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 475.839870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 475.840452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 475.841414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 475.842040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 476.095645][ T8748] Bluetooth: hci0: command tx timeout [ 477.708302][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.730345][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.731606][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.733477][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.734737][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.868181][ T8748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 477.872003][ T8748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 477.904442][ T8748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 477.905740][ T8748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 477.906597][ T8748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.250025][ T8748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 478.271775][ T8748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 478.273058][ T8748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 478.289976][ T8748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 478.305179][ T8748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 478.316252][ T8748] Bluetooth: hci0: command tx timeout [ 480.037666][ T8748] Bluetooth: hci1: command tx timeout [ 480.112668][ T8748] Bluetooth: hci2: command tx timeout [ 480.540344][ T8748] Bluetooth: hci4: command tx timeout [ 480.540918][ T8748] Bluetooth: hci0: command tx timeout [ 481.191954][ C0] net_ratelimit: 8394 callbacks suppressed [ 481.191972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 481.192456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 481.192890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 481.193397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 481.193856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 481.194414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 481.194987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 481.195571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 481.196139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 481.196767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 482.250561][ T8748] Bluetooth: hci1: command tx timeout [ 482.336557][ T8748] Bluetooth: hci2: command tx timeout [ 482.763776][ T8748] Bluetooth: hci0: command tx timeout [ 482.763808][ T8748] Bluetooth: hci4: command tx timeout [ 484.474265][ T5154] Bluetooth: hci1: command tx timeout [ 484.559972][ T5154] Bluetooth: hci2: command tx timeout [ 484.987683][ T5154] Bluetooth: hci4: command tx timeout [ 486.548320][ C0] net_ratelimit: 8317 callbacks suppressed [ 486.548341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 486.548939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 486.549586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 486.550173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 486.550781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 486.551407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 486.551988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 486.552935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 486.553576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 486.554170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 486.697657][ T5154] Bluetooth: hci1: command tx timeout [ 486.783890][ T5154] Bluetooth: hci2: command tx timeout [ 487.211000][ T5154] Bluetooth: hci4: command tx timeout [ 491.906387][ C0] net_ratelimit: 8204 callbacks suppressed [ 491.906408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 491.907109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 491.907746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 491.908431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 491.909077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 491.910075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 491.910701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 491.911388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 491.912045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 491.912696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 497.260233][ C0] net_ratelimit: 8134 callbacks suppressed [ 497.260253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 497.260961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 497.261628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 497.262284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 497.262915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 497.263544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 497.264548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 497.265236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 497.265911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 497.266542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 498.145097][ T8748] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 498.166840][ T8748] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 498.168090][ T8748] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 498.187560][ T8748] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 498.188850][ T8748] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 500.381830][ T5154] Bluetooth: hci10: command tx timeout [ 502.605502][ T5154] Bluetooth: hci10: command tx timeout [ 502.616436][ C0] net_ratelimit: 8361 callbacks suppressed [ 502.616452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 502.617015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 502.617575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 502.618129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 502.618687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 502.619303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 502.619853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 502.620737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 502.621298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 502.621850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 504.829219][ T5154] Bluetooth: hci10: command tx timeout [ 507.052956][ T5154] Bluetooth: hci10: command tx timeout [ 507.971986][ C0] net_ratelimit: 8432 callbacks suppressed [ 507.972007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 507.972695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 507.973340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 507.973975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 507.974596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 507.975303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 507.975944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 507.976623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 507.977644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 507.978283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 513.327959][ C0] net_ratelimit: 8409 callbacks suppressed [ 513.327980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 513.328575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 513.329175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 513.329760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 513.330423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 513.331038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 513.331626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 513.332580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 513.333160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 513.333779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 518.684149][ C0] net_ratelimit: 8530 callbacks suppressed [ 518.684170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 518.684779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 518.685373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 518.685957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 518.686536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 518.687485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 518.688125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 518.688729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 518.689316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 518.689892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 524.040810][ C0] net_ratelimit: 8392 callbacks suppressed [ 524.040832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 524.041420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 524.042009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 524.042693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 524.043283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 524.043892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 524.044473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 524.045064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 524.046816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 524.047462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 529.396065][ C0] net_ratelimit: 8391 callbacks suppressed [ 529.396086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 529.396714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 529.397696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 529.398306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 529.398889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 529.399473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 529.400109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 529.400755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 529.401342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 529.401920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 534.751972][ C0] net_ratelimit: 8373 callbacks suppressed [ 534.751992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 534.752608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 534.753254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 534.753844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 534.754432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 534.755391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 534.755981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 534.756593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 534.757235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 534.757842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 538.414848][T14820] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 538.443594][T14820] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 538.444858][T14820] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 538.447214][T14820] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 538.448856][T14820] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 540.108379][ C0] net_ratelimit: 8413 callbacks suppressed [ 540.108400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 540.109010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 540.109603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 540.110590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 540.111199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 540.111784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 540.112374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 540.112951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 540.113537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 540.114285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 542.196684][ T8748] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 542.200597][ T8748] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 542.203922][ T8748] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 542.205197][ T8748] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 542.206514][ T8748] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 542.441626][T14828] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 542.481600][T14828] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 542.485593][T14828] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 542.486928][T14828] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 542.488134][T14828] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 542.893341][T14835] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 542.915399][T14835] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 542.916688][T14835] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 542.917989][T14835] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 542.918829][T14835] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 545.464415][ C0] net_ratelimit: 8377 callbacks suppressed [ 545.464451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 545.465065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 545.465991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 545.466587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 545.467278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 545.467954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 545.468566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 545.469154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 545.469742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 545.470322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 545.881019][T14836] Bluetooth: hci5: command 0x0406 tx timeout [ 550.820705][ C0] net_ratelimit: 8279 callbacks suppressed [ 550.820726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 550.821320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 550.822009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 550.822600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 550.823240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 550.823826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 550.824421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 550.825012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 550.825980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 550.826569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 556.175920][ C0] net_ratelimit: 8223 callbacks suppressed [ 556.175942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 556.176528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 556.177183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 556.178172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 556.178802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 556.179416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 556.180010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 556.180590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 556.181230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 556.181818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 561.531926][ C0] net_ratelimit: 8282 callbacks suppressed [ 561.531947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 561.532941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 561.533589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 561.534172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 561.534793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 561.535421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 561.535993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 561.536583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 561.537224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 561.538166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 562.459625][T14843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 562.602690][T14843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 562.606034][T14843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 562.633392][T14843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 562.644618][T14843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 566.887918][ C0] net_ratelimit: 8238 callbacks suppressed [ 566.887938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 566.888615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 566.889333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 566.890396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 566.890991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 566.891656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 566.892240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 566.892862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 566.893489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 566.894109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 567.540215][T14845] Bluetooth: hci9: command 0x0406 tx timeout [ 572.244165][ C0] net_ratelimit: 8232 callbacks suppressed [ 572.244187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 572.245146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 572.245786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 572.246465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 572.247120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 572.247703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 572.248297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 572.248877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 572.249540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 572.250158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:4b:83:03:0d:d3, vlan:0) [ 574.190209][ T38] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 574.190243][ T38] Not tainted syzkaller #0 [ 574.190253][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.190266][ T38] task:kworker/u8:0 state:D stack:21160 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 574.190324][ T38] Workqueue: events_unbound bpf_map_free_deferred [ 574.190354][ T38] Call Trace: [ 574.190361][ T38] [ 574.190375][ T38] __schedule+0x16f3/0x4c20 [ 574.190422][ T38] ? __lock_acquire+0xab9/0xd20 [ 574.190444][ T38] ? __pfx___schedule+0x10/0x10 [ 574.190482][ T38] ? schedule+0x91/0x360 [ 574.190505][ T38] schedule+0x165/0x360 [ 574.190528][ T38] schedule_timeout+0x9a/0x270 [ 574.190548][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 574.190579][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.190600][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.190619][ T38] ? wait_for_completion+0x267/0x5d0 [ 574.190642][ T38] wait_for_completion+0x2bf/0x5d0 [ 574.190676][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 574.190704][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 574.190730][ T38] rcu_barrier+0x463/0x570 [ 574.190760][ T38] dev_map_free+0x11f/0x6a0 [ 574.190794][ T38] bpf_map_free_deferred+0x113/0x140 [ 574.190812][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 574.190835][ T38] process_scheduled_works+0xade/0x17b0 [ 574.190884][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.190924][ T38] worker_thread+0x8a0/0xda0 [ 574.190973][ T38] kthread+0x70e/0x8a0 [ 574.191000][ T38] ? __pfx_worker_thread+0x10/0x10 [ 574.191021][ T38] ? __pfx_kthread+0x10/0x10 [ 574.191049][ T38] ? __pfx_kthread+0x10/0x10 [ 574.191073][ T38] ret_from_fork+0x3fc/0x770 [ 574.191098][ T38] ? __pfx_ret_from_fork+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 574.191132][ T38] ? __switch_to_asm+0x39/0x70 [ 574.191149][ T38] ? __switch_to_asm+0x33/0x70 [ 574.191164][ T38] ? __pfx_kthread+0x10/0x10 [ 574.191189][ T38] ret_from_fork_asm+0x1a/0x30 [ 574.191222][ T38] [ 574.191361][ T38] INFO: task syz.3.4067:14640 blocked for more than 143 seconds. [ 574.191374][ T38] Not tainted syzkaller #0 [ 574.191383][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.191392][ T38] task:syz.3.4067 state:D stack:22200 pid:14640 tgid:14639 ppid:5845 task_flags:0x400140 flags:0x00004006 [ 574.191439][ T38] Call Trace: [ 574.191446][ T38] [ 574.191457][ T38] __schedule+0x16f3/0x4c20 [ 574.191487][ T38] ? sched_clock+0x3f/0x60 [ 574.191507][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.191538][ T38] ? __pfx___schedule+0x10/0x10 [ 574.191583][ T38] rt_mutex_schedule+0x77/0xf0 [ 574.191601][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 574.191601][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 574.191634][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 574.191656][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 574.191677][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 574.191695][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 574.191711][ T38] ? __lock_acquire+0xab9/0xd20 [ 574.191744][ T38] ? rcu_barrier+0x4c/0x570 [ 574.191776][ T38] ? rcu_barrier+0x4c/0x570 [ 574.191791][ T38] mutex_lock_nested+0x16a/0x1d0 [ 574.191808][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 574.191831][ T38] rcu_barrier+0x4c/0x570 [ 574.191859][ T38] netdev_run_todo+0x327/0xea0 [ 574.191891][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 574.191915][ T38] ? bpf_lsm_capable+0x9/0x20 [ 574.191934][ T38] ? security_capable+0x7e/0x2e0 [ 574.191970][ T38] rtnl_newlink+0x177b/0x1c70 [ 574.192005][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 574.192031][ T38] ? __lock_acquire+0xab9/0xd20 [ 574.192129][ T38] ? __lock_acquire+0xab9/0xd20 [ 574.192178][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 574.192197][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 574.192216][ T38] ? __lock_acquire+0xab9/0xd20 [ 574.192239][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 574.192259][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 574.192297][ T38] netlink_rcv_skb+0x205/0x470 [ 574.192316][ T38] ? __lock_acquire+0xab9/0xd20 [ 574.192337][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 574.192359][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.192392][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 574.192422][ T38] netlink_unicast+0x843/0xa10 [ 574.192451][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 574.192472][ T38] ? netlink_sendmsg+0x642/0xb30 [ 574.192491][ T38] ? skb_put+0x11b/0x210 [ 574.192517][ T38] netlink_sendmsg+0x805/0xb30 [ 574.192547][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.192577][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.192595][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.192616][ T38] __sock_sendmsg+0x219/0x270 [ 574.192640][ T38] ____sys_sendmsg+0x508/0x820 [ 574.192669][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.192702][ T38] ? import_iovec+0x74/0xa0 [ 574.192726][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 574.192752][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.192814][ T38] ? __fget_files+0x2a/0x420 [ 574.192835][ T38] ? __fget_files+0x3a6/0x420 [ 574.192868][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 574.192894][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.192928][ T38] ? rcu_is_watching+0x15/0xb0 [ 574.192957][ T38] ? do_syscall_64+0xbe/0x3b0 [ 574.192983][ T38] do_syscall_64+0xfa/0x3b0 [ 574.193004][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.193024][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.193043][ T38] ? clear_bhb_loop+0x60/0xb0 [ 574.193064][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.193089][ T38] RIP: 0033:0x7f8ac733ebe9 [ 574.193109][ T38] RSP: 002b:00007f8ac55a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.193136][ T38] RAX: ffffffffffffffda RBX: 00007f8ac7565fa0 RCX: 00007f8ac733ebe9 [ 574.193151][ T38] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 574.193163][ T38] RBP: 00007f8ac73c1e19 R08: 0000000000000000 R09: 0000000000000000 [ 574.193174][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.193185][ T38] R13: 00007f8ac7566038 R14: 00007f8ac7565fa0 R15: 00007ffc5d16d338 [ 574.193217][ T38] [ 574.193251][ T38] [ 574.193251][ T38] Showing all locks held in the system: [ 574.193260][ T38] 4 locks held by kworker/0:0/9: [ 574.193270][ T38] #0: ffff88805b1f8538 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.193323][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.193385][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 574.193428][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 574.193473][ T38] 4 locks held by kworker/0:1/10: [ 574.193484][ T38] 3 locks held by kworker/u8:0/12: [ 574.193494][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.193537][ T38] #1: ffffc90000117bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.193581][ T38] #2: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 574.193623][ T38] 2 locks held by ktimers/0/16: [ 574.193633][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 574.193676][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 574.193721][ T38] 2 locks held by rcuc/0/20: [ 574.193731][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 574.193774][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 574.193833][ T38] 1 lock held by khungtaskd/38: [ 574.193842][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 574.193888][ T38] 3 locks held by kworker/u8:6/770: [ 574.193898][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.193942][ T38] #1: ffffc90003fbfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.193986][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 574.194046][ T38] 4 locks held by kworker/u9:1/5154: [ 574.194056][ T38] #0: ffff88807bd3d938 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.194104][ T38] #1: ffffc9001032fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.194155][ T38] #2: ffff88803998c0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 574.194198][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 574.194242][ T38] 2 locks held by getty/5593: [ 574.194252][ T38] #0: ffff88823bf2e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.194297][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 574.194343][ T38] 8 locks held by kworker/0:4/5913: [ 574.194354][ T38] 3 locks held by kworker/0:6/5921: [ 574.194364][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.194408][ T38] #1: ffffc900061bfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.194452][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 574.194500][ T38] 4 locks held by kworker/u9:4/8748: [ 574.194509][ T38] #0: ffff88806ab83938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.194557][ T38] #1: ffffc9000623fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.194601][ T38] #2: ffff888085d240a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 574.194643][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 574.194687][ T38] 2 locks held by syz.3.4067/14640: [ 574.194697][ T38] #0: ffffffff8e43a940 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 574.194745][ T38] #1: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 574.194786][ T38] 1 lock held by syz.5.4086/14677: [ 574.194796][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 574.194841][ T38] 1 lock held by syz.2.4088/14682: [ 574.194851][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 574.194891][ T38] 1 lock held by syz.0.4090/14686: [ 574.194901][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 574.194944][ T38] 3 locks held by kworker/u8:16/14711: [ 574.194955][ T38] #0: ffff88814d39b938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.195000][ T38] #1: ffffc90013c9fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.195044][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 574.195086][ T38] 4 locks held by kworker/u8:19/14714: [ 574.195096][ T38] #0: ffff88814d90b938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.195146][ T38] #1: ffffc90013c6fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.195191][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 574.195233][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 574.195278][ T38] 2 locks held by syz-executor/14737: [ 574.195288][ T38] #0: ffffffff8e447b40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 574.195335][ T38] #1: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 574.195375][ T38] 2 locks held by syz-executor/14742: [ 574.195386][ T38] #0: ffff888065a98e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 574.195426][ T38] #1: ffff888065a980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 574.195470][ T38] 1 lock held by syz-executor/14744: [ 574.195480][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 574.195523][ T38] 1 lock held by syz-executor/14746: [ 574.195533][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 574.195577][ T38] 1 lock held by syz.4.4114/14754: [ 574.195587][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 574.195631][ T38] 2 locks held by syz-executor/14768: [ 574.195641][ T38] #0: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 574.195684][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x80/0x210 [ 574.195727][ T38] 1 lock held by syz-executor/14787: [ 574.195737][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.195780][ T38] 1 lock held by syz-executor/14794: [ 574.195790][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.195833][ T38] 1 lock held by syz-executor/14796: [ 574.195843][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.195888][ T38] 1 lock held by syz-executor/14801: [ 574.195897][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.195943][ T38] 1 lock held by syz-executor/14805: [ 574.195953][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.195998][ T38] 1 lock held by syz-executor/14819: [ 574.196008][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.196054][ T38] 4 locks held by kworker/u9:0/14820: [ 574.196064][ T38] #0: ffff888077519138 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.196111][ T38] #1: ffffc900049ffbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.196162][ T38] #2: ffff888085d0c0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 574.196204][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 574.196247][ T38] 1 lock held by syz-executor/14825: [ 574.196257][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.196302][ T38] 4 locks held by kworker/u9:2/14828: [ 574.196313][ T38] #0: ffff888085dce138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.196360][ T38] #1: ffffc9000490fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.196404][ T38] #2: ffff888085d100a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 574.196447][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 574.196487][ T38] 1 lock held by syz-executor/14830: [ 574.196497][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.196543][ T38] 1 lock held by syz-executor/14833: [ 574.196552][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.196599][ T38] 6 locks held by kworker/u9:5/14835: [ 574.196609][ T38] #0: ffff88803781b938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.196652][ T38] #1: ffffc9000487fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.196696][ T38] #2: ffff888069c08e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 574.196741][ T38] #3: ffff888069c080a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 574.196784][ T38] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 574.196826][ T38] #5: ffff88803781b358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 574.196875][ T38] 5 locks held by kworker/u9:6/14836: [ 574.196886][ T38] #0: ffff888029042938 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.196930][ T38] #1: ffffc9000488fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.196974][ T38] #2: ffff88805a5ece80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 574.197019][ T38] #3: ffff88805a5ec0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 574.197061][ T38] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 574.197105][ T38] 1 lock held by syz-executor/14842: [ 574.197115][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 574.197167][ T38] 4 locks held by kworker/u9:7/14843: [ 574.197177][ T38] #0: ffff888038057938 ((wq_completion)hci8#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.197225][ T38] #1: ffffc9000464fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.197269][ T38] #2: ffff88808b9cc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 574.197309][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 574.197350][ T38] [ 574.197355][ T38] ============================================= [ 574.197355][ T38] [ 574.197370][ T38] NMI backtrace for cpu 1 [ 574.197394][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 574.197414][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.197424][ T38] Call Trace: [ 574.197431][ T38] [ 574.197438][ T38] dump_stack_lvl+0x189/0x250 [ 574.197466][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.197489][ T38] ? __pfx__printk+0x10/0x10 [ 574.197519][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 574.197540][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 574.197561][ T38] ? __pfx__printk+0x10/0x10 [ 574.197583][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.197607][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 574.197628][ T38] watchdog+0xf93/0xfe0 [ 574.197654][ T38] ? watchdog+0x1de/0xfe0 [ 574.197681][ T38] kthread+0x70e/0x8a0 [ 574.197706][ T38] ? __pfx_watchdog+0x10/0x10 [ 574.197726][ T38] ? __pfx_kthread+0x10/0x10 [ 574.197753][ T38] ? __pfx_kthread+0x10/0x10 [ 574.197777][ T38] ret_from_fork+0x3fc/0x770 [ 574.197800][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 574.197826][ T38] ? __switch_to_asm+0x39/0x70 [ 574.197841][ T38] ? __switch_to_asm+0x33/0x70 [ 574.197856][ T38] ? __pfx_kthread+0x10/0x10 [ 574.197879][ T38] ret_from_fork_asm+0x1a/0x30 [ 574.197910][ T38] [ 574.197917][ T38] Sending NMI from CPU 1 to CPUs 0: [ 574.197941][ C0] NMI backtrace for cpu 0 [ 574.197958][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 574.197991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.198000][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x8/0xa0 [ 574.198019][ C0] Code: 89 74 0a 18 48 89 44 0a 20 e9 c4 91 3b 09 cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 e0 f5 91 65 44 8b 05 e7 81 37 10 41 81 e0 00 00 [ 574.198032][ C0] RSP: 0018:ffffc90000156058 EFLAGS: 00000246 [ 574.198046][ C0] RAX: ffffffff88de6aa3 RBX: ffff88804d4d2c80 RCX: ffff88801ae85940 [ 574.198058][ C0] RDX: 0000000000000100 RSI: 00000000000005ee RDI: 0000000000000046 [ 574.198068][ C0] RBP: 00000000000005ee R08: 0000000000000000 R09: 0000000000000100 [ 574.198077][ C0] R10: dffffc0000000000 R11: ffffffff85fa2ea0 R12: 00000000000005dc [ 574.198088][ C0] R13: dffffc0000000000 R14: ffff888028e48000 R15: 0000000000000046 [ 574.198099][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 574.198112][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.198123][ C0] CR2: 00007f145568ed00 CR3: 0000000028a1c000 CR4: 00000000003526f0 [ 574.198137][ C0] Call Trace: [ 574.198143][ C0] [ 574.198148][ C0] __dev_forward_skb2+0x173/0x730 [ 574.198169][ C0] veth_xmit+0x4a4/0xe30 [ 574.198184][ C0] ? veth_xmit+0x6a/0xe30 [ 574.198204][ C0] dev_hard_start_xmit+0x2f0/0x870 [ 574.198230][ C0] __dev_queue_xmit+0x1b50/0x3b70 [ 574.198253][ C0] ? __dev_queue_xmit+0x26f/0x3b70 [ 574.198274][ C0] ? kasan_save_track+0x3e/0x80 [ 574.198289][ C0] ? kasan_save_free_info+0x46/0x50 [ 574.198302][ C0] ? kmem_cache_free+0x195/0x510 [ 574.198320][ C0] ? br_nf_dev_queue_xmit+0x52d/0x2090 [ 574.198337][ C0] ? NF_HOOK+0x618/0x6b0 [ 574.198353][ C0] ? br_nf_post_routing+0xb66/0xfe0 [ 574.198369][ C0] ? nf_hook_slow+0xc5/0x220 [ 574.198384][ C0] ? NF_HOOK+0x215/0x3c0 [ 574.198398][ C0] ? br_forward_finish+0xd3/0x130 [ 574.198413][ C0] ? br_nf_forward_finish+0xa40/0xe60 [ 574.198430][ C0] ? NF_HOOK+0x618/0x6b0 [ 574.198445][ C0] ? br_nf_forward_ip+0x647/0x7e0 [ 574.198462][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 574.198480][ C0] ? br_flood+0x31a/0x6a0 [ 574.198493][ C0] ? br_handle_frame_finish+0x14b4/0x19b0 [ 574.198510][ C0] ? br_nf_hook_thresh+0x3c3/0x4a0 [ 574.198526][ C0] ? br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 574.198545][ C0] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 574.198562][ C0] ? br_handle_frame+0x985/0x14d0 [ 574.198578][ C0] ? __netif_receive_skb_core+0x10b6/0x4020 [ 574.198592][ C0] ? __netif_receive_skb+0x72/0x380 [ 574.198606][ C0] ? process_backlog+0x31e/0x900 [ 574.198620][ C0] ? __napi_poll+0xb6/0x540 [ 574.198633][ C0] ? net_rx_action+0x707/0xe00 [ 574.198648][ C0] ? handle_softirqs+0x22c/0x710 [ 574.198663][ C0] ? run_ktimerd+0xcf/0x190 [ 574.198679][ C0] ? smpboot_thread_fn+0x53f/0xa60 [ 574.198695][ C0] ? kthread+0x70e/0x8a0 [ 574.198711][ C0] ? ret_from_fork+0x3fc/0x770 [ 574.198726][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 574.198756][ C0] br_dev_queue_push_xmit+0x6c5/0x890 [ 574.198776][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 574.198795][ C0] ? NF_HOOK+0x9e/0x6b0 [ 574.198811][ C0] NF_HOOK+0x618/0x6b0 [ 574.198830][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 574.198850][ C0] ? net_generic+0x1e/0x240 [ 574.198865][ C0] ? net_generic+0x1e/0x240 [ 574.198886][ C0] ? net_generic+0x1e/0x240 [ 574.198902][ C0] ? skb_pull+0xc1/0x1d0 [ 574.198916][ C0] br_nf_post_routing+0xb66/0xfe0 [ 574.198933][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 574.198954][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 574.198972][ C0] nf_hook_slow+0xc5/0x220 [ 574.198989][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 574.199004][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 574.199020][ C0] NF_HOOK+0x215/0x3c0 [ 574.199037][ C0] ? NF_HOOK+0x9e/0x3c0 [ 574.199052][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 574.199068][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 574.199089][ C0] br_forward_finish+0xd3/0x130 [ 574.199104][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 574.199121][ C0] br_nf_forward_finish+0xa40/0xe60 [ 574.199144][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 574.199163][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 574.199180][ C0] ? NF_HOOK+0x9e/0x6b0 [ 574.199196][ C0] ? NF_HOOK+0x9e/0x6b0 [ 574.199213][ C0] NF_HOOK+0x618/0x6b0 [ 574.199231][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 574.199255][ C0] br_nf_forward_ip+0x647/0x7e0 [ 574.199272][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 574.199290][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 574.199308][ C0] nf_hook_slow+0xc5/0x220 [ 574.199325][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 574.199340][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 574.199356][ C0] NF_HOOK+0x215/0x3c0 [ 574.199373][ C0] ? NF_HOOK+0x9e/0x3c0 [ 574.199388][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 574.199404][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 574.199425][ C0] __br_forward+0x41e/0x600 [ 574.199440][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 574.199458][ C0] ? __pfx___br_forward+0x10/0x10 [ 574.199475][ C0] ? skb_clone+0x246/0x3a0 [ 574.199494][ C0] maybe_deliver+0xb5/0x160 [ 574.199512][ C0] br_flood+0x31a/0x6a0 [ 574.199535][ C0] br_handle_frame_finish+0x14b4/0x19b0 [ 574.199560][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 574.199577][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 574.199596][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 574.199614][ C0] ? nf_hook_slow+0x176/0x220 [ 574.199631][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 574.199649][ C0] br_nf_hook_thresh+0x3c3/0x4a0 [ 574.199670][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 574.199686][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 574.199706][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 574.199729][ C0] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 574.199748][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 574.199769][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 574.199788][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 574.199807][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 574.199827][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 574.199845][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 574.199866][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 574.199887][ C0] br_handle_frame+0x985/0x14d0 [ 574.199909][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 574.199925][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 574.199943][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 574.199963][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 574.199981][ C0] __netif_receive_skb_core+0x10b6/0x4020 [ 574.199996][ C0] ? __lock_acquire+0xab9/0xd20 [ 574.200017][ C0] ? do_raw_spin_lock+0x121/0x290 [ 574.200036][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 574.200054][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 574.200069][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 574.200086][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 574.200107][ C0] ? __lock_acquire+0xab9/0xd20 [ 574.200128][ C0] ? process_backlog+0x27b/0x900 [ 574.200144][ C0] ? process_backlog+0x27b/0x900 [ 574.200158][ C0] __netif_receive_skb+0x72/0x380 [ 574.200173][ C0] ? rt_spin_unlock+0x65/0x80 [ 574.200189][ C0] ? process_backlog+0x27b/0x900 [ 574.200203][ C0] process_backlog+0x31e/0x900 [ 574.200224][ C0] __napi_poll+0xb6/0x540 [ 574.200241][ C0] net_rx_action+0x707/0xe00 [ 574.200255][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.200279][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 574.200311][ C0] handle_softirqs+0x22c/0x710 [ 574.200331][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 574.200353][ C0] run_ktimerd+0xcf/0x190 [ 574.200369][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 574.200385][ C0] ? schedule+0x91/0x360 [ 574.200404][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 574.200419][ C0] smpboot_thread_fn+0x53f/0xa60 [ 574.200436][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 574.200456][ C0] kthread+0x70e/0x8a0 [ 574.200475][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 574.200492][ C0] ? __pfx_kthread+0x10/0x10 [ 574.200512][ C0] ? __pfx_kthread+0x10/0x10 [ 574.200531][ C0] ret_from_fork+0x3fc/0x770 [ 574.200549][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 574.200568][ C0] ? __switch_to_asm+0x39/0x70 [ 574.200582][ C0] ? __switch_to_asm+0x33/0x70 [ 574.200594][ C0] ? __pfx_kthread+0x10/0x10 [ 574.200613][ C0] ret_from_fork_asm+0x1a/0x30 [ 574.200634][ C0] [ 574.499720][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 574.499740][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 574.499761][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.499773][ T38] Call Trace: [ 574.499780][ T38] [ 574.499789][ T38] dump_stack_lvl+0x99/0x250 [ 574.499818][ T38] ? __asan_memcpy+0x40/0x70 [ 574.499838][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.499860][ T38] ? __pfx__printk+0x10/0x10 [ 574.499891][ T38] vpanic+0x281/0x750 [ 574.499917][ T38] ? __pfx_vpanic+0x10/0x10 [ 574.499938][ T38] ? preempt_schedule+0xae/0xc0 [ 574.499961][ T38] ? preempt_schedule_common+0x83/0xd0 [ 574.499987][ T38] panic+0xb9/0xc0 [ 574.500008][ T38] ? __pfx_panic+0x10/0x10 [ 574.500032][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 574.500058][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 574.500080][ T38] watchdog+0xfd2/0xfe0 [ 574.500113][ T38] ? watchdog+0x1de/0xfe0 [ 574.500147][ T38] kthread+0x70e/0x8a0 [ 574.500173][ T38] ? __pfx_watchdog+0x10/0x10 [ 574.500193][ T38] ? __pfx_kthread+0x10/0x10 [ 574.500220][ T38] ? __pfx_kthread+0x10/0x10 [ 574.500244][ T38] ret_from_fork+0x3fc/0x770 [ 574.500269][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 574.500296][ T38] ? __switch_to_asm+0x39/0x70 [ 574.500312][ T38] ? __switch_to_asm+0x33/0x70 [ 574.500327][ T38] ? __pfx_kthread+0x10/0x10 [ 574.500352][ T38] ret_from_fork_asm+0x1a/0x30 [ 574.500383][ T38] [ 574.500634][ T38] Kernel Offset: disabled