last executing test programs: 16.501260106s ago: executing program 3 (id=990): r0 = eventfd2(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = openat$vmci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r4, 0x7b3, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="08009e"], 0x24}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "0c5c9e8fb7fc74ec20b54578986be551b855657c2c8ae138bd4cfb76443600876ab3c9f10fec1b6b8c2898"}}, 0x0, 0x0}, 0x0) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x20, {}, {0x0, 0x2}, @const={0x0, {0x44}}}) syz_open_dev$hidraw(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue0\x00'}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000180)) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000140)=""/183) fgetxattr(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="a7170060e1fb781d51914069503f4d31c9ca0471dc7370d46e02b0f2b4913f984757e9447409668e6055d99585e90eca52f0809e1379bc2911b4db2ee5edc36588eb77db58cf2564e48c8132c2f45d430410b00296068636340038920cf020a1bc95e8348c3c1c94f8f86e0635fe10a18fbb72228993407e4e700340fa203ad4ddafe68b6c9558dc2f1641a48a49a330be3829dce66d9ab97c8425031bbe47e2209635775ebdb480432fa6160a3ec73f8c5611017da3c8c081029db62dc0d18addafe59b8418fae0ed67ceac2029ce1962b476a32a4c56b49044e652c2e39a7a29289880bb9f78519b8c8764a56454efd67c96f8ba0a9b"], 0x0, 0x0) 16.22057213s ago: executing program 4 (id=992): r0 = syz_io_uring_setup(0x24fb, &(0x7f0000000000)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) listen(r3, 0x100) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) shutdown(r3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc10c5541, &(0x7f0000000040)=0x1000000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="03c9008015ba4907df48e677605dad04026e8ddccf6860ee9e22d806019c42aa47270a3262904fa4a0b81bac67c710028782fcce84de878988875fd16c0e5a94d493401037e44aa996f35c61013fd5ef725e2f79682fece9713ff6b20b5a0986b548e34f3b712a057eadb133023bda1085f0a06a4cc4d90785a55e8598a577c484cf312d986999999fc893484880ad494c18a9ceadf01ce1dfc3785df3e7d37ca34dd706b0c9e024ae791c7a2e22bc15131535e3a7c22abea996"], 0x84) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000800000000004388"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) move_pages(0x0, 0x6, &(0x7f0000000440)=[&(0x7f000054a000/0x1000)=nil, &(0x7f000029b000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000136000/0x2000)=nil, &(0x7f00002db000/0x2000)=nil, &(0x7f000064b000/0x4000)=nil], &(0x7f0000000000), 0xfffffffffffffffe, 0x0) syz_io_uring_setup(0x40002627, &(0x7f0000000100)={0x0, 0x1160, 0x380d, 0x2, 0x9a}, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x5e00, &(0x7f0000000380)={0x0, 0x3607, 0x4, 0x2, 0x174}, &(0x7f0000000200), &(0x7f0000000400)) socket(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x610f, &(0x7f00000010c0)={0x0, 0xa489, 0x13580, 0x2, 0x23e}, &(0x7f0000000240), &(0x7f0000000280)) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) r9 = eventfd2(0x0, 0x0) dup2(r9, 0xffffffffffffffff) syz_io_uring_setup(0x235, &(0x7f0000000700)={0x0, 0x0, 0x200, 0x3, 0x0, 0x0, r7}, &(0x7f0000000000), &(0x7f0000000540)) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000006c0)) 14.557068006s ago: executing program 3 (id=998): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05222a493284000001090224000100000000090400000203000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x0, "b4ecf640"}, @main=@item_012={0x2, 0x0, 0x8, "9676"}, @main=@item_012={0x2, 0x0, 0xb, "e9f0"}]}}, 0x0}, 0x0) 13.070779902s ago: executing program 4 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0xff0f}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}}, 0x0) 12.729929077s ago: executing program 4 (id=1000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x7, 0x3}, 0x14}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc}]}, 0x2c}}, 0x0) 12.429158923s ago: executing program 4 (id=1001): r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="ed", 0x1}], 0x1, &(0x7f0000000040)}}], 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563e, &(0x7f0000000100)={0x1, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000068000100000000008000200000000100"/36], 0x36}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000021c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9c}, "d9e8136e5783eae7eeac28daa6899e31fb302aa434693ec6bc7a9d62b72d123b1c58a28a5adad00e752fbfcf2b94485fdee47ee1d972a8ef1e6922e34ea9916ef01da99e34345ccd3911a244400eb101bf2365fdc3f23475ade9d689f16e9f60741723e339b49be9b838c3364ce9243185afc65c79396fe100fd243eb90436014bd8604d4d27bef65addb134ec56839097949bae6f5257fdaec9d1eb"}, 0xa0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="2b000e0059"], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000400)="5c00000013006bcc9e3be05c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002002c26d330196e87c0568cff3407000c0004007c2ed239122dbd94c9affe1801c00364bc24eab556a705251e618294ff0051f60a84", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11.208282242s ago: executing program 3 (id=1005): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=0x0, @ANYBLOB="0109"], 0x40}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 9.396693055s ago: executing program 0 (id=1009): r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xff03) 9.052453097s ago: executing program 0 (id=1012): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "0938945ea95b00"}) ioctl$TCXONC(r0, 0x540a, 0x3) 8.838938967s ago: executing program 0 (id=1014): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000580)="27050200590200000600002fb96dbcf706e10500000088641100112708590021b8bf4a31ee32", 0x26}, {&(0x7f0000000440)="548190dcdd0d734be324835cac8112aacbb57738b42794ba9fa8d2dc7c5c04e435305ebdc7e6c0a0f0b20bce0fbcf5a075206868a75be34b040d03b7f58c57578dbbcfea8a6e65b735a47c135cc4695873e4eabd1b48ee81386246a9fe4df01fc8962243fac75b351d39589f9f55f5497905f5079afb764a42237e574ef17607fe41d1b54e17c5773a51d464cb28b05a6f821794db1f21b1e2b69e4a6500000000", 0xa1}, {&(0x7f00000005c0)="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", 0xe44}, {&(0x7f00000017c0)="9faf4c6f5efa4a4cb62d90a73b1c8b87d27d8137033619f70a02417e8175e261953ce93d78b0d2d731351692892a89ad78a6f17aa13cc3f197bdabb5cf7814", 0x3f}], 0x4}, 0x4004000) 8.651810675s ago: executing program 0 (id=1016): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008000400", @ANYRES8=r0], 0x2c}}, 0x0) 7.314313723s ago: executing program 0 (id=1018): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @multicast1}, {0x22, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 7.314191345s ago: executing program 3 (id=1019): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) finit_module(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x2) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) 7.257218785s ago: executing program 4 (id=1020): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0586dd", 0x4, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 7.030558898s ago: executing program 0 (id=1021): r0 = syz_io_uring_setup(0x24fb, &(0x7f0000000000)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) listen(r3, 0x100) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) shutdown(r3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc10c5541, &(0x7f0000000040)=0x1000000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="03c9008015ba4907df48e677605dad04026e8ddccf6860ee9e22d806019c42aa47270a3262904fa4a0b81bac67c710028782fcce84de878988875fd16c0e5a94d493401037e44aa996f35c61013fd5ef725e2f79682fece9713ff6b20b5a0986b548e34f3b712a057eadb133023bda1085f0a06a4cc4d90785a55e8598a577c484cf312d986999999fc893484880ad494c18a9ceadf01ce1dfc3785df3e7d37ca34dd706b0c9e024ae791c7a2e22bc15131535e3a7c22abea996"], 0x84) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000800000000004388"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) move_pages(0x0, 0x6, &(0x7f0000000440)=[&(0x7f000054a000/0x1000)=nil, &(0x7f000029b000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000136000/0x2000)=nil, &(0x7f00002db000/0x2000)=nil, &(0x7f000064b000/0x4000)=nil], &(0x7f0000000000), 0xfffffffffffffffe, 0x0) syz_io_uring_setup(0x40002627, &(0x7f0000000100)={0x0, 0x1160, 0x380d, 0x2, 0x9a}, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x5e00, &(0x7f0000000380)={0x0, 0x3607, 0x4, 0x2, 0x174}, &(0x7f0000000200), &(0x7f0000000400)) socket(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x610f, &(0x7f00000010c0)={0x0, 0xa489, 0x13580, 0x2, 0x23e}, &(0x7f0000000240), &(0x7f0000000280)) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000c00)=ANY=[@ANYBLOB="00020c0000000c00025d"], 0x0, 0x0, 0x0}, 0x0) r9 = eventfd2(0x0, 0x0) dup2(r9, 0xffffffffffffffff) syz_io_uring_setup(0x235, &(0x7f0000000700)={0x0, 0x0, 0x200, 0x3, 0x0, 0x0, r7}, &(0x7f0000000000), &(0x7f0000000540)) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000006c0)) 6.879787427s ago: executing program 4 (id=1022): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x1000000, 0x8}) 6.86218858s ago: executing program 3 (id=1023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080003400000001008000240000000030900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) 6.604600845s ago: executing program 3 (id=1024): pipe(&(0x7f00000001c0)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1, &(0x7f0000000800)=[@rights={{0x10, 0x1, 0x1, [r1]}}], 0x10}, 0x0) recvmmsg$unix(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000900)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a4, 0x240, 0x240, 0x1a4, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x94, 0xf4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1e01, 0x2]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x5, 0x20], 0x6, 0x3}}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x12ee6d772310561e, 'bond_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x40}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x294) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x30c, 0x0, 0x2b8, 0x0, 0x0, 0xff000000, 0x244, 0x3a8, 0x3a8, 0x244, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private2, @ipv4, [], [], 'bond_slave_1\x00', 'wg2\x00'}, 0x0, 0x120, 0x17c, 0x0, {}, [@common=@inet=@socket2={{0x24}}, @common=@inet=@hashlimit1={{0x58}, {'veth1_to_bond\x00', {0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x203}}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x2f6, 0x9, 0x0, 0x2}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x368) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r7, &(0x7f0000000000)=ANY=[], 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, &(0x7f0000000100)=0x1) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280"], 0x48}}, 0x0) 5.759865746s ago: executing program 1 (id=1030): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x94, 0x5b, 0x40, 0x46d, 0x8b7, 0xca8e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xc5, 0x42}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.327092219s ago: executing program 1 (id=1032): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xf, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000180)=0x9c) 3.166282066s ago: executing program 1 (id=1033): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) 2.448080872s ago: executing program 1 (id=1034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 2.2727086s ago: executing program 1 (id=1035): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "c8849eb8"}]}}, 0x0}, 0x0) 2.168793705s ago: executing program 2 (id=1036): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x16}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.788744198s ago: executing program 2 (id=1037): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x66, &(0x7f0000000a40)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd602e5cea002c3c00200100000000000000000000000000ffffff"], 0x0) 1.643638261s ago: executing program 2 (id=1038): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='vxcan1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.513094345s ago: executing program 2 (id=1039): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) 1.333446106s ago: executing program 2 (id=1040): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0xe, 0x55) 1.004771871s ago: executing program 2 (id=1041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0xd6, 0x14, 0xfffffffb, 0x821, 0xc}) 0s ago: executing program 1 (id=1042): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047440, 0x20004000) kernel console output (not intermixed with test programs): to avoid problems! [ 288.376442][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.389948][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.463168][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.597834][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.672699][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.716871][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.727816][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.738253][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.755752][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.795787][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.866252][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.891387][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.935182][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.956286][ T8724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.006296][ T8724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.027840][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.065202][ T8724] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.077034][ T8724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.088470][ T8724] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.097659][ T8724] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.159395][ T5280] usbhid 3-1:0.0: can't add hid device: -71 [ 289.165443][ T5280] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 289.254591][ T5280] usb 3-1: USB disconnect, device number 23 [ 289.405109][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.447524][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.581029][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.633791][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.646179][ T7256] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 289.707497][ T29] audit: type=1326 audit(1728577869.911:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 289.792406][ T29] audit: type=1326 audit(1728577869.931:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 289.816812][ T29] audit: type=1326 audit(1728577869.941:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 289.863899][ T29] audit: type=1326 audit(1728577869.941:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 289.896084][ T7256] usb 4-1: Using ep0 maxpacket: 32 [ 289.903232][ T7256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 289.945983][ T7256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 289.967497][ T29] audit: type=1326 audit(1728577869.941:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.4.521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 290.020903][ T7256] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 290.135980][ T7256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.177148][ T7256] usb 4-1: config 0 descriptor?? [ 290.185151][ T8886] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 290.368724][ T7256] hub 4-1:0.0: USB hub found [ 290.446874][ T7256] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 290.484094][ T7256] usbhid 4-1:0.0: can't add hid device: -71 [ 290.490221][ T7256] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 290.519027][ T7256] usb 4-1: USB disconnect, device number 18 [ 290.702303][ T8935] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 290.730347][ T8935] vhci_hcd: invalid port number 9 [ 290.744805][ T8935] vhci_hcd: invalid port number 9 [ 290.867388][ T5280] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 290.991007][ T8942] netlink: 216 bytes leftover after parsing attributes in process `syz.3.530'. [ 291.035518][ T8942] netlink: 216 bytes leftover after parsing attributes in process `syz.3.530'. [ 291.116031][ T5282] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 291.226785][ T5280] usb 3-1: Using ep0 maxpacket: 32 [ 291.237700][ T5280] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=be.3a [ 291.247177][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.274428][ T5280] usb 3-1: Product: syz [ 291.286112][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 291.297405][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.312485][ T5280] usb 3-1: Manufacturer: syz [ 291.325175][ T5280] usb 3-1: SerialNumber: syz [ 291.336076][ T5282] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 291.345436][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.370450][ T5280] usb 3-1: config 0 descriptor?? [ 291.414833][ T5282] usb 2-1: Product: syz [ 291.425477][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'. [ 291.438531][ T5282] usb 2-1: Manufacturer: syz [ 291.443293][ T5282] usb 2-1: SerialNumber: syz [ 291.450722][ T5282] usb 2-1: config 0 descriptor?? [ 291.495528][ T8960] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.502749][ T8960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.511173][ T5282] as10x_usb: device has been detected [ 291.516995][ T5282] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 291.555284][ T5282] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 291.577401][ T5282] as10x_usb: error during firmware upload part1 [ 291.583990][ T5282] Registered device Abilis Systems DVB-Titan [ 291.631803][ T5280] usb 3-1: USB disconnect, device number 24 [ 291.761499][ T62] bridge_slave_1: left allmulticast mode [ 291.783064][ T62] bridge_slave_1: left promiscuous mode [ 291.789519][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.878247][ T62] bridge_slave_0: left allmulticast mode [ 291.893232][ T62] bridge_slave_0: left promiscuous mode [ 291.924326][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.416536][ T5239] Bluetooth: hci5: command tx timeout [ 292.568133][ T8975] usb usb5: usbfs: process 8975 (syz.0.541) did not claim interface 0 before use [ 293.535833][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.560443][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.583660][ T62] bond0 (unregistering): Released all slaves [ 293.832168][ T3273] usb 2-1: USB disconnect, device number 22 [ 293.852183][ T3273] Unregistered device Abilis Systems DVB-Titan [ 293.853797][ T3273] as10x_usb: device has been disconnected [ 294.296127][ T5228] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 294.476018][ T5228] usb 1-1: Using ep0 maxpacket: 8 [ 294.485321][ T5228] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 294.492974][ T5228] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 294.551792][ T5228] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.613185][ T5228] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.626641][ T5228] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 294.640708][ T5228] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 294.648473][ T5228] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 294.660528][ T5228] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.672618][ T5228] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.686262][ T7256] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 294.694940][ T5228] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 294.771885][ T62] hsr_slave_0: left promiscuous mode [ 294.791829][ T5228] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 294.801983][ T62] hsr_slave_1: left promiscuous mode [ 294.810215][ T5228] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 294.834767][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.856029][ T7256] usb 3-1: Using ep0 maxpacket: 8 [ 294.864245][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.864938][ T7256] usb 3-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=5e.fe [ 294.886095][ T5228] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.916111][ T7256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.945997][ T5228] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.958291][ T7256] usb 3-1: Product: syz [ 294.963681][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.981640][ T5228] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 294.983275][ T7256] usb 3-1: Manufacturer: syz [ 294.996001][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.033771][ T5228] usb 1-1: string descriptor 0 read error: -22 [ 295.040647][ T5228] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 295.060773][ T7256] usb 3-1: SerialNumber: syz [ 295.077972][ T7256] usb 3-1: config 0 descriptor?? [ 295.097513][ T7256] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 295.109477][ T5228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.120336][ T62] veth1_macvtap: left promiscuous mode [ 295.136194][ T62] veth0_macvtap: left promiscuous mode [ 295.150584][ T5228] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 295.165966][ T62] veth1_vlan: left promiscuous mode [ 295.178871][ T62] veth0_vlan: left promiscuous mode [ 295.214528][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.228020][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.237847][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.249668][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.276786][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 295.294124][ T7256] usb 3-1: qt2_attach - failed to power on unit: -71 [ 295.301484][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.316743][ T7256] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 295.352910][ T7256] usb 3-1: USB disconnect, device number 25 [ 296.043424][ T7256] usb 1-1: USB disconnect, device number 20 [ 296.051838][ T9009] usb 1-1: Couldn't submit interrupt_out_urb -19 [ 296.272710][ T62] team0 (unregistering): Port device team_slave_1 removed [ 296.327093][ T62] team0 (unregistering): Port device team_slave_0 removed [ 297.281984][ T7256] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 297.292914][ T9008] chnl_net:caif_netlink_parms(): no params data found [ 297.376282][ T5243] Bluetooth: hci2: command tx timeout [ 297.449200][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.466391][ T5282] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 297.474610][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.486392][ T7256] usb 1-1: Using ep0 maxpacket: 32 [ 297.492422][ T9008] bridge_slave_0: entered allmulticast mode [ 297.493704][ T7256] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.507421][ T9008] bridge_slave_0: entered promiscuous mode [ 297.523114][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.526931][ T7256] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 297.530734][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.546934][ T9008] bridge_slave_1: entered allmulticast mode [ 297.554112][ T9008] bridge_slave_1: entered promiscuous mode [ 297.561203][ T7256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.594640][ T7256] usb 1-1: Product: syz [ 297.608229][ T7256] usb 1-1: Manufacturer: syz [ 297.612887][ T7256] usb 1-1: SerialNumber: syz [ 297.626118][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 297.635050][ T5282] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 297.636681][ T9008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.658421][ T7256] usb 1-1: config 0 descriptor?? [ 297.669849][ T9008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.670104][ T5282] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 297.696540][ T7256] as10x_usb: device has been detected [ 297.702619][ T7256] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 297.712555][ T5282] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 297.726018][ T5282] usb 3-1: Product: syz [ 297.736120][ T5282] usb 3-1: Manufacturer: syz [ 297.740866][ T5282] usb 3-1: SerialNumber: syz [ 297.763051][ T7256] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 297.781651][ T7256] as10x_usb: error during firmware upload part1 [ 297.794974][ T7256] Registered device Abilis Systems DVB-Titan [ 297.939532][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.973382][ T5282] usb 3-1: palm_os_3_probe - error -32 getting connection information [ 297.983140][ T9008] team0: Port device team_slave_0 added [ 297.994572][ T5282] visor 3-1:1.0: probe with driver visor failed with error -32 [ 298.000230][ T9008] team0: Port device team_slave_1 added [ 298.145982][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.184340][ T5228] usb 3-1: USB disconnect, device number 26 [ 298.232089][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.255097][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.303996][ T9008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.365650][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.394682][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.411932][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.441231][ T9008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.511305][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.596042][ T5282] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 298.624426][ T9008] hsr_slave_0: entered promiscuous mode [ 298.648421][ T9008] hsr_slave_1: entered promiscuous mode [ 298.665314][ T9008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.676078][ T9008] Cannot create hsr debugfs directory [ 298.747152][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 298.796426][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 298.824263][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 298.867270][ T5282] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 298.921871][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.936500][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.949907][ T5282] usb 4-1: config 0 descriptor?? [ 298.951034][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.965208][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.973518][ T9045] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 298.983545][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.992771][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 299.000419][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.042937][ T5282] hub 4-1:0.0: USB hub found [ 299.056392][ T5243] Bluetooth: hci4: command tx timeout [ 299.130987][ T62] bridge_slave_1: left allmulticast mode [ 299.156287][ T62] bridge_slave_1: left promiscuous mode [ 299.162371][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.182030][ T62] bridge_slave_0: left allmulticast mode [ 299.192939][ T62] bridge_slave_0: left promiscuous mode [ 299.202314][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.245332][ T5282] hub 4-1:0.0: 2 ports detected [ 299.466104][ T5243] Bluetooth: hci2: command tx timeout [ 299.731330][ T5282] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 299.739159][ T5282] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 299.754463][ T5282] usbhid 4-1:0.0: can't add hid device: -71 [ 299.760609][ T5282] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 299.790936][ T5282] usb 4-1: USB disconnect, device number 19 [ 299.912506][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.925330][ T5228] usb 1-1: USB disconnect, device number 21 [ 299.925645][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.962130][ T5228] Unregistered device Abilis Systems DVB-Titan [ 299.967472][ T5228] as10x_usb: device has been disconnected [ 299.990731][ T62] bond0 (unregistering): Released all slaves [ 300.580684][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 300.724199][ T62] hsr_slave_0: left promiscuous mode [ 300.748035][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 300.754992][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 300.763523][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 300.766987][ T62] hsr_slave_1: left promiscuous mode [ 300.774920][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.793222][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 300.804609][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 300.818593][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 300.826153][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 300.837528][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.838580][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.849309][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 300.849346][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 300.901142][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 300.908958][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 300.920418][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.932222][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 300.943390][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 300.998939][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.008147][ T25] usb 3-1: string descriptor 0 read error: -22 [ 301.014424][ T25] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 301.023893][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.056091][ T5243] Bluetooth: hci5: command tx timeout [ 301.063333][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.072766][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.102602][ T25] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 301.151628][ T62] veth1_macvtap: left promiscuous mode [ 301.157407][ T62] veth0_macvtap: left promiscuous mode [ 301.163129][ T62] veth1_vlan: left promiscuous mode [ 301.168683][ T62] veth0_vlan: left promiscuous mode [ 301.546939][ T5243] Bluetooth: hci2: command tx timeout [ 301.883446][ T3273] usb 3-1: USB disconnect, device number 27 [ 301.892959][ T9094] usb 3-1: Couldn't submit interrupt_out_urb -19 [ 302.026416][ T62] team0 (unregistering): Port device team_slave_1 removed [ 302.070655][ T62] team0 (unregistering): Port device team_slave_0 removed [ 302.523803][ T9091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.573170][ T9055] chnl_net:caif_netlink_parms(): no params data found [ 302.841953][ T9008] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 302.962139][ T9008] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 302.972976][ T9008] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.000121][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.016143][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.023388][ T9055] bridge_slave_0: entered allmulticast mode [ 303.047832][ T9055] bridge_slave_0: entered promiscuous mode [ 303.070456][ T9116] IPv6: sit1: Disabled Multicast RS [ 303.078692][ T9008] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.098306][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.126148][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.136255][ T5243] Bluetooth: hci5: command tx timeout [ 303.160029][ T9055] bridge_slave_1: entered allmulticast mode [ 303.177307][ T9055] bridge_slave_1: entered promiscuous mode [ 303.252498][ T9055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.306522][ T9055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.392449][ T9055] team0: Port device team_slave_0 added [ 303.422516][ T9055] team0: Port device team_slave_1 added [ 303.621299][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.630421][ T5243] Bluetooth: hci2: command tx timeout [ 303.672858][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.680173][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.707149][ T9055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.930653][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.098197][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.105302][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.196162][ T9055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.224700][ T9008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.319596][ T9055] hsr_slave_0: entered promiscuous mode [ 304.344227][ T9055] hsr_slave_1: entered promiscuous mode [ 304.366330][ T9055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.373938][ T9055] Cannot create hsr debugfs directory [ 304.436380][ T3273] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 304.491893][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.558785][ T9008] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.571048][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.578212][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.616034][ T3273] usb 4-1: Using ep0 maxpacket: 32 [ 304.651022][ T3273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 304.675320][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.693090][ T3273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 304.723061][ T3273] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 304.740633][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.747827][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.756698][ T3273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.767720][ T3273] usb 4-1: config 0 descriptor?? [ 304.786692][ T9115] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.795749][ T3273] hub 4-1:0.0: USB hub found [ 305.020660][ T3273] hub 4-1:0.0: 2 ports detected [ 305.050162][ T9008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.093382][ T62] bridge_slave_1: left allmulticast mode [ 305.102780][ T62] bridge_slave_1: left promiscuous mode [ 305.127307][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.141906][ T62] bridge_slave_0: left allmulticast mode [ 305.147880][ T62] bridge_slave_0: left promiscuous mode [ 305.153603][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.228454][ T5243] Bluetooth: hci5: command tx timeout [ 305.246559][ T3273] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 305.266326][ T3273] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 305.305829][ T3273] usbhid 4-1:0.0: can't add hid device: -71 [ 305.331005][ T3273] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 305.371014][ T3273] usb 4-1: USB disconnect, device number 20 [ 305.613426][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.635799][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.655436][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.684153][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.710098][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 305.723330][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.805200][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.823774][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.838142][ T62] bond0 (unregistering): Released all slaves [ 305.869068][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 305.915969][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.923161][ T9150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.775853][ T62] hsr_slave_0: left promiscuous mode [ 306.801311][ T62] hsr_slave_1: left promiscuous mode [ 306.832125][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.839711][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.851660][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.859299][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.923357][ T62] veth1_macvtap: left promiscuous mode [ 306.929415][ T62] veth0_macvtap: left promiscuous mode [ 306.935051][ T62] veth1_vlan: left promiscuous mode [ 306.941190][ T62] veth0_vlan: left promiscuous mode [ 307.296480][ T5243] Bluetooth: hci5: command tx timeout [ 307.762208][ T62] team0 (unregistering): Port device team_slave_1 removed [ 307.785449][ T5243] Bluetooth: hci4: command tx timeout [ 307.803062][ T62] team0 (unregistering): Port device team_slave_0 removed [ 308.227486][ T9008] veth0_vlan: entered promiscuous mode [ 308.241021][ T9188] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 308.346897][ T9008] veth1_vlan: entered promiscuous mode [ 308.400289][ T9008] veth0_macvtap: entered promiscuous mode [ 308.410043][ T9008] veth1_macvtap: entered promiscuous mode [ 308.425697][ T9008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.436266][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.612'. [ 308.445592][ T9008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.455740][ T9008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.466488][ T9008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.476708][ T9008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.487303][ T9008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.499018][ T9008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.600345][ T9008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.611634][ T9008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.641702][ T9008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.654626][ T9008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.667067][ T9008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.682873][ T9008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.693001][ T9008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.703915][ T9008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.716512][ T9008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.804094][ T9008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.846336][ T9008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.876409][ T9008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.906050][ T9008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.944850][ T9153] chnl_net:caif_netlink_parms(): no params data found [ 309.069613][ T9230] netlink: 'syz.3.615': attribute type 13 has an invalid length. [ 309.097608][ T9230] macvtap0: entered allmulticast mode [ 309.112638][ T9230] veth0_macvtap: entered allmulticast mode [ 309.130727][ T9230] macvtap0: refused to change device tx_queue_len [ 309.168174][ T9055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 309.260049][ T9055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 309.486366][ T9055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 309.636430][ T9055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 309.677883][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.685083][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.703648][ T9153] bridge_slave_0: entered allmulticast mode [ 309.713671][ T9153] bridge_slave_0: entered promiscuous mode [ 309.723479][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.730751][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.738925][ T9153] bridge_slave_1: entered allmulticast mode [ 309.746336][ T9153] bridge_slave_1: entered promiscuous mode [ 309.755307][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 309.856151][ T5243] Bluetooth: hci4: command tx timeout [ 309.915122][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.927573][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.010767][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.124398][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.141210][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.177956][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.222631][ T9153] team0: Port device team_slave_0 added [ 310.275399][ T9257] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 310.276509][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.286154][ T9257] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 310.303400][ T9153] team0: Port device team_slave_1 added [ 310.414994][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.451562][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.460809][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.485554][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.493169][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.521246][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.534754][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.543414][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.571895][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.592231][ T9055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.785247][ T9153] hsr_slave_0: entered promiscuous mode [ 310.792484][ T9153] hsr_slave_1: entered promiscuous mode [ 310.799909][ T9153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.811638][ T9153] Cannot create hsr debugfs directory [ 310.976834][ T5282] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 310.980619][ T9055] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.050820][ T53] bridge_slave_1: left allmulticast mode [ 311.059920][ T53] bridge_slave_1: left promiscuous mode [ 311.065837][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.102121][ T53] bridge_slave_0: left allmulticast mode [ 311.115254][ T53] bridge_slave_0: left promiscuous mode [ 311.124441][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.137134][ T5282] usb 4-1: Using ep0 maxpacket: 8 [ 311.145434][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.166476][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.177428][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.190700][ T5282] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 311.200322][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.213458][ T5282] usb 4-1: config 0 descriptor?? [ 311.601090][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.613472][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.632658][ T53] bond0 (unregistering): Released all slaves [ 311.675794][ T9280] netlink: 'syz.4.633': attribute type 8 has an invalid length. [ 311.707228][ T9281] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 311.746816][ T9281] xt_HMARK: spi-set and port-set can't be combined [ 311.853709][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.860935][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.937624][ T5243] Bluetooth: hci4: command tx timeout [ 312.047170][ T9291] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 312.054581][ T9291] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 312.121693][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.128978][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.191447][ T9298] netlink: 19 bytes leftover after parsing attributes in process `syz.4.636'. [ 312.223319][ T9298] caif0: entered allmulticast mode [ 312.477253][ T53] hsr_slave_0: left promiscuous mode [ 312.488072][ T53] hsr_slave_1: left promiscuous mode [ 312.513462][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.546514][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.573333][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.600497][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.690535][ T53] veth1_macvtap: left promiscuous mode [ 312.699971][ T53] veth0_macvtap: left promiscuous mode [ 312.705655][ T53] veth1_vlan: left promiscuous mode [ 312.716714][ T53] veth0_vlan: left promiscuous mode [ 313.809963][ T9319] netlink: 76 bytes leftover after parsing attributes in process `syz.2.643'. [ 313.862698][ T5282] usbhid 4-1:0.0: can't add hid device: -71 [ 313.870132][ T5282] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 313.886240][ T5282] usb 4-1: USB disconnect, device number 21 [ 314.016982][ T5243] Bluetooth: hci4: command tx timeout [ 314.024305][ T53] team0 (unregistering): Port device team_slave_1 removed [ 314.098545][ T53] team0 (unregistering): Port device team_slave_0 removed [ 314.874346][ T9055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.893443][ T9055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.126364][ T9055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.194591][ T9055] veth0_vlan: entered promiscuous mode [ 315.209532][ T9055] veth1_vlan: entered promiscuous mode [ 315.236224][ T9055] veth0_macvtap: entered promiscuous mode [ 315.245177][ T9055] veth1_macvtap: entered promiscuous mode [ 315.303163][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.324357][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.346078][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.357814][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.368474][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.379388][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.392055][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.402425][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.413264][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.423904][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.434715][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.444724][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.455809][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.466066][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.476693][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.488954][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.629023][ T9055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.639472][ T9055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.687222][ T9055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.716499][ T9055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.901056][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 316.153432][ T7525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.174831][ T7525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.289852][ T7525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.326434][ T7525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.371337][ T29] audit: type=1326 audit(1728577896.571:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 316.378977][ T9153] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 316.399640][ T29] audit: type=1326 audit(1728577896.601:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 316.468261][ T9153] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 316.488021][ T29] audit: type=1326 audit(1728577896.631:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 316.526181][ T9153] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.548881][ T29] audit: type=1326 audit(1728577896.631:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.3.660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 316.579969][ T9153] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.781864][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.881126][ T9153] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.913110][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.920356][ T7525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.026568][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.033844][ T7525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.264503][ T9153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.297848][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.305970][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.408985][ T9153] veth0_vlan: entered promiscuous mode [ 317.443528][ T9153] veth1_vlan: entered promiscuous mode [ 317.543930][ T9153] veth0_macvtap: entered promiscuous mode [ 317.573441][ T9153] veth1_macvtap: entered promiscuous mode [ 317.600312][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.611280][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.621534][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.632131][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.642286][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.653186][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.666021][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.678617][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.695650][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.708051][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.720543][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.753994][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.776905][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.787170][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.797964][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.807990][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.819705][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.829816][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.852824][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.877959][ T5283] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 317.892140][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.949769][ T9153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.998765][ T9153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.008214][ T9153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.022526][ T9153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.056169][ T5283] usb 3-1: Using ep0 maxpacket: 8 [ 318.083438][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.152663][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.176510][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.213638][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.217294][ T5283] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 318.244865][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.255042][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.296187][ T5283] usb 3-1: config 0 descriptor?? [ 318.311936][ T7525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.330627][ T7525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.640665][ T5243] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 318.640731][ T5243] CPU: 1 UID: 0 PID: 5243 Comm: kworker/u9:8 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 318.640759][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 318.640775][ T5243] Workqueue: hci2 hci_rx_work [ 318.640816][ T5243] Call Trace: [ 318.640824][ T5243] [ 318.640833][ T5243] dump_stack_lvl+0x241/0x360 [ 318.640880][ T5243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.640910][ T5243] ? __pfx__printk+0x10/0x10 [ 318.640948][ T5243] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 318.640974][ T5243] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 318.641009][ T5243] sysfs_create_dir_ns+0x2ce/0x3a0 [ 318.641047][ T5243] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 318.641091][ T5243] kobject_add_internal+0x435/0x8d0 [ 318.641121][ T5243] kobject_add+0x152/0x220 [ 318.641138][ T5243] ? do_raw_spin_unlock+0x13c/0x8b0 [ 318.641167][ T5243] ? device_add+0x3e7/0xbf0 [ 318.641204][ T5243] ? __pfx_kobject_add+0x10/0x10 [ 318.641229][ T5243] ? _raw_spin_unlock+0x28/0x50 [ 318.641270][ T5243] ? get_device_parent+0x165/0x410 [ 318.641300][ T5243] device_add+0x4e5/0xbf0 [ 318.641344][ T5243] hci_conn_add_sysfs+0xe8/0x200 [ 318.641379][ T5243] le_conn_complete_evt+0xc9f/0x12e0 [ 318.641430][ T5243] ? trace_contention_end+0x3c/0x120 [ 318.641454][ T5243] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 318.641485][ T5243] ? __mutex_unlock_slowpath+0x21d/0x750 [ 318.641513][ T5243] ? __copy_skb_header+0x437/0x5b0 [ 318.641545][ T5243] ? skb_pull_data+0x112/0x230 [ 318.641587][ T5243] hci_le_enh_conn_complete_evt+0x185/0x420 [ 318.641618][ T5243] hci_event_packet+0xa55/0x1540 [ 318.641648][ T5243] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 318.641693][ T5243] ? __pfx_hci_event_packet+0x10/0x10 [ 318.641728][ T5243] ? pairing_complete_cb+0x1e0/0x220 [ 318.641754][ T5243] ? kcov_remote_start+0x97/0x7d0 [ 318.641780][ T5243] hci_rx_work+0x3fe/0xd80 [ 318.641814][ T5243] ? process_scheduled_works+0x976/0x1850 [ 318.641857][ T5243] process_scheduled_works+0xa63/0x1850 [ 318.641916][ T5243] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.641950][ T5243] ? assign_work+0x364/0x3d0 [ 318.641990][ T5243] worker_thread+0x870/0xd30 [ 318.642034][ T5243] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 318.642072][ T5243] ? __kthread_parkme+0x169/0x1d0 [ 318.642100][ T5243] ? __pfx_worker_thread+0x10/0x10 [ 318.642132][ T5243] kthread+0x2f0/0x390 [ 318.642157][ T5243] ? __pfx_worker_thread+0x10/0x10 [ 318.642191][ T5243] ? __pfx_kthread+0x10/0x10 [ 318.642215][ T5243] ret_from_fork+0x4b/0x80 [ 318.642245][ T5243] ? __pfx_kthread+0x10/0x10 [ 318.642262][ T5243] ret_from_fork_asm+0x1a/0x30 [ 318.642310][ T5243] [ 318.642339][ T5243] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 318.642372][ T5243] Bluetooth: hci2: failed to register connection device [ 318.750176][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.750262][ T9425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.767736][ T9424] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 318.779829][ T9424] xt_HMARK: spi-set and port-set can't be combined [ 320.631069][ T7525] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.656178][ T5239] Bluetooth: hci2: command tx timeout [ 320.830742][ T5283] usbhid 3-1:0.0: can't add hid device: -71 [ 320.840127][ T5283] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 320.908610][ T5283] usb 3-1: USB disconnect, device number 28 [ 321.090781][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.100257][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.109196][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.117357][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.129962][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.142813][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.179950][ T7525] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.292028][ T9463] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.682'. [ 321.301435][ T9460] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 321.309943][ T9461] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 4, id = 0 [ 321.336453][ T9463] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.682'. [ 321.541043][ T7525] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.697328][ T5291] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 321.723903][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 321.759084][ T7525] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.766830][ T5279] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 321.876104][ T5291] usb 1-1: Using ep0 maxpacket: 8 [ 321.883348][ T5291] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 321.908174][ T9458] chnl_net:caif_netlink_parms(): no params data found [ 321.937567][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 321.943206][ T5291] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 321.944539][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.952996][ T5291] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 321.990367][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.014272][ T5291] usb 1-1: Product: syz [ 322.018750][ T5291] usb 1-1: Manufacturer: syz [ 322.023638][ T5291] usb 1-1: SerialNumber: syz [ 322.036136][ T5279] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.055063][ T5279] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 322.064258][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.078102][ T5279] usb 3-1: config 0 descriptor?? [ 322.099596][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 322.274378][ T5291] usb 1-1: Invalid connection information received from device [ 322.397331][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.432270][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.439737][ T9458] bridge_slave_0: entered allmulticast mode [ 322.447022][ T9458] bridge_slave_0: entered promiscuous mode [ 322.455385][ T9458] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.462657][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.470163][ T9458] bridge_slave_1: entered allmulticast mode [ 322.477329][ T9458] bridge_slave_1: entered promiscuous mode [ 322.545254][ T9495] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 322.559798][ T7525] bridge_slave_1: left allmulticast mode [ 322.560461][ T9495] xt_HMARK: spi-set and port-set can't be combined [ 322.565559][ T7525] bridge_slave_1: left promiscuous mode [ 322.565765][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.632249][ T7525] bridge_slave_0: left allmulticast mode [ 322.646254][ T7525] bridge_slave_0: left promiscuous mode [ 322.654178][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.202133][ T7525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.216145][ T7525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.216512][ T5243] Bluetooth: hci0: command tx timeout [ 323.243905][ T7525] bond0 (unregistering): Released all slaves [ 323.262547][ T9458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.280628][ T5280] usb 1-1: USB disconnect, device number 22 [ 323.304116][ T9458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.406269][ T7525] tipc: Left network mode [ 323.426196][ T29] audit: type=1326 audit(1728577903.611:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.699" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 323.588894][ T9458] team0: Port device team_slave_0 added [ 323.631068][ T9458] team0: Port device team_slave_1 added [ 324.068793][ T7525] hsr_slave_0: left promiscuous mode [ 324.102833][ T7525] hsr_slave_1: left promiscuous mode [ 324.131917][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.188133][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.233501][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.241765][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.354031][ T7525] veth1_macvtap: left promiscuous mode [ 324.373494][ T7525] veth0_macvtap: left allmulticast mode [ 324.390560][ T7525] veth0_macvtap: left promiscuous mode [ 324.411601][ T7525] veth1_vlan: left promiscuous mode [ 324.439718][ T7525] veth0_vlan: left promiscuous mode [ 324.713012][ T5279] usbhid 3-1:0.0: can't add hid device: -71 [ 324.721164][ T5279] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 324.760345][ T5279] usb 3-1: USB disconnect, device number 29 [ 324.945063][ T9541] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 324.973851][ T9541] vhci_hcd: invalid port number 16 [ 324.994116][ T9541] vhci_hcd: invalid port number 16 [ 325.296997][ T5243] Bluetooth: hci0: command tx timeout [ 325.903895][ T7525] team0 (unregistering): Port device team_slave_1 removed [ 325.955291][ T7525] team0 (unregistering): Port device team_slave_0 removed [ 326.473255][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.483050][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.515756][ T9458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.529750][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.537677][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.564040][ T9458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.742049][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 326.884661][ T9458] hsr_slave_0: entered promiscuous mode [ 326.914979][ T9564] x_tables: (null)_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 96 [ 326.941895][ T9458] hsr_slave_1: entered promiscuous mode [ 326.956859][ T9458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.964544][ T9458] Cannot create hsr debugfs directory [ 327.076660][ T5291] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 327.338148][ T5291] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.350170][ T5291] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 327.368230][ T5291] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 327.379853][ T5243] Bluetooth: hci0: command tx timeout [ 327.402693][ T5291] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 327.412226][ T5291] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 327.430478][ T5291] usb 3-1: Manufacturer: syz [ 327.435312][ T5291] usb 3-1: SerialNumber: syz [ 327.656367][ T9556] ALSA: seq fatal error: cannot create timer (-22) [ 327.687962][ T5291] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 327.739786][ T5291] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input13 [ 327.771901][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 327.779109][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 327.786623][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 327.793663][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 327.800729][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 327.807948][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 327.815674][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 327.823117][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 327.829941][ C1] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 327.846266][ T5291] usb 3-1: USB disconnect, device number 30 [ 328.808651][ T9624] tipc: Started in network mode [ 328.814793][ T9624] tipc: Node identity , cluster identity 4711 [ 328.855390][ T9624] tipc: Failed to set node id, please configure manually [ 328.875696][ T9624] tipc: Enabling of bearer rejected, failed to enable media [ 328.934964][ T9458] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.033236][ T9458] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.054104][ T9639] fuse: Bad value for 'fd' [ 329.071448][ T9458] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.106405][ T9458] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.277882][ T9458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.296527][ T9458] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.317782][ T2576] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.324904][ T2576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.373055][ T2576] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.380437][ T2576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.414743][ T9458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.460182][ T5243] Bluetooth: hci0: command tx timeout [ 329.478041][ T9458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.610325][ T9458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.764469][ T9458] veth0_vlan: entered promiscuous mode [ 329.837016][ T9458] veth1_vlan: entered promiscuous mode [ 329.926093][ T5285] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 329.954087][ T9458] veth0_macvtap: entered promiscuous mode [ 329.986547][ T9458] veth1_macvtap: entered promiscuous mode [ 330.076406][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 330.083665][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.095261][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.110707][ T5285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.112693][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.128838][ T5285] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 330.146263][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.155790][ T5285] usb 3-1: config 0 descriptor?? [ 330.224521][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.259093][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.296134][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.361473][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.422213][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.433478][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.450805][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.498366][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.560076][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.595256][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.605859][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.624052][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.642250][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.653753][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.654707][ T9683] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 330.665656][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.684882][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.695249][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.709158][ T9687] xt_HMARK: spi-set and port-set can't be combined [ 330.717185][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.739451][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.804032][ T9458] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.858005][ T9458] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.901479][ T9458] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.917651][ T9458] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.016001][ T5279] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 331.118022][ T7525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.126146][ T5280] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 331.157209][ T7525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.177240][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 331.193691][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.203496][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.214674][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.235862][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.245852][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.273653][ T5279] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 331.283259][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.296436][ T5279] usb 1-1: config 0 descriptor?? [ 331.332448][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 331.367059][ T9708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.374880][ T9708] IPv6: NLM_F_CREATE should be set when creating new route [ 331.382309][ T9708] IPv6: NLM_F_CREATE should be set when creating new route [ 331.389605][ T9708] IPv6: NLM_F_CREATE should be set when creating new route [ 331.535662][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.558099][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.568719][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.669629][ T5280] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 331.684304][ T9715] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 331.692670][ T9715] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 331.705201][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.729672][ T5280] usb 2-1: config 0 descriptor?? [ 331.791707][ T9713] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 331.810777][ T9713] xt_HMARK: spi-set and port-set can't be combined [ 331.978118][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 332.049234][ T5243] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 332.049294][ T5243] CPU: 1 UID: 0 PID: 5243 Comm: kworker/u9:8 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 332.049328][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 332.049345][ T5243] Workqueue: hci0 hci_rx_work [ 332.049381][ T5243] Call Trace: [ 332.049392][ T5243] [ 332.049404][ T5243] dump_stack_lvl+0x241/0x360 [ 332.049436][ T5243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.049462][ T5243] ? __pfx__printk+0x10/0x10 [ 332.049503][ T5243] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 332.049538][ T5243] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 332.049580][ T5243] sysfs_create_dir_ns+0x2ce/0x3a0 [ 332.049617][ T5243] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 332.049664][ T5243] kobject_add_internal+0x435/0x8d0 [ 332.049699][ T5243] kobject_add+0x152/0x220 [ 332.049723][ T5243] ? do_raw_spin_unlock+0x13c/0x8b0 [ 332.049756][ T5243] ? device_add+0x3e7/0xbf0 [ 332.049793][ T5243] ? __pfx_kobject_add+0x10/0x10 [ 332.049820][ T5243] ? _raw_spin_unlock+0x28/0x50 [ 332.049858][ T5243] ? get_device_parent+0x165/0x410 [ 332.049898][ T5243] device_add+0x4e5/0xbf0 [ 332.049940][ T5243] hci_conn_add_sysfs+0xe8/0x200 [ 332.049970][ T5243] le_conn_complete_evt+0xc9f/0x12e0 [ 332.050013][ T5243] ? trace_contention_end+0x3c/0x120 [ 332.050046][ T5243] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 332.050084][ T5243] ? __mutex_unlock_slowpath+0x21d/0x750 [ 332.050121][ T5243] ? __copy_skb_header+0x437/0x5b0 [ 332.050151][ T5243] ? skb_pull_data+0x112/0x230 [ 332.050188][ T5243] hci_le_enh_conn_complete_evt+0x185/0x420 [ 332.050232][ T5243] hci_event_packet+0xa55/0x1540 [ 332.050266][ T5243] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 332.050312][ T5243] ? __pfx_hci_event_packet+0x10/0x10 [ 332.050347][ T5243] ? pairing_complete_cb+0x1e0/0x220 [ 332.050374][ T5243] ? kcov_remote_start+0x97/0x7d0 [ 332.050412][ T5243] hci_rx_work+0x3fe/0xd80 [ 332.050450][ T5243] ? process_scheduled_works+0x976/0x1850 [ 332.050484][ T5243] process_scheduled_works+0xa63/0x1850 [ 332.050549][ T5243] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.050590][ T5243] ? assign_work+0x364/0x3d0 [ 332.050629][ T5243] worker_thread+0x870/0xd30 [ 332.050672][ T5243] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 332.050714][ T5243] ? __kthread_parkme+0x169/0x1d0 [ 332.050754][ T5243] ? __pfx_worker_thread+0x10/0x10 [ 332.050788][ T5243] kthread+0x2f0/0x390 [ 332.050812][ T5243] ? __pfx_worker_thread+0x10/0x10 [ 332.050846][ T5243] ? __pfx_kthread+0x10/0x10 [ 332.050873][ T5243] ret_from_fork+0x4b/0x80 [ 332.050907][ T5243] ? __pfx_kthread+0x10/0x10 [ 332.050931][ T5243] ret_from_fork_asm+0x1a/0x30 [ 332.050982][ T5243] [ 332.051039][ T5243] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 332.051075][ T5243] Bluetooth: hci0: failed to register connection device [ 332.090043][ T9725] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.090139][ T9725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.255327][ T9724] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 332.264286][ T9724] xt_HMARK: spi-set and port-set can't be combined [ 332.771923][ T5285] usbhid 3-1:0.0: can't add hid device: -71 [ 332.772040][ T5285] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 332.777147][ T5285] usb 3-1: USB disconnect, device number 31 [ 333.821110][ T5279] usbhid 1-1:0.0: can't add hid device: -71 [ 333.828529][ T5279] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 333.829493][ T9758] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.768'. [ 333.860573][ T5279] usb 1-1: USB disconnect, device number 23 [ 334.030370][ T5280] usbhid 2-1:0.0: can't add hid device: -71 [ 334.044770][ T5280] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 334.125641][ T5280] usb 2-1: USB disconnect, device number 23 [ 334.127892][ T5239] Bluetooth: hci0: command tx timeout [ 334.441072][ T9781] usb usb5: usbfs: process 9781 (syz.4.778) did not claim interface 0 before use [ 334.566231][ T3273] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 334.698201][ T5285] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 334.744736][ T3273] usb 3-1: Using ep0 maxpacket: 16 [ 334.754168][ T3273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.767743][ T3273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.783724][ T3273] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 334.793408][ T3273] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 334.802431][ T3273] usb 3-1: Product: syz [ 334.809229][ T3273] usb 3-1: Manufacturer: syz [ 334.839483][ T3273] usb 3-1: config 0 descriptor?? [ 334.856393][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 334.880685][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.902101][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.932766][ T5285] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 334.964576][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.973371][ T5228] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 335.011255][ T5285] usb 4-1: config 0 descriptor?? [ 335.162159][ T5228] usb 1-1: Using ep0 maxpacket: 8 [ 335.194737][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.215358][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.237410][ T5228] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.250801][ T5228] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 335.264447][ T3273] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0xd [ 335.274381][ T5228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.291042][ T3273] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 335.306216][ T5228] usb 1-1: config 0 descriptor?? [ 335.441164][ T5285] kye 0003:0458:5017.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 335.461983][ T3273] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 335.483965][ T5285] kye 0003:0458:5017.0005: hidraw1: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.3-1/input0 [ 335.516095][ T3273] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 335.530935][ T3273] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -71 [ 335.546431][ T5285] kye 0003:0458:5017.0005: tablet-enabling feature report not found [ 335.564047][ T5285] kye 0003:0458:5017.0005: tablet enabling failed [ 335.584239][ T3273] usb 3-1: USB disconnect, device number 32 [ 335.665684][ T5285] usb 4-1: USB disconnect, device number 22 [ 335.840533][ T9806] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 335.882802][ T9806] xt_HMARK: spi-set and port-set can't be combined [ 335.923326][ T9810] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 335.931685][ T9810] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 336.636374][ T5285] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 336.817980][ T5285] usb 4-1: config 4 has an invalid interface number: 122 but max is 0 [ 336.849108][ T5285] usb 4-1: config 4 has no interface number 0 [ 336.855323][ T5285] usb 4-1: config 4 interface 122 altsetting 0 endpoint 0xD has invalid maxpacket 1576, setting to 64 [ 336.867837][ T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 336.889554][ T5285] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=67.54 [ 336.905337][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.926083][ T5285] usb 4-1: Product: syz [ 336.935046][ T5285] usb 4-1: Manufacturer: syz [ 336.940423][ T5285] usb 4-1: SerialNumber: syz [ 337.046040][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 337.053559][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 337.069136][ T25] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 337.086029][ T25] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 337.104428][ T25] usb 2-1: Product: syz [ 337.125985][ T25] usb 2-1: Manufacturer: syz [ 337.131984][ T25] usb 2-1: SerialNumber: syz [ 337.206793][ T5285] ushc 4-1:4.122: probe with driver ushc failed with error -71 [ 337.225831][ T5285] usb 4-1: USB disconnect, device number 23 [ 337.389299][ T25] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 337.415062][ T25] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 337.435476][ T25] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 337.453339][ T25] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 337.616639][ T25] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 337.632570][ T25] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 337.650517][ T9869] veth1_macvtap: left promiscuous mode [ 337.661961][ T9869] macsec0: entered promiscuous mode [ 337.670235][ T25] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 337.670735][ T9869] macsec0: entered allmulticast mode [ 337.683579][ T25] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 337.696669][ T25] usb 2-1: USB disconnect, device number 24 [ 337.722043][ T9870] veth1_macvtap: entered promiscuous mode [ 337.751606][ T25] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 337.785852][ T9870] veth1_macvtap: entered allmulticast mode [ 337.795472][ T9870] macsec0: left promiscuous mode [ 337.826474][ T9866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.827183][ T25] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 337.832973][ T9870] macsec0: left allmulticast mode [ 337.859376][ T9866] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 337.870196][ T25] visor 2-1:1.0: device disconnected [ 337.892382][ T9870] veth1_macvtap: left allmulticast mode [ 337.932194][ T9866] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 337.975090][ T9866] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.026964][ T9866] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 338.068121][ T9866] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 338.081994][ T9866] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 338.096901][ T9866] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 338.103329][ T9866] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 338.135064][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 338.147709][ T9866] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 338.163181][ T9866] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 338.171103][ T9876] netlink: 277 bytes leftover after parsing attributes in process `syz.2.817'. [ 338.177174][ T9866] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 338.210881][ T9866] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 338.216100][ T9876] netlink: 277 bytes leftover after parsing attributes in process `syz.2.817'. [ 338.235401][ T9866] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 338.252426][ T9866] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 338.331577][ T9866] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 338.356611][ T9866] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 338.511127][ T5228] usbhid 1-1:0.0: can't add hid device: -71 [ 338.517526][ T5228] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 338.543920][ T9884] netlink: 'syz.2.820': attribute type 3 has an invalid length. [ 338.559059][ T5228] usb 1-1: USB disconnect, device number 24 [ 338.846192][ T9896] tipc: Enabling of bearer rejected, failed to enable media [ 339.406115][ T5280] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 339.426115][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 339.556060][ T7256] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 339.576685][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 339.585478][ T5280] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 339.599287][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 339.600654][ T5280] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 339.612581][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.616108][ T5280] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 339.634575][ T5280] usb 3-1: Product: syz [ 339.638894][ T5280] usb 3-1: Manufacturer: syz [ 339.643726][ T5280] usb 3-1: SerialNumber: syz [ 339.652128][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.676117][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.709334][ T7256] usb 2-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 339.719708][ T25] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 339.719743][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.739709][ T25] usb 1-1: config 0 descriptor?? [ 339.776261][ T5239] Bluetooth: hci3: command 0x0c1a tx timeout [ 339.784506][ T7256] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 339.808842][ T7256] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 339.820472][ T7256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.828998][ T7256] usb 2-1: Product: syz [ 339.833610][ T7256] usb 2-1: Manufacturer: syz [ 339.838332][ T7256] usb 2-1: SerialNumber: syz [ 339.846484][ T7256] usb 2-1: config 0 descriptor?? [ 339.861866][ T5280] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 339.870588][ T5280] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 339.878647][ T5280] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 339.887758][ T5280] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 339.983233][ T9933] random: crng reseeded on system resumption [ 340.026557][ T5239] Bluetooth: hci2: command 0x0c1a tx timeout [ 340.087153][ T7256] redrat3 2-1:0.0: Couldn't find all endpoints [ 340.136080][ T7256] usb 2-1: USB disconnect, device number 25 [ 340.148937][ T5280] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 340.172423][ T5280] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 340.180353][ T5239] Bluetooth: hci4: command 0x0c1a tx timeout [ 340.180384][ T5243] Bluetooth: hci5: command 0x0c1a tx timeout [ 340.203689][ T5280] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 340.245723][ T5280] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 340.256174][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 340.269971][ T5280] usb 3-1: USB disconnect, device number 33 [ 340.287519][ T9935] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 340.316336][ T5280] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 340.346274][ T9935] xt_HMARK: spi-set and port-set can't be combined [ 340.386981][ T5280] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 340.412654][ T5280] visor 3-1:1.0: device disconnected [ 340.747170][ T5228] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 340.916047][ T5228] usb 2-1: Using ep0 maxpacket: 16 [ 340.931782][ T5228] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 340.944647][ T5228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 31265, setting to 1024 [ 340.968331][ T5228] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 341.032704][ T5228] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 341.074682][ T5228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 341.115487][ T5228] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 341.125353][ T5228] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 341.134474][ T5228] usb 2-1: Product: syz [ 341.139021][ T5228] usb 2-1: Manufacturer: syz [ 341.143677][ T5228] usb 2-1: SerialNumber: syz [ 341.156713][ T5228] usb 2-1: config 0 descriptor?? [ 341.173993][ T5228] usb 2-1: NFC: intf ffff88807b256000 id ffffffff8f31a4c0 [ 341.488395][ T5228] usb 2-1: USB disconnect, device number 26 [ 341.856423][ T5243] Bluetooth: hci3: command 0x0c1a tx timeout [ 342.096122][ T5243] Bluetooth: hci2: command 0x0c1a tx timeout [ 342.130737][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 342.136956][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 342.160551][ T25] usb 1-1: USB disconnect, device number 25 [ 342.257207][ T5243] Bluetooth: hci4: command 0x0c1a tx timeout [ 342.267190][ T5243] Bluetooth: hci5: command 0x0c1a tx timeout [ 342.355848][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 342.412349][ T5243] Bluetooth: hci3: unexpected event for opcode 0x200f [ 342.550740][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 342.583081][ T5243] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 342.612303][ T9990] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.628448][ T9990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.102931][ T53] bridge_slave_1: left allmulticast mode [ 343.109314][ T53] bridge_slave_1: left promiscuous mode [ 343.115149][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.215181][T10009] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 343.241623][ T53] bridge_slave_0: left allmulticast mode [ 343.251762][T10009] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 343.251761][ T53] bridge_slave_0: left promiscuous mode [ 343.251960][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.846830][ T5279] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 344.055960][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 344.063039][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.103867][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.113878][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.135376][ T5279] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 344.145698][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.172005][ T5279] usb 4-1: config 0 descriptor?? [ 344.190341][ T5243] Bluetooth: hci2: command 0x0c1a tx timeout [ 344.338713][ T5243] Bluetooth: hci5: command 0x0c1a tx timeout [ 344.338720][ T5239] Bluetooth: hci4: command 0x0c1a tx timeout [ 344.426783][ T5239] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.488419][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.503715][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.524590][ T53] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 344.537981][ T53] bond0 (unregistering): Released all slaves [ 344.563910][T10023] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 344.703433][T10025] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 344.727703][T10025] xt_HMARK: spi-set and port-set can't be combined [ 345.006048][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 345.196964][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 345.225259][ T53] hsr_slave_0: left promiscuous mode [ 345.231559][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.244949][ T53] hsr_slave_1: left promiscuous mode [ 345.250052][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.261514][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.268792][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.277986][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.300731][ T25] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 345.315832][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.355527][ T25] usb 3-1: config 0 descriptor?? [ 345.398020][ T53] veth1_macvtap: left promiscuous mode [ 345.409716][ T53] veth0_macvtap: left promiscuous mode [ 345.415633][ T53] veth1_vlan: left promiscuous mode [ 345.422778][ T53] veth0_vlan: left promiscuous mode [ 345.505266][ T5239] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 345.846999][T10049] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 345.880781][T10049] xt_HMARK: spi-set and port-set can't be combined [ 346.008420][T10055] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 346.033625][T10055] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 346.256137][ T5239] Bluetooth: hci2: command 0x0c1a tx timeout [ 346.312199][ T53] team0 (unregistering): Port device team_slave_1 removed [ 346.379085][ T53] team0 (unregistering): Port device team_slave_0 removed [ 346.496501][ T5239] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.654570][ T5279] usbhid 4-1:0.0: can't add hid device: -71 [ 346.680777][ T5279] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 346.723676][ T5279] usb 4-1: USB disconnect, device number 24 [ 347.160206][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'. [ 347.171756][T10048] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.179131][T10048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.190516][T10062] netlink: 'syz.3.887': attribute type 29 has an invalid length. [ 347.211663][T10063] netlink: 'syz.3.887': attribute type 29 has an invalid length. [ 347.990151][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 347.996271][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 348.018399][ T25] usb 3-1: USB disconnect, device number 34 [ 348.099489][T10095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.901'. [ 348.143931][ T5239] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 348.250213][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.265142][T10095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.280160][T10106] random: crng reseeded on system resumption [ 348.530798][ T5285] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 348.762408][ T5285] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 348.785980][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.807541][ T5285] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 348.839046][ T5285] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 348.842726][T10122] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 348.862978][T10122] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 348.865970][ T5285] usb 1-1: Manufacturer: syz [ 348.901462][ T5285] usb 1-1: config 0 descriptor?? [ 348.999675][ T5285] rc_core: IR keymap rc-hauppauge not found [ 349.006097][ T5285] Registered IR keymap rc-empty [ 349.019132][ T5285] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 349.047132][ T5285] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 349.206457][ T5228] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 349.394672][ T5228] usb 2-1: Using ep0 maxpacket: 8 [ 349.404035][ T5228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.418559][ T5228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.445991][ T5228] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.479078][ T5228] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 349.488639][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.508554][ T5228] usb 2-1: config 0 descriptor?? [ 349.521635][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 349.541809][ T5239] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 349.544743][T10139] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.559852][T10139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.575382][ T5279] usb 1-1: USB disconnect, device number 26 [ 349.932861][T10154] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 349.942330][T10154] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 349.987372][T10126] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 350.014607][T10126] xt_HMARK: spi-set and port-set can't be combined [ 350.209243][ T5239] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 350.471871][T10171] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 350.606107][ T5285] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 350.786193][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 350.802325][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.817771][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.835320][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.861060][ T5285] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 350.872941][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.890483][ T5285] usb 4-1: config 0 descriptor?? [ 351.316253][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 351.319747][ T5285] sunplus 0003:04FC:05D8.0006: item fetching failed at offset 5/7 [ 351.339382][ T5285] sunplus 0003:04FC:05D8.0006: probe with driver sunplus failed with error -22 [ 351.485969][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 351.497319][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 351.525970][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 351.545960][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 351.555100][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.586896][ T9] usb 3-1: config 0 descriptor?? [ 351.596452][T10161] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 351.606903][ T5285] usb 4-1: USB disconnect, device number 25 [ 351.607867][ T9] hub 3-1:0.0: USB hub found [ 352.007162][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 352.042187][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 352.050540][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 352.062951][ T5228] usbhid 2-1:0.0: can't add hid device: -71 [ 352.069818][ T5228] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 352.090373][ T9] usb 3-1: USB disconnect, device number 35 [ 352.117670][ T5228] usb 2-1: USB disconnect, device number 27 [ 352.282749][T10194] netlink: 10 bytes leftover after parsing attributes in process `syz.4.941'. [ 352.472321][T10208] fuse: Unknown parameter 'user_i00000000000000000000' [ 352.496709][ T5228] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 352.617516][T10213] fuse: Unknown parameter 'user_i00000000000000000000' [ 352.670332][ T5228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.691718][ T5228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.721972][ T5228] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 352.741807][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.773608][ T5228] usb 2-1: config 0 descriptor?? [ 352.946923][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 353.116020][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 353.123183][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.134065][ T9] usb 4-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.154308][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 353.164124][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 9.58 [ 353.176103][ T9] usb 4-1: New USB device strings: Mfr=64, Product=2, SerialNumber=3 [ 353.176113][ T3273] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 353.184307][ T9] usb 4-1: Product: syz [ 353.198592][ T9] usb 4-1: Manufacturer: syz [ 353.203480][ T9] usb 4-1: SerialNumber: syz [ 353.213169][ T9] usb 4-1: config 0 descriptor?? [ 353.229619][ T5228] lenovo 0003:17EF:6062.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 353.266410][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 353.291936][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 353.331116][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 353.386027][ T3273] usb 3-1: Using ep0 maxpacket: 8 [ 353.397145][ T3273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.407159][ T5280] usb 2-1: USB disconnect, device number 28 [ 353.420592][T10225] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 353.451080][ T3273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.476576][ T9] gspca_zc3xx: reg_w_i err -71 [ 353.501532][ T3273] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.516051][ T3273] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 353.525302][ T3273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.536513][ T3273] usb 3-1: config 0 descriptor?? [ 354.000231][T10231] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 354.021605][T10231] xt_HMARK: spi-set and port-set can't be combined [ 354.066015][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 354.085993][ T5280] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 354.097773][ T9] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 354.241303][ T5280] usb 1-1: Using ep0 maxpacket: 8 [ 354.260766][ T5280] usb 1-1: unable to get BOS descriptor or descriptor too short [ 354.278490][ T5280] usb 1-1: config 9 has an invalid interface number: 218 but max is 0 [ 354.308366][ T5280] usb 1-1: config 9 has no interface number 0 [ 354.321245][ T9] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 354.352301][ T5280] usb 1-1: config 9 interface 218 has no altsetting 0 [ 354.384652][ T5280] usb 1-1: string descriptor 0 read error: -22 [ 354.393574][ T5280] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=d7.19 [ 354.441079][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.566147][ T5239] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 354.705511][ T5280] peak_usb 1-1:9.218: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 354.914964][ T5280] peak_usb 1-1:9.218 can0: sending command failure: -22 [ 354.929970][ T5280] peak_usb 1-1:9.218 can0: sending command failure: -22 [ 354.941153][ T5280] peak_usb 1-1:9.218 can0: sending command failure: -22 [ 355.018566][ T5280] peak_usb 1-1:9.218: probe with driver peak_usb failed with error -22 [ 355.031453][ T9] usb 4-1: failed to restore interface 0 altsetting 6 (error=-71) [ 355.119259][ T9] usb 4-1: USB disconnect, device number 26 [ 355.299851][ T5280] usb 1-1: USB disconnect, device number 27 [ 355.764251][T10274] veth1_macvtap: left promiscuous mode [ 355.781893][T10274] macsec0: entered allmulticast mode [ 355.826404][T10278] veth1_macvtap: entered promiscuous mode [ 355.832237][T10278] veth1_macvtap: entered allmulticast mode [ 355.864367][T10278] macsec0: left allmulticast mode [ 355.936145][T10278] veth1_macvtap: left allmulticast mode [ 356.216878][ T5280] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 356.271101][ T3273] usbhid 3-1:0.0: can't add hid device: -71 [ 356.278715][ T3273] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 356.314455][ T3273] usb 3-1: USB disconnect, device number 36 [ 356.762579][ T5280] usb 2-1: Using ep0 maxpacket: 32 [ 356.769576][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 356.786012][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 356.799239][ T5280] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 356.809394][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.823582][ T5280] usb 2-1: config 0 descriptor?? [ 356.836466][T10250] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 356.857090][ T5280] hub 2-1:0.0: USB hub found [ 356.992447][T10310] tipc: Enabling of bearer rejected, failed to enable media [ 357.001929][ T3273] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 357.066763][ T5280] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 357.084585][ T5280] usbhid 2-1:0.0: can't add hid device: -71 [ 357.091444][ T5280] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 357.116099][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 357.127168][ T5280] usb 2-1: USB disconnect, device number 29 [ 357.167689][ T3273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.181364][ T3273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.193019][ T3273] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 357.204613][ T3273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.214904][ T3273] usb 1-1: config 0 descriptor?? [ 357.253506][T10316] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 357.264006][T10316] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 357.266064][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 357.280746][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.293410][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.305701][ T9] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 357.315725][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.333852][ T9] usb 4-1: config 0 descriptor?? [ 357.647877][ T3273] stadia 0003:18D1:9400.0008: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 357.659883][ T3273] stadia 0003:18D1:9400.0008: no inputs found [ 357.666116][ T3273] stadia 0003:18D1:9400.0008: force feedback init failed [ 357.756337][ T9] holtek_kbd 0003:04D9:A055.0009: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 357.793910][ T5228] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 357.865664][ T9] usb 1-1: USB disconnect, device number 28 [ 357.972892][ T5228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.985031][ T5228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.000879][ T5228] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 358.010108][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.031897][ T5280] usb 4-1: USB disconnect, device number 27 [ 358.037003][ T5228] usb 3-1: config 0 descriptor?? [ 358.476459][ T5228] magicmouse 0003:05AC:0269.000A: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.2-1/input0 [ 358.612403][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.987'. [ 358.628439][ T5239] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 358.631226][T10338] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.646123][T10338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.673541][ T9] usb 3-1: USB disconnect, device number 37 [ 359.188045][ T5228] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 359.211808][ T5239] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 359.382116][ T5228] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 359.484035][ T5228] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 359.531394][ T5228] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 359.592568][ T5228] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 359.643956][ T5228] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 359.686139][ T5228] usb 4-1: Manufacturer: syz [ 359.690819][ T5228] usb 4-1: SerialNumber: syz [ 360.001803][T10343] ALSA: seq fatal error: cannot create timer (-22) [ 360.103152][ T5228] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 360.171026][ T5228] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input15 [ 360.248019][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 360.255091][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 360.262560][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 360.269606][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 360.277796][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 360.285415][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 360.296023][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 360.303137][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 360.309941][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 360.356061][ T5228] usb 4-1: USB disconnect, device number 28 [ 360.404422][T10364] random: crng reseeded on system resumption [ 360.468101][ T5285] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 360.656118][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 360.695529][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.756702][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.835294][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.885235][ T5285] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 360.897325][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.912599][ T5285] usb 2-1: config 0 descriptor?? [ 361.395567][T10371] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 361.440616][T10371] xt_HMARK: spi-set and port-set can't be combined [ 362.076177][ T5291] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 362.276364][ T5291] usb 4-1: Using ep0 maxpacket: 16 [ 362.292254][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.328861][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.367487][ T5291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.399971][ T5291] usb 4-1: New USB device found, idVendor=056a, idProduct=2a22, bcdDevice=32.49 [ 362.415280][ T5291] usb 4-1: New USB device strings: Mfr=132, Product=0, SerialNumber=0 [ 362.446708][ T5291] usb 4-1: Manufacturer: syz [ 362.482917][ T5291] usb 4-1: config 0 descriptor?? [ 363.031716][ T5291] wacom 0003:056A:2A22.000B: Unknown device_type for 'syz'. Ignoring. [ 363.177670][ T5239] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 363.193405][ T5285] usbhid 2-1:0.0: can't add hid device: -71 [ 363.238089][ T5285] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 363.291883][ T5291] usb 4-1: USB disconnect, device number 29 [ 363.328806][ T5285] usb 2-1: USB disconnect, device number 30 [ 365.291913][T10399] mmap: syz.0.1007 (10399) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 366.040337][T10407] usb usb5: usbfs: process 10407 (syz.1.1010) did not claim interface 0 before use [ 366.690201][ T5291] IPVS: starting estimator thread 0... [ 366.806601][T10419] IPVS: using max 16 ests per chain, 38400 per kthread [ 367.088108][ T5291] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 367.245966][ T5291] usb 2-1: Using ep0 maxpacket: 16 [ 367.254039][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.273782][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.284255][ T5291] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 367.300099][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.322311][ T5291] usb 2-1: config 0 descriptor?? [ 367.807170][ T5291] uclogic 0003:28BD:0042.000C: interface is invalid, ignoring [ 367.859913][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1001'. [ 367.877718][T10380] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.884921][T10380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.161926][ T5291] usb 2-1: USB disconnect, device number 31 [ 368.687003][ T5239] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 369.387747][ T5291] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 369.616084][ T5291] usb 4-1: Using ep0 maxpacket: 8 [ 369.629348][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.671380][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.715685][ T5291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.751230][ T5291] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 369.807309][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.845594][ T5291] usb 4-1: config 0 descriptor?? [ 370.353398][T10446] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 370.380016][ T5285] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 370.411352][T10446] xt_HMARK: spi-set and port-set can't be combined [ 370.579069][ T5285] usb 2-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 370.601564][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.695145][ T5285] pwc: Logitech ViewPort AV 100 webcam detected. [ 371.321598][ T5285] pwc: recv_control_msg error -71 req 02 val 2b00 [ 371.353991][ T5285] pwc: recv_control_msg error -71 req 02 val 2700 [ 371.369977][ T5285] pwc: recv_control_msg error -71 req 04 val 1600 [ 371.392894][ T5285] pwc: recv_control_msg error -71 req 02 val 2c00 [ 371.405227][ T5285] pwc: recv_control_msg error -71 req 04 val 1000 [ 371.417089][ T5285] pwc: recv_control_msg error -71 req 04 val 1300 [ 371.436779][ T5285] pwc: recv_control_msg error -71 req 04 val 1400 [ 371.444139][ T5285] pwc: recv_control_msg error -71 req 02 val 2000 [ 371.460710][ T5285] pwc: recv_control_msg error -71 req 02 val 2100 [ 371.472500][ T5285] pwc: recv_control_msg error -71 req 06 val 0600 [ 371.487286][ T5285] pwc: recv_control_msg error -71 req 04 val 1500 [ 371.494738][ T5285] pwc: recv_control_msg error -71 req 02 val 2500 [ 371.525423][ T5285] pwc: recv_control_msg error -71 req 02 val 2400 [ 371.555052][ T5285] pwc: recv_control_msg error -71 req 02 val 2600 [ 371.594965][ T5285] pwc: recv_control_msg error -71 req 02 val 2900 [ 371.628686][ T5285] pwc: recv_control_msg error -71 req 02 val 2800 [ 371.661173][ T5285] pwc: recv_control_msg error -71 req 04 val 1100 [ 371.694232][ T5285] pwc: recv_control_msg error -71 req 04 val 1200 [ 371.749362][ T5285] pwc: Registered as video71. [ 371.783159][ T5285] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 371.844531][ T5285] usb 2-1: USB disconnect, device number 32 [ 372.356978][T10466] netlink: 'syz.1.1033': attribute type 4 has an invalid length. [ 372.396091][T10466] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1033'. [ 373.687534][ T5285] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 373.856271][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 373.873508][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.904614][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.940034][ T5285] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 373.975350][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.018239][ T5285] usb 2-1: config 0 descriptor?? [ 374.472699][ T5285] playstation 0003:054C:05C4.000D: unbalanced delimiter at end of report description [ 374.510188][ T5285] playstation 0003:054C:05C4.000D: Parse failed [ 374.524869][ T5285] playstation 0003:054C:05C4.000D: probe with driver playstation failed with error -22 [ 374.712700][ T5285] usb 2-1: USB disconnect, device number 33 [ 375.376945][ T5291] usbhid 4-1:0.0: can't add hid device: -32 [ 375.383017][ T5291] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 378.745598][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.761994][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.632069][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.644613][ T5243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.656790][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.666327][ T5243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.674133][ T5243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 379.683238][ T5243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.949041][ T5239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.965565][ T5239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.977038][ T5239] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.985116][ T5239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.993235][ T5239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 380.007617][ T5239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 380.107797][ T5243] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 380.118403][ T5243] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 380.126912][ T5243] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 380.138697][ T5243] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 380.148439][ T5243] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 380.156985][ T5243] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 381.792432][ T5243] Bluetooth: hci6: command tx timeout [ 382.096049][ T5243] Bluetooth: hci7: command tx timeout [ 382.257537][ T5243] Bluetooth: hci8: command tx timeout [ 383.856406][ T5243] Bluetooth: hci6: command tx timeout [ 384.176132][ T5243] Bluetooth: hci7: command tx timeout [ 384.347691][ T5243] Bluetooth: hci8: command tx timeout [ 384.920825][ T5239] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 384.932905][ T5239] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 384.941438][ T5239] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 384.952139][ T5239] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 384.967313][ T5239] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 384.974785][ T5239] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 385.075895][ C0] sched: DL replenish lagged too much [ 385.835463][ T5243] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 385.848315][ T5243] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 385.857561][ T5243] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 385.867201][ T5243] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 385.891555][ T5243] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 385.899260][ T5243] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 385.944398][ T5243] Bluetooth: hci6: command tx timeout [ 386.256141][ T5243] Bluetooth: hci7: command tx timeout [ 386.417041][ T5243] Bluetooth: hci8: command tx timeout [ 387.056874][ T5243] Bluetooth: hci9: command tx timeout [ 387.946318][ T5243] Bluetooth: hci10: command tx timeout [ 388.016795][ T5243] Bluetooth: hci6: command tx timeout [ 388.336781][ T5243] Bluetooth: hci7: command tx timeout [ 388.496178][ T5243] Bluetooth: hci8: command tx timeout [ 389.136198][ T5243] Bluetooth: hci9: command tx timeout [ 390.016069][ T5243] Bluetooth: hci10: command tx timeout [ 391.216070][ T5243] Bluetooth: hci9: command tx timeout [ 392.106207][ T5243] Bluetooth: hci10: command tx timeout [ 393.296116][ T5243] Bluetooth: hci9: command tx timeout [ 394.176018][ T5243] Bluetooth: hci10: command tx timeout [ 440.180276][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.206115][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.155382][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 442.192278][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.201898][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.210347][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.220231][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 442.228258][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.306742][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 442.318463][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 442.327001][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 442.340722][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 442.348435][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 442.355988][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 442.492307][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 442.507776][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 442.519228][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 442.527479][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 442.535679][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 442.544832][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.256113][ T5239] Bluetooth: hci0: command tx timeout [ 444.416370][ T5239] Bluetooth: hci2: command tx timeout [ 444.576107][ T5239] Bluetooth: hci3: command tx timeout [ 445.376734][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.394618][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.403226][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.419189][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.432088][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 445.439896][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 446.336012][ T5239] Bluetooth: hci0: command tx timeout [ 446.456876][ T5243] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 446.466839][ T5243] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 446.476413][ T5243] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 446.486827][ T5243] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 446.496982][ T5243] Bluetooth: hci2: command tx timeout [ 446.503009][ T5243] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 446.511792][ T5243] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 446.656248][ T5243] Bluetooth: hci3: command tx timeout [ 447.536009][ T5243] Bluetooth: hci4: command tx timeout [ 448.416137][ T5243] Bluetooth: hci0: command tx timeout [ 448.576344][ T5239] Bluetooth: hci2: command tx timeout [ 448.583136][ T5243] Bluetooth: hci11: command tx timeout [ 448.736178][ T5243] Bluetooth: hci3: command tx timeout [ 449.619817][ T5243] Bluetooth: hci4: command tx timeout [ 450.496106][ T5243] Bluetooth: hci0: command tx timeout [ 450.666440][ T5243] Bluetooth: hci11: command tx timeout [ 450.672097][ T5243] Bluetooth: hci2: command tx timeout [ 450.816050][ T5243] Bluetooth: hci3: command tx timeout [ 451.696223][ T5243] Bluetooth: hci4: command tx timeout [ 452.736302][ T5243] Bluetooth: hci11: command tx timeout [ 453.776034][ T5243] Bluetooth: hci4: command tx timeout [ 454.816417][ T5243] Bluetooth: hci11: command tx timeout [ 496.502552][ T5284] kworker/1:5 (5284) used greatest stack depth: 12920 bytes left [ 501.379140][ T5239] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 501.389401][ T5239] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 501.397449][ T5239] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 501.418927][ T5239] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 501.430081][ T5239] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 501.437570][ T5239] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 501.559271][ T5243] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 501.569944][ T5243] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 501.578529][ T5243] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 501.588241][ T5243] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 501.599376][ T5243] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 501.606940][ T5243] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 501.624072][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.633974][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.946321][ T5232] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 501.962617][ T5232] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 501.972132][ T5232] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 501.980431][ T5232] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 501.988795][ T5232] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 502.000576][ T5232] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 503.536225][T10543] Bluetooth: hci12: command tx timeout [ 503.720735][T10543] Bluetooth: hci13: command tx timeout [ 503.726771][ T5232] Bluetooth: hci6: command 0x0406 tx timeout [ 503.755537][T10543] Bluetooth: hci7: command 0x0406 tx timeout [ 503.761780][ T5232] Bluetooth: hci8: command 0x0406 tx timeout [ 504.096160][ T5243] Bluetooth: hci14: command tx timeout [ 505.615945][ T5243] Bluetooth: hci12: command tx timeout [ 505.776157][ T5243] Bluetooth: hci13: command tx timeout [ 505.997064][ T5239] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 506.007338][ T5239] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 506.017599][ T5239] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 506.026586][ T5239] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 506.035599][ T5239] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 506.053591][ T5239] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 506.176198][ T5243] Bluetooth: hci14: command tx timeout [ 506.936395][T10547] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 506.945767][T10547] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 506.954022][T10547] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 506.964931][T10547] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 506.974295][T10547] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 506.982384][T10547] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 507.695951][T10547] Bluetooth: hci12: command tx timeout [ 507.855994][T10547] Bluetooth: hci13: command tx timeout [ 508.096121][T10547] Bluetooth: hci15: command tx timeout [ 508.256187][T10547] Bluetooth: hci14: command tx timeout [ 508.826011][T10547] Bluetooth: hci9: command 0x0406 tx timeout [ 508.832120][T10547] Bluetooth: hci10: command 0x0406 tx timeout [ 509.056010][ T5243] Bluetooth: hci16: command tx timeout [ 509.786078][ T5243] Bluetooth: hci12: command tx timeout [ 509.936022][ T5243] Bluetooth: hci13: command tx timeout [ 510.176103][ T5243] Bluetooth: hci15: command tx timeout [ 510.336063][ T5243] Bluetooth: hci14: command tx timeout [ 511.136177][ T5243] Bluetooth: hci16: command tx timeout [ 512.256004][ T5243] Bluetooth: hci15: command tx timeout [ 513.216078][ T5243] Bluetooth: hci16: command tx timeout [ 514.336181][ T5243] Bluetooth: hci15: command tx timeout [ 515.296068][ T5243] Bluetooth: hci16: command tx timeout [ 532.976324][ T30] INFO: task syz.1.1042:10486 blocked for more than 143 seconds. [ 532.984124][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 533.015988][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 533.025687][ T30] task:syz.1.1042 state:D stack:23776 pid:10486 tgid:10486 ppid:9055 flags:0x20004004 [ 533.164003][ T30] Call Trace: [ 533.175866][ T30] [ 533.178886][ T30] __schedule+0x1895/0x4b30 [ 533.183470][ T30] ? __pfx___schedule+0x10/0x10 [ 533.266059][ T30] ? __pfx_lock_release+0x10/0x10 [ 533.271223][ T30] ? schedule+0x90/0x320 [ 533.275527][ T30] schedule+0x14b/0x320 [ 533.341150][ T30] schedule_timeout+0xb0/0x310 [ 533.371805][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 533.400545][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 533.442336][ T30] ? wait_for_completion+0x2fe/0x620 [ 533.462413][ T30] ? wait_for_completion+0x2fe/0x620 [ 533.496003][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.501310][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 533.553973][ T30] ? wait_for_completion+0x2fe/0x620 [ 533.565498][ T30] wait_for_completion+0x355/0x620 [ 533.586205][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 533.592029][ T30] ? __flush_work+0xe7/0xc50 [ 533.635884][ T30] __flush_work+0xa37/0xc50 [ 533.640543][ T30] ? __flush_work+0xe7/0xc50 [ 533.645272][ T30] ? __pfx___flush_work+0x10/0x10 [ 533.686259][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 533.691659][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 533.735881][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 533.760087][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.765394][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 533.826078][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 533.831725][ T30] ? __pfx___might_resched+0x10/0x10 [ 533.881853][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 533.905952][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 533.911952][ T30] ? rcu_is_watching+0x15/0xb0 [ 533.945932][ T30] ? trace_contention_end+0x3c/0x120 [ 533.951320][ T30] ? __mutex_lock+0x2ef/0xd70 [ 533.985922][ T30] ? __asan_memset+0x23/0x50 [ 533.990616][ T30] unregister_netdevice_queue+0x303/0x370 [ 534.041660][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 534.061703][ T30] ppp_release+0xed/0x1f0 [ 534.086356][ T30] ? __pfx_ppp_release+0x10/0x10 [ 534.091390][ T30] __fput+0x23f/0x880 [ 534.095434][ T30] task_work_run+0x24f/0x310 [ 534.145950][ T30] ? __pfx_task_work_run+0x10/0x10 [ 534.152339][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 534.186217][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 534.192131][ T30] __do_fast_syscall_32+0xc4/0x110 [ 534.241342][ T30] ? exc_page_fault+0x590/0x8c0 [ 534.256390][ T30] do_fast_syscall_32+0x34/0x80 [ 534.261326][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 534.293848][ T30] RIP: 0023:0xf73cd579 [ 534.305921][ T30] RSP: 002b:00000000f751fb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 534.314435][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 534.352832][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.382630][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.393467][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 534.420574][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.443868][ T30] [ 534.455913][ T30] INFO: task syz-executor:10494 blocked for more than 144 seconds. [ 534.463879][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 534.495847][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.504665][ T30] task:syz-executor state:D stack:26448 pid:10494 tgid:10494 ppid:1 flags:0x20004004 [ 534.556855][ T30] Call Trace: [ 534.560204][ T30] [ 534.563172][ T30] __schedule+0x1895/0x4b30 [ 534.591815][ T30] ? __pfx___schedule+0x10/0x10 [ 534.603544][ T30] ? __pfx_lock_release+0x10/0x10 [ 534.620351][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 534.635896][ T30] ? schedule+0x90/0x320 [ 534.640223][ T30] schedule+0x14b/0x320 [ 534.644439][ T30] schedule_preempt_disabled+0x13/0x30 [ 534.670203][ T30] __mutex_lock+0x6a7/0xd70 [ 534.674807][ T30] ? __mutex_lock+0x52a/0xd70 [ 534.697047][ T30] ? register_nexthop_notifier+0x84/0x290 [ 534.702864][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 534.725252][ T30] ? __asan_memset+0x23/0x50 [ 534.739954][ T30] register_nexthop_notifier+0x84/0x290 [ 534.745579][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 534.759401][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 534.770153][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 534.780592][ T30] ? __asan_memset+0x23/0x50 [ 534.785267][ T30] ops_init+0x31e/0x590 [ 534.792444][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 534.804316][ T30] setup_net+0x287/0x9e0 [ 534.813925][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 534.826394][ T30] ? __pfx_setup_net+0x10/0x10 [ 534.831239][ T30] copy_net_ns+0x33f/0x570 [ 534.835715][ T30] create_new_namespaces+0x425/0x7b0 [ 534.848628][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 534.854420][ T30] ksys_unshare+0x57d/0xa70 [ 534.868735][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 534.873828][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 534.884839][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 534.894206][ T30] __ia32_sys_unshare+0x37/0x40 [ 534.903563][ T30] __do_fast_syscall_32+0xb4/0x110 [ 534.911442][ T30] ? exc_page_fault+0x590/0x8c0 [ 534.920180][ T30] do_fast_syscall_32+0x34/0x80 [ 534.925093][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 534.935493][ T30] RIP: 0023:0xf740d579 [ 534.944015][ T30] RSP: 002b:00000000f755ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 534.955276][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 534.971445][ T30] RDX: 00000000f73fbff4 RSI: 00000000f72d224b RDI: 0000000030000000 [ 534.983704][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.000949][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 535.011807][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.023825][ T30] [ 535.030198][ T30] INFO: task syz-executor:10496 blocked for more than 145 seconds. [ 535.042183][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 535.054338][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.069495][ T30] task:syz-executor state:D stack:26816 pid:10496 tgid:10496 ppid:1 flags:0x20004006 [ 535.084160][ T30] Call Trace: [ 535.089074][ T30] [ 535.092151][ T30] __schedule+0x1895/0x4b30 [ 535.102342][ T30] ? __pfx___schedule+0x10/0x10 [ 535.110216][ T30] ? __pfx_lock_release+0x10/0x10 [ 535.115400][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 535.126251][ T30] ? schedule+0x90/0x320 [ 535.130564][ T30] schedule+0x14b/0x320 [ 535.134778][ T30] schedule_preempt_disabled+0x13/0x30 [ 535.145861][ T30] __mutex_lock+0x6a7/0xd70 [ 535.150440][ T30] ? __mutex_lock+0x52a/0xd70 [ 535.155179][ T30] ? register_nexthop_notifier+0x84/0x290 [ 535.168080][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 535.174873][ T30] ? __asan_memset+0x23/0x50 [ 535.185229][ T30] register_nexthop_notifier+0x84/0x290 [ 535.193607][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 535.203764][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 535.212851][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 535.223025][ T30] ? __asan_memset+0x23/0x50 [ 535.230712][ T30] ops_init+0x31e/0x590 [ 535.234954][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 535.249029][ T30] setup_net+0x287/0x9e0 [ 535.253356][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 535.261792][ T30] ? __pfx_setup_net+0x10/0x10 [ 535.270972][ T30] copy_net_ns+0x33f/0x570 [ 535.279856][ T30] create_new_namespaces+0x425/0x7b0 [ 535.285359][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 535.293988][ T30] ksys_unshare+0x57d/0xa70 [ 535.303544][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 535.314424][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 535.321224][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 535.334022][ T30] __ia32_sys_unshare+0x37/0x40 [ 535.339320][ T30] __do_fast_syscall_32+0xb4/0x110 [ 535.344480][ T30] ? exc_page_fault+0x590/0x8c0 [ 535.355628][ T30] do_fast_syscall_32+0x34/0x80 [ 535.362540][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.376138][ T30] RIP: 0023:0xf7f91579 [ 535.380289][ T30] RSP: 002b:00000000f757ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 535.397750][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 535.406127][ T30] RDX: 00000000f741bff4 RSI: 00000000f72f224b RDI: 0000000030000000 [ 535.414151][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.430649][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 535.439132][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.453413][ T30] [ 535.457022][ T30] INFO: task syz-executor:10498 blocked for more than 145 seconds. [ 535.464954][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 535.483439][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.493708][ T30] task:syz-executor state:D stack:26488 pid:10498 tgid:10498 ppid:1 flags:0x20004004 [ 535.511139][ T30] Call Trace: [ 535.514475][ T30] [ 535.519251][ T30] __schedule+0x1895/0x4b30 [ 535.523934][ T30] ? __pfx___schedule+0x10/0x10 [ 535.534100][ T30] ? __pfx_lock_release+0x10/0x10 [ 535.542151][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 535.552758][ T30] ? schedule+0x90/0x320 [ 535.557446][ T30] schedule+0x14b/0x320 [ 535.561666][ T30] schedule_preempt_disabled+0x13/0x30 [ 535.573448][ T30] __mutex_lock+0x6a7/0xd70 [ 535.578356][ T30] ? __mutex_lock+0x52a/0xd70 [ 535.584821][ T30] ? register_nexthop_notifier+0x84/0x290 [ 535.595864][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 535.600961][ T30] ? __asan_memset+0x23/0x50 [ 535.605615][ T30] register_nexthop_notifier+0x84/0x290 [ 535.620831][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 535.631747][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 535.639562][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 535.646086][ T30] ? __asan_memset+0x23/0x50 [ 535.650739][ T30] ops_init+0x31e/0x590 [ 535.654946][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 535.665882][ T30] setup_net+0x287/0x9e0 [ 535.670201][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 535.678978][ T30] ? __pfx_setup_net+0x10/0x10 [ 535.685466][ T30] copy_net_ns+0x33f/0x570 [ 535.693967][ T30] create_new_namespaces+0x425/0x7b0 [ 535.701944][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 535.713283][ T30] ksys_unshare+0x57d/0xa70 [ 535.720438][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 535.725520][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 535.737866][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 535.744556][ T30] __ia32_sys_unshare+0x37/0x40 [ 535.755002][ T30] __do_fast_syscall_32+0xb4/0x110 [ 535.760463][ T30] ? exc_page_fault+0x590/0x8c0 [ 535.765385][ T30] do_fast_syscall_32+0x34/0x80 [ 535.777188][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.783568][ T30] RIP: 0023:0xf742d579 [ 535.797480][ T30] RSP: 002b:00000000f757ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 535.811472][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 535.821040][ T30] RDX: 00000000f741bff4 RSI: 00000000f72f224b RDI: 0000000030000000 [ 535.834361][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.844169][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 535.861018][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.872244][ T30] [ 535.875424][ T30] INFO: task syz-executor:10503 blocked for more than 146 seconds. [ 535.885853][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 535.900903][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.912782][ T30] task:syz-executor state:D stack:26816 pid:10503 tgid:10503 ppid:1 flags:0x20004004 [ 535.929739][ T30] Call Trace: [ 535.933077][ T30] [ 535.938264][ T30] __schedule+0x1895/0x4b30 [ 535.942867][ T30] ? __pfx___schedule+0x10/0x10 [ 535.953063][ T30] ? __pfx_lock_release+0x10/0x10 [ 535.960189][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 535.965731][ T30] ? schedule+0x90/0x320 [ 535.976161][ T30] schedule+0x14b/0x320 [ 535.980391][ T30] schedule_preempt_disabled+0x13/0x30 [ 535.992560][ T30] __mutex_lock+0x6a7/0xd70 [ 535.997494][ T30] ? __mutex_lock+0x52a/0xd70 [ 536.002232][ T30] ? register_nexthop_notifier+0x84/0x290 [ 536.014403][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 536.022961][ T30] ? __asan_memset+0x23/0x50 [ 536.033829][ T30] register_nexthop_notifier+0x84/0x290 [ 536.041096][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 536.053231][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 536.059918][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 536.067964][ T30] ? __asan_memset+0x23/0x50 [ 536.072623][ T30] ops_init+0x31e/0x590 [ 536.082056][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 536.087791][ T30] setup_net+0x287/0x9e0 [ 536.095618][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 536.107743][ T30] ? __pfx_setup_net+0x10/0x10 [ 536.112588][ T30] copy_net_ns+0x33f/0x570 [ 536.121000][ T30] create_new_namespaces+0x425/0x7b0 [ 536.129514][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 536.135303][ T30] ksys_unshare+0x57d/0xa70 [ 536.143850][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 536.151648][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 536.163089][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 536.172446][ T30] __ia32_sys_unshare+0x37/0x40 [ 536.184263][ T30] __do_fast_syscall_32+0xb4/0x110 [ 536.192066][ T30] ? exc_page_fault+0x590/0x8c0 [ 536.202433][ T30] do_fast_syscall_32+0x34/0x80 [ 536.210089][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.222806][ T30] RIP: 0023:0xf7f21579 [ 536.229550][ T30] RSP: 002b:00000000f750ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 536.241874][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 536.252582][ T30] RDX: 00000000f73abff4 RSI: 00000000f728224b RDI: 0000000030000000 [ 536.264569][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.280160][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 536.290022][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.304826][ T30] [ 536.309431][ T30] INFO: task syz-executor:10506 blocked for more than 146 seconds. [ 536.322455][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 536.332162][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.352191][ T30] task:syz-executor state:D stack:26464 pid:10506 tgid:10506 ppid:1 flags:0x20004004 [ 536.363990][ T30] Call Trace: [ 536.372348][ T30] [ 536.375343][ T30] __schedule+0x1895/0x4b30 [ 536.382033][ T30] ? __pfx___schedule+0x10/0x10 [ 536.391925][ T30] ? __pfx_lock_release+0x10/0x10 [ 536.402353][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 536.413254][ T30] ? schedule+0x90/0x320 [ 536.420074][ T30] schedule+0x14b/0x320 [ 536.424298][ T30] schedule_preempt_disabled+0x13/0x30 [ 536.435191][ T30] __mutex_lock+0x6a7/0xd70 [ 536.441311][ T30] ? __mutex_lock+0x52a/0xd70 [ 536.458114][ T30] ? register_nexthop_notifier+0x84/0x290 [ 536.463899][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 536.474041][ T30] ? __asan_memset+0x23/0x50 [ 536.480299][ T30] register_nexthop_notifier+0x84/0x290 [ 536.491002][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 536.499575][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 536.512590][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 536.522256][ T30] ? __asan_memset+0x23/0x50 [ 536.534668][ T30] ops_init+0x31e/0x590 [ 536.540792][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 536.550050][ T30] setup_net+0x287/0x9e0 [ 536.554368][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 536.562815][ T30] ? __pfx_setup_net+0x10/0x10 [ 536.571733][ T30] copy_net_ns+0x33f/0x570 [ 536.579145][ T30] create_new_namespaces+0x425/0x7b0 [ 536.584525][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 536.595851][ T30] ksys_unshare+0x57d/0xa70 [ 536.600435][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 536.612751][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 536.619506][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 536.633181][ T30] __ia32_sys_unshare+0x37/0x40 [ 536.639673][ T30] __do_fast_syscall_32+0xb4/0x110 [ 536.644856][ T30] ? exc_page_fault+0x590/0x8c0 [ 536.657351][ T30] do_fast_syscall_32+0x34/0x80 [ 536.662270][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.673869][ T30] RIP: 0023:0xf7ff4579 [ 536.679534][ T30] RSP: 002b:00000000f75dff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 536.693287][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 536.704501][ T30] RDX: 00000000f747bff4 RSI: 00000000f735224b RDI: 0000000030000000 [ 536.720540][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.730230][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 536.744932][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.761375][ T30] [ 536.764579][ T30] [ 536.764579][ T30] Showing all locks held in the system: [ 536.774227][ T30] 3 locks held by kworker/0:1/9: [ 536.784276][ T30] 1 lock held by khungtaskd/30: [ 536.790686][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 536.805979][ T30] 2 locks held by kworker/u8:3/53: [ 536.814152][ T30] #0: ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 536.835590][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 536.854250][ T30] 3 locks held by kworker/u8:4/62: [ 536.859761][ T30] #0: ffff88814bfc1148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 536.879487][ T30] #1: ffffc900015d7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 536.897810][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 536.913941][ T30] 2 locks held by getty/4982: [ 536.921322][ T30] #0: ffff88814c23a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 536.935565][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 536.954117][ T30] 3 locks held by kworker/1:3/5228: [ 536.960114][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 536.976129][ T30] #1: ffffc90003bb7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 536.993910][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 537.004698][ T30] 4 locks held by kworker/0:3/5279: [ 537.017942][ T30] 3 locks held by kworker/0:4/5280: [ 537.023192][ T30] 3 locks held by kworker/1:6/5285: [ 537.032444][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 537.053034][ T30] #1: ffffc90004057d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 537.076145][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 537.092033][ T30] 1 lock held by syz.0.1021/10437: [ 537.097506][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 537.114874][ T30] 1 lock held by syz.4.1022/10434: [ 537.121910][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 537.136105][ T30] 1 lock held by syz.3.1024/10440: [ 537.141583][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 537.156092][ T30] 1 lock held by syz.2.1041/10483: [ 537.161338][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 537.178513][ T30] 2 locks held by syz.1.1042/10486: [ 537.183762][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x87/0x1f0 [ 537.198787][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 537.213144][ T30] 2 locks held by syz-executor/10494: [ 537.229592][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.243357][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.256518][ T30] 2 locks held by syz-executor/10496: [ 537.261942][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.276094][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.292733][ T30] 2 locks held by syz-executor/10498: [ 537.298555][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.314291][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.332404][ T30] 2 locks held by syz-executor/10503: [ 537.339704][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.355777][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.372295][ T30] 2 locks held by syz-executor/10506: [ 537.380433][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.396307][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.412675][ T30] 2 locks held by syz-executor/10516: [ 537.418464][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.435849][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.452764][ T30] 2 locks held by syz-executor/10518: [ 537.460083][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.475828][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.492175][ T30] 2 locks held by syz-executor/10521: [ 537.501263][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.515842][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.533297][ T30] 2 locks held by syz-executor/10524: [ 537.540214][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.558025][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.573282][ T30] 2 locks held by syz-executor/10527: [ 537.580246][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.594830][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.611382][ T30] 2 locks held by syz-executor/10540: [ 537.618889][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.635893][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.652170][ T30] 2 locks held by syz-executor/10544: [ 537.657902][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.675428][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.686050][ T30] 2 locks held by syz-executor/10546: [ 537.691470][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.705902][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.722800][ T30] 2 locks held by syz-executor/10551: [ 537.732836][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.746106][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.761943][ T30] 2 locks held by syz-executor/10554: [ 537.767724][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 537.784689][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 537.795207][ T30] [ 537.803985][ T30] ============================================= [ 537.803985][ T30] [ 537.813105][ T30] NMI backtrace for cpu 1 [ 537.817489][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 537.828025][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 537.838115][ T30] Call Trace: [ 537.841422][ T30] [ 537.844387][ T30] dump_stack_lvl+0x241/0x360 [ 537.849109][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.854348][ T30] ? __pfx__printk+0x10/0x10 [ 537.859022][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 537.864011][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 537.869513][ T30] ? _printk+0xd5/0x120 [ 537.873720][ T30] ? __pfx__printk+0x10/0x10 [ 537.878362][ T30] ? __wake_up_klogd+0xcc/0x110 [ 537.883262][ T30] ? __pfx__printk+0x10/0x10 [ 537.887904][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 537.892975][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 537.899001][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 537.905032][ T30] watchdog+0xff4/0x1040 [ 537.909324][ T30] ? watchdog+0x1ea/0x1040 [ 537.913806][ T30] ? __pfx_watchdog+0x10/0x10 [ 537.918531][ T30] kthread+0x2f0/0x390 [ 537.922639][ T30] ? __pfx_watchdog+0x10/0x10 [ 537.927362][ T30] ? __pfx_kthread+0x10/0x10 [ 537.931992][ T30] ret_from_fork+0x4b/0x80 [ 537.936483][ T30] ? __pfx_kthread+0x10/0x10 [ 537.941110][ T30] ret_from_fork_asm+0x1a/0x30 [ 537.945940][ T30] [ 537.949955][ T30] Sending NMI from CPU 1 to CPUs 0: [ 537.955222][ C0] NMI backtrace for cpu 0 [ 537.955237][ C0] CPU: 0 UID: 0 PID: 5279 Comm: kworker/0:3 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 537.955260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 537.955273][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 537.955302][ C0] RIP: 0010:__lock_acquire+0x6b5/0x2050 [ 537.955334][ C0] Code: cc 0a 8c e8 2d 7e e5 ff 48 8b 7c 24 08 48 8b 34 24 48 ba 00 00 00 00 00 fc ff df 90 0f 0b 90 90 90 31 db 48 81 c3 c5 00 00 00 <48> 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 b4 11 00 00 48 8d 04 [ 537.955350][ C0] RSP: 0000:ffffc90000007890 EFLAGS: 00000082 [ 537.955365][ C0] RAX: 000000000005c878 RBX: ffffffff93c99ffd RCX: ffffffff8170628f [ 537.955380][ C0] RDX: dffffc0000000000 RSI: ffff88802d540ae0 RDI: 000000000000000a [ 537.955394][ C0] RBP: 0000000000000002 R08: ffffffff942c58ef R09: 1ffffffff2858b1d [ 537.955408][ C0] R10: dffffc0000000000 R11: fffffbfff2858b1e R12: ffff88802d540000 [ 537.955423][ C0] R13: 0000000000000767 R14: 1ffff11005aa816a R15: ffff88802d540b50 [ 537.955437][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 537.955453][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.955466][ C0] CR2: 0000000020013000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 537.955483][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 537.955494][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 537.955512][ C0] Call Trace: [ 537.955519][ C0] [ 537.955527][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 537.955550][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 537.955579][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 537.955607][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 537.955633][ C0] ? nmi_handle+0x14f/0x5a0 [ 537.955653][ C0] ? nmi_handle+0x2a/0x5a0 [ 537.955672][ C0] ? __lock_acquire+0x6b5/0x2050 [ 537.955699][ C0] ? default_do_nmi+0x63/0x160 [ 537.955722][ C0] ? exc_nmi+0x123/0x1f0 [ 537.955744][ C0] ? end_repeat_nmi+0xf/0x53 [ 537.955767][ C0] ? __lock_acquire+0x5df/0x2050 [ 537.955799][ C0] ? __lock_acquire+0x6b5/0x2050 [ 537.955831][ C0] ? __lock_acquire+0x6b5/0x2050 [ 537.955861][ C0] ? __lock_acquire+0x6b5/0x2050 [ 537.955890][ C0] [ 537.955898][ C0] [ 537.955912][ C0] lock_acquire+0x1ed/0x550 [ 537.955941][ C0] ? process_backlog+0x33b/0x15b0 [ 537.955973][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 537.956005][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 537.956039][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 537.956071][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 537.956103][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.956135][ C0] process_backlog+0x358/0x15b0 [ 537.956162][ C0] ? process_backlog+0x33b/0x15b0 [ 537.956193][ C0] ? process_backlog+0x33b/0x15b0 [ 537.956225][ C0] ? __pfx_process_backlog+0x10/0x10 [ 537.956253][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 537.956286][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 537.956317][ C0] __napi_poll+0xcb/0x490 [ 537.956341][ C0] net_rx_action+0x89b/0x1240 [ 537.956373][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 537.956399][ C0] ? sched_clock+0x4a/0x70 [ 537.956429][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 537.956461][ C0] handle_softirqs+0x2c5/0x980 [ 537.956489][ C0] ? do_softirq+0x11b/0x1e0 [ 537.956520][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 537.956545][ C0] ? rcu_is_watching+0x15/0xb0 [ 537.956568][ C0] do_softirq+0x11b/0x1e0 [ 537.956591][ C0] [ 537.956597][ C0] [ 537.956605][ C0] ? __pfx_do_softirq+0x10/0x10 [ 537.956629][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 537.956658][ C0] ? rcu_is_watching+0x15/0xb0 [ 537.956679][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 537.956704][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 537.956727][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 537.956752][ C0] ? neigh_destroy+0x423/0x580 [ 537.956777][ C0] neigh_periodic_work+0xb35/0xd50 [ 537.956804][ C0] ? process_scheduled_works+0x976/0x1850 [ 537.956830][ C0] process_scheduled_works+0xa63/0x1850 [ 537.956866][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 537.956895][ C0] ? assign_work+0x364/0x3d0 [ 537.956921][ C0] worker_thread+0x870/0xd30 [ 537.956952][ C0] ? __kthread_parkme+0x169/0x1d0 [ 537.956980][ C0] ? __pfx_worker_thread+0x10/0x10 [ 537.957006][ C0] kthread+0x2f0/0x390 [ 537.957023][ C0] ? __pfx_worker_thread+0x10/0x10 [ 537.957049][ C0] ? __pfx_kthread+0x10/0x10 [ 537.957068][ C0] ret_from_fork+0x4b/0x80 [ 537.957094][ C0] ? __pfx_kthread+0x10/0x10 [ 537.957112][ C0] ret_from_fork_asm+0x1a/0x30 [ 537.957144][ C0] [ 538.443517][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 538.450438][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 538.460977][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 538.471070][ T30] Call Trace: [ 538.474382][ T30] [ 538.477342][ T30] dump_stack_lvl+0x241/0x360 [ 538.482057][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.487292][ T30] ? __pfx__printk+0x10/0x10 [ 538.491938][ T30] ? vscnprintf+0x5d/0x90 [ 538.496325][ T30] panic+0x349/0x880 [ 538.500276][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 538.506572][ T30] ? __pfx_panic+0x10/0x10 [ 538.511122][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 538.516626][ T30] ? __irq_work_queue_local+0x137/0x410 [ 538.522228][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 538.527643][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 538.533859][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 538.540065][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 538.546275][ T30] watchdog+0x1033/0x1040 [ 538.550672][ T30] ? watchdog+0x1ea/0x1040 [ 538.555144][ T30] ? __pfx_watchdog+0x10/0x10 [ 538.559868][ T30] kthread+0x2f0/0x390 [ 538.563977][ T30] ? __pfx_watchdog+0x10/0x10 [ 538.568709][ T30] ? __pfx_kthread+0x10/0x10 [ 538.573339][ T30] ret_from_fork+0x4b/0x80 [ 538.577803][ T30] ? __pfx_kthread+0x10/0x10 [ 538.582436][ T30] ret_from_fork_asm+0x1a/0x30 [ 538.587263][ T30] [ 538.590627][ T30] Kernel Offset: disabled [ 538.594988][ T30] Rebooting in 86400 seconds..