last executing test programs: 48.058952981s ago: executing program 3 (id=526): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)) 40.195788335s ago: executing program 3 (id=535): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) 39.750770632s ago: executing program 3 (id=537): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x457) 39.508910506s ago: executing program 3 (id=538): r0 = socket(0x1, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000000071117b00000000008510000002"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 34.689557613s ago: executing program 3 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) 34.261281356s ago: executing program 0 (id=544): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) close(r0) 33.90882174s ago: executing program 2 (id=545): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xcc, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) 33.907413985s ago: executing program 3 (id=546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000108000340000000000800024000000000080006400019000208000840000000000900010073797a30000000000900020073797a320000"], 0x9c}}, 0x4000) 33.596272254s ago: executing program 0 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x5f00}, 0x20000}}, {0x20, 0x2, @in6={0xa, 0xfffd, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 32.737930293s ago: executing program 0 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000000000)=""/194, 0xc2}, {&(0x7f00000005c0)=""/4101, 0x1005}, {&(0x7f00000001c0)=""/92, 0x5c}], 0x4}, 0x1}], 0x4f, 0x2, 0x0) 31.058245497s ago: executing program 0 (id=554): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) 31.026515466s ago: executing program 2 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x3ffff, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 30.382860002s ago: executing program 0 (id=557): r0 = syz_open_dev$media(&(0x7f00000012c0), 0xffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 30.308582898s ago: executing program 2 (id=558): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 29.904242139s ago: executing program 0 (id=560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 28.186301951s ago: executing program 1 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf250100000014000180080003000300000008000400", @ANYRES32, @ANYBLOB="04000300ac00028054000180080001000300000008000100060000000800010000000000080001000700000008000100080000000800010007000000080001000200000008000100020000000800010002000000080001000800000024000180080001000300000008000100020000000800010000000000080001000000000014000180080001000200000008000100030000001c000180080001000000000008000100140000000800010001000000040003003800028034000180080001000500000008000100050000000800010006000000080001000800000008000100080000000800010002000000040003"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x4050) 28.132602604s ago: executing program 4 (id=567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback={0x300}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 27.850435653s ago: executing program 1 (id=568): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @broadcast}], 0x20) 27.801716501s ago: executing program 4 (id=569): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r0) 27.542528706s ago: executing program 1 (id=570): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0x800000000000000) 27.460466504s ago: executing program 4 (id=571): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000001c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4800, &(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10) 27.150677566s ago: executing program 4 (id=572): bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xc0, 0x7ff00003}]}) fsopen(0x0, 0x0) 26.755552068s ago: executing program 4 (id=573): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(0x3) 26.441552087s ago: executing program 1 (id=574): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}}, 0x0) 26.416923042s ago: executing program 4 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@delchain={0x24, 0x5f, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {0x0, 0x2}, {0x1}}}, 0x24}}, 0x0) 26.162231565s ago: executing program 1 (id=576): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000005c0)=0xa, 0x4) 25.894126961s ago: executing program 1 (id=577): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201100006000128009000100766c616e0000000050000280340004800c00010001000000020000000c000100cc090000060000000c00010027060000080000000c00010005000000050000000600010000000000100003800c003900040500008b00000008000500", @ANYRES32=r1], 0x88}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 17.789184766s ago: executing program 32 (id=546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000108000340000000000800024000000000080006400019000208000840000000000900010073797a30000000000900020073797a320000"], 0x9c}}, 0x4000) 15.780957406s ago: executing program 2 (id=579): r0 = eventfd(0x4) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0xcffe, 0x41000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 15.492465117s ago: executing program 2 (id=580): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r0) 15.192316934s ago: executing program 2 (id=581): r0 = mq_open(&(0x7f0000000340)=':\x00', 0x40, 0x1a, 0x0) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x403, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 14.521360068s ago: executing program 33 (id=560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 10.995104853s ago: executing program 34 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@delchain={0x24, 0x5f, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {0x0, 0x2}, {0x1}}}, 0x24}}, 0x0) 10.493075758s ago: executing program 35 (id=577): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201100006000128009000100766c616e0000000050000280340004800c00010001000000020000000c000100cc090000060000000c00010027060000080000000c00010005000000050000000600010000000000100003800c003900040500008b00000008000500", @ANYRES32=r1], 0x88}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 0s ago: executing program 36 (id=581): r0 = mq_open(&(0x7f0000000340)=':\x00', 0x40, 0x1a, 0x0) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x403, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 91.993913][ T1236] cfg80211: failed to load regulatory.db [ 93.780379][ T5823] cgroup: Unknown subsys name 'net' [ 94.015147][ T5823] cgroup: Unknown subsys name 'cpuset' [ 94.050065][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.077737][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.348990][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.359234][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.368528][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.389820][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.407490][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.601001][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.603114][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.604193][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.605794][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.606928][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.646362][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.658221][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.660389][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.681888][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.697621][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.762656][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.767102][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.777852][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.781124][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.782063][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.843187][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.847051][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.847828][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.850633][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.851539][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.595581][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 101.998642][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 102.017560][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 102.030521][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 102.171139][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 102.471177][ T5851] Bluetooth: hci0: command tx timeout [ 102.524699][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.524817][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.525237][ T5840] bridge_slave_0: entered allmulticast mode [ 102.527431][ T5840] bridge_slave_0: entered promiscuous mode [ 102.594887][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.595450][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.595998][ T5840] bridge_slave_1: entered allmulticast mode [ 102.598294][ T5840] bridge_slave_1: entered promiscuous mode [ 102.699642][ T5851] Bluetooth: hci1: command tx timeout [ 102.859611][ T5851] Bluetooth: hci4: command tx timeout [ 102.859828][ T5851] Bluetooth: hci2: command tx timeout [ 102.859940][ T5851] Bluetooth: hci3: command tx timeout [ 103.268394][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.425807][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.426040][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.426303][ T5843] bridge_slave_0: entered allmulticast mode [ 103.428429][ T5843] bridge_slave_0: entered promiscuous mode [ 103.441349][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.516074][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.516207][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.516348][ T5844] bridge_slave_0: entered allmulticast mode [ 103.518296][ T5844] bridge_slave_0: entered promiscuous mode [ 103.524848][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.525036][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.525719][ T5848] bridge_slave_0: entered allmulticast mode [ 103.528973][ T5848] bridge_slave_0: entered promiscuous mode [ 103.537521][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.537681][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.538317][ T5843] bridge_slave_1: entered allmulticast mode [ 103.542792][ T5843] bridge_slave_1: entered promiscuous mode [ 103.702881][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.703037][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.703600][ T5844] bridge_slave_1: entered allmulticast mode [ 103.706537][ T5844] bridge_slave_1: entered promiscuous mode [ 103.709016][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.709161][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.712703][ T5848] bridge_slave_1: entered allmulticast mode [ 103.715994][ T5848] bridge_slave_1: entered promiscuous mode [ 103.942008][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.942153][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.942726][ T5850] bridge_slave_0: entered allmulticast mode [ 103.945744][ T5850] bridge_slave_0: entered promiscuous mode [ 104.185759][ T5840] team0: Port device team_slave_0 added [ 104.186477][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.186669][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.186849][ T5850] bridge_slave_1: entered allmulticast mode [ 104.194509][ T5850] bridge_slave_1: entered promiscuous mode [ 104.349063][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.362537][ T5840] team0: Port device team_slave_1 added [ 104.445267][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.448908][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.473061][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.539778][ T5154] Bluetooth: hci0: command tx timeout [ 104.635482][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.638174][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.782678][ T5154] Bluetooth: hci1: command tx timeout [ 104.825615][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.949608][ T5154] Bluetooth: hci3: command tx timeout [ 104.949641][ T5154] Bluetooth: hci2: command tx timeout [ 104.949664][ T5154] Bluetooth: hci4: command tx timeout [ 105.054536][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.054554][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.054573][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.059147][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.444063][ T5843] team0: Port device team_slave_0 added [ 105.446755][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.446770][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.446799][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.537524][ T5844] team0: Port device team_slave_0 added [ 105.556176][ T5848] team0: Port device team_slave_0 added [ 105.561186][ T5843] team0: Port device team_slave_1 added [ 105.657635][ T5844] team0: Port device team_slave_1 added [ 105.666868][ T5848] team0: Port device team_slave_1 added [ 105.784310][ T5850] team0: Port device team_slave_0 added [ 106.006038][ T5850] team0: Port device team_slave_1 added [ 106.131173][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.131191][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.131219][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.415028][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.415047][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.415067][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.416313][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.416328][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.416357][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.417830][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.417844][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.417873][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.619586][ T5851] Bluetooth: hci0: command tx timeout [ 106.637082][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.637099][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.637125][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.638357][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.638371][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.638390][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.686155][ T5840] hsr_slave_0: entered promiscuous mode [ 106.701041][ T5840] hsr_slave_1: entered promiscuous mode [ 106.704850][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.704868][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.704901][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.782149][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.782168][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.782197][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.859612][ T5851] Bluetooth: hci1: command tx timeout [ 107.019678][ T5851] Bluetooth: hci4: command tx timeout [ 107.019714][ T5851] Bluetooth: hci2: command tx timeout [ 107.019739][ T5851] Bluetooth: hci3: command tx timeout [ 107.518452][ T5843] hsr_slave_0: entered promiscuous mode [ 107.526140][ T5843] hsr_slave_1: entered promiscuous mode [ 107.527316][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 107.527441][ T5843] Cannot create hsr debugfs directory [ 107.537892][ T5844] hsr_slave_0: entered promiscuous mode [ 107.540201][ T5844] hsr_slave_1: entered promiscuous mode [ 107.541374][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 107.541404][ T5844] Cannot create hsr debugfs directory [ 107.603380][ T5848] hsr_slave_0: entered promiscuous mode [ 107.604967][ T5848] hsr_slave_1: entered promiscuous mode [ 107.605778][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 107.605804][ T5848] Cannot create hsr debugfs directory [ 107.723745][ T5850] hsr_slave_0: entered promiscuous mode [ 107.724859][ T5850] hsr_slave_1: entered promiscuous mode [ 107.725587][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 107.725611][ T5850] Cannot create hsr debugfs directory [ 108.701890][ T5154] Bluetooth: hci0: command tx timeout [ 108.940195][ T5154] Bluetooth: hci1: command tx timeout [ 109.100566][ T5154] Bluetooth: hci3: command tx timeout [ 109.100599][ T5154] Bluetooth: hci2: command tx timeout [ 109.100623][ T5154] Bluetooth: hci4: command tx timeout [ 109.354054][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.393056][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.417856][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.475600][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.671525][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.722634][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.781029][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.824673][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.998610][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.028376][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.074274][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.137557][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.275385][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.312485][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.362489][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.412638][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.505772][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.649971][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.703672][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.760509][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.760715][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.774354][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.834059][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.885994][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.886155][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.886956][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.084081][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.208691][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.265887][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.280114][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.280275][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.348011][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.348221][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.466145][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.546952][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.557933][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.558810][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.641887][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.642070][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.737874][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.771013][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.803461][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.803651][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.878362][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.878520][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.934341][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.996390][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.081304][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.081485][ T4566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.146560][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.146721][ T4566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.683798][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.134979][ T5843] veth0_vlan: entered promiscuous mode [ 113.146073][ T5840] veth0_vlan: entered promiscuous mode [ 113.163525][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.210083][ T5843] veth1_vlan: entered promiscuous mode [ 113.215966][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.216744][ T5840] veth1_vlan: entered promiscuous mode [ 113.333861][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.445537][ T5840] veth0_macvtap: entered promiscuous mode [ 113.448562][ T5843] veth0_macvtap: entered promiscuous mode [ 113.483641][ T5844] veth0_vlan: entered promiscuous mode [ 113.496355][ T5840] veth1_macvtap: entered promiscuous mode [ 113.511192][ T5843] veth1_macvtap: entered promiscuous mode [ 113.558856][ T5848] veth0_vlan: entered promiscuous mode [ 113.578670][ T5844] veth1_vlan: entered promiscuous mode [ 113.637752][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.655178][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.660549][ T5848] veth1_vlan: entered promiscuous mode [ 113.696861][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.697072][ T5850] veth0_vlan: entered promiscuous mode [ 113.704251][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.779771][ T1285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.799108][ T1285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.815183][ T1285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.819246][ T5850] veth1_vlan: entered promiscuous mode [ 113.846121][ T1285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.865316][ T1285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.888637][ T1285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.903125][ T1285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.949973][ T1285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.001477][ T5844] veth0_macvtap: entered promiscuous mode [ 114.131266][ T5844] veth1_macvtap: entered promiscuous mode [ 114.143428][ T5848] veth0_macvtap: entered promiscuous mode [ 114.276180][ T5848] veth1_macvtap: entered promiscuous mode [ 114.382273][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.392509][ T5850] veth0_macvtap: entered promiscuous mode [ 114.442090][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.442117][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.465221][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.514104][ T5850] veth1_macvtap: entered promiscuous mode [ 114.547152][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.548706][ T4554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.548726][ T4554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.598580][ T3568] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.616559][ T3568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.646136][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.646202][ T3568] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.681911][ T3568] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.689048][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.689069][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.823340][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.858303][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.872393][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.877821][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.938388][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.965410][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.965431][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.992040][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.197965][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.262870][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.282512][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.307045][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.539797][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.539820][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.869585][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.869604][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.156780][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.156802][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.269773][ T4554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.269794][ T4554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.503995][ T4566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.504020][ T4566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.640214][ T5973] netlink: 277 bytes leftover after parsing attributes in process `syz.4.12'. [ 116.801006][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.801029][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.901092][ T5978] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 116.901155][ T5978] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 116.901263][ T5978] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 116.901420][ T5978] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 116.901474][ T5978] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 116.901526][ T5978] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 116.901672][ T5978] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 116.901723][ T5978] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 116.901772][ T5978] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 116.901870][ T5978] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 116.901921][ T5978] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 116.901971][ T5978] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 116.902066][ T5978] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 116.902118][ T5978] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 116.902177][ T5978] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 116.902227][ T5978] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 116.902291][ T5978] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 116.902345][ T5978] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 116.902445][ T5978] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 117.509756][ T5909] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.717899][ T5909] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 117.717933][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.745324][ T5909] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.745356][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.745376][ T5909] usb 2-1: Product: syz [ 117.745391][ T5909] usb 2-1: Manufacturer: syz [ 117.745406][ T5909] usb 2-1: SerialNumber: syz [ 117.877625][ T5909] usb 2-1: config 0 descriptor?? [ 117.976350][ T5909] usb 2-1: selecting invalid altsetting 0 [ 118.435425][ T5909] usb 2-1: USB disconnect, device number 2 [ 118.799220][ T6012] usb usb1: check_ctrlrecip: process 6012 (syz.4.24) requesting ep 01 but needs 81 [ 120.218421][ T6043] netlink: 'syz.3.37': attribute type 16 has an invalid length. [ 120.920782][ T5924] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.092673][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.092717][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.092758][ T5924] usb 5-1: New USB device found, idVendor=258a, idProduct=6a80, bcdDevice= 0.00 [ 121.092781][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.113144][ T5924] usb 5-1: config 0 descriptor?? [ 121.654118][ T5924] hid-generic 0003:258A:6A80.0001: hidraw0: USB HID v0.00 Device [HID 258a:6a80] on usb-dummy_hcd.4-1/input0 [ 121.788427][ T5916] usb 5-1: USB disconnect, device number 2 [ 121.955004][ T6073] netlink: 'syz.3.49': attribute type 10 has an invalid length. [ 122.166669][ T6071] fido_id[6071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 122.359739][ T6073] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.375970][ T6072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.840726][ T6089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.861256][ T6124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.73'. [ 125.960751][ T6146] netlink: 128 bytes leftover after parsing attributes in process `syz.1.83'. [ 125.960832][ T6146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 126.018781][ T6147] netlink: 'syz.4.85': attribute type 2 has an invalid length. [ 126.207336][ T6158] capability: warning: `syz.4.88' uses deprecated v2 capabilities in a way that may be insecure [ 126.239415][ T989] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.418119][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.418158][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.418200][ T989] usb 3-1: New USB device found, idVendor=258a, idProduct=6a80, bcdDevice= 0.00 [ 126.418225][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.503416][ T989] usb 3-1: config 0 descriptor?? [ 126.870801][ T6174] netlink: 56 bytes leftover after parsing attributes in process `syz.4.95'. [ 126.999523][ T989] hid-generic 0003:258A:6A80.0002: hidraw0: USB HID v0.00 Device [HID 258a:6a80] on usb-dummy_hcd.2-1/input0 [ 127.175443][ T45] usb 3-1: USB disconnect, device number 2 [ 127.497048][ T6187] fido_id[6187]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 128.219456][ T989] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.330824][ T5916] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 128.361597][ T6211] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 128.386806][ T989] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 128.386865][ T989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.386892][ T989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 128.386939][ T989] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 128.386964][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.414809][ T6215] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.531913][ T5916] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 128.531944][ T5916] usb 3-1: config 0 has no interface number 0 [ 128.531980][ T5916] usb 3-1: config 0 interface 128 has no altsetting 0 [ 128.538953][ T5916] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 128.538985][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.539007][ T5916] usb 3-1: Product: syz [ 128.539022][ T5916] usb 3-1: Manufacturer: syz [ 128.539037][ T5916] usb 3-1: SerialNumber: syz [ 128.594970][ T989] usb 2-1: config 0 descriptor?? [ 128.668417][ T5916] usb 3-1: config 0 descriptor?? [ 128.743596][ T5916] radio-si470x 3-1:0.128: could not find interrupt in endpoint [ 128.744251][ T5916] radio-si470x 3-1:0.128: probe with driver radio-si470x failed with error -5 [ 128.748380][ T5916] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 128.842858][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 129.043282][ T45] usb 3-1: USB disconnect, device number 3 [ 129.125419][ T989] uclogic 0003:5543:0064.0003: item fetching failed at offset 0/3 [ 129.126404][ T989] uclogic 0003:5543:0064.0003: parse failed [ 129.126524][ T989] uclogic 0003:5543:0064.0003: probe with driver uclogic failed with error -22 [ 129.230523][ T5923] usb 2-1: USB disconnect, device number 3 [ 129.445298][ T5916] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.446745][ T6029] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.599514][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 129.599686][ T6029] usb 4-1: Using ep0 maxpacket: 32 [ 129.606982][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.607017][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.607125][ T5916] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.607152][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.612445][ T6029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.612478][ T6029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.612526][ T6029] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 129.612549][ T6029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.714036][ T6029] usb 4-1: config 0 descriptor?? [ 129.718238][ T5916] usb 5-1: config 0 descriptor?? [ 129.772942][ T5916] hub 5-1:0.0: USB hub found [ 129.965623][ T5916] hub 5-1:0.0: 29 ports detected [ 129.981936][ T5916] hub 5-1:0.0: insufficient power available to use all downstream ports [ 130.213416][ T6029] corsair-cpro 0003:1B1C:1D00.0004: hidraw0: USB HID v0.07 Device [HID 1b1c:1d00] on usb-dummy_hcd.3-1/input0 [ 130.305657][ T6029] corsair-cpro 0003:1B1C:1D00.0004: probe with driver corsair-cpro failed with error -38 [ 130.407069][ T45] usb 4-1: USB disconnect, device number 2 [ 130.560158][ T5916] usb 5-1: USB disconnect, device number 3 [ 130.649408][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.702380][ T6250] fido_id[6250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 130.809402][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 130.812181][ T5923] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 130.815668][ T5923] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 130.815697][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.815718][ T5923] usb 2-1: Product: syz [ 130.815734][ T5923] usb 2-1: Manufacturer: syz [ 130.815749][ T5923] usb 2-1: SerialNumber: syz [ 130.864356][ T5923] usb 2-1: config 0 descriptor?? [ 130.878360][ T5923] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 130.878425][ T5923] usb 2-1: setting power ON [ 130.878942][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 131.001246][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.011349][ T5923] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 131.011452][ T5923] usb 2-1: media controller created [ 131.100680][ T6247] dvb-usb: bulk message failed: -22 (3/0) [ 131.100704][ T6247] cxusb: i2c wr: len=80 is too big! [ 131.100704][ T6247] [ 131.243641][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.362384][ T5923] usb 2-1: selecting invalid altsetting 6 [ 131.362409][ T5923] usb 2-1: digital interface selection failed (-22) [ 131.362425][ T5923] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 131.372158][ T5923] usb 2-1: setting power OFF [ 131.372432][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 131.372455][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 131.372471][ T5923] (NULL device *): no alternate interface [ 131.696294][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 131.736093][ T5923] usb 2-1: USB disconnect, device number 4 [ 133.199543][ T6233] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.363080][ T6233] usb 3-1: Using ep0 maxpacket: 32 [ 133.379728][ T6233] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 133.379759][ T6233] usb 3-1: config 0 has no interface number 0 [ 133.410662][ T6233] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 133.410696][ T6233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.410736][ T6233] usb 3-1: Product: syz [ 133.410752][ T6233] usb 3-1: Manufacturer: syz [ 133.410766][ T6233] usb 3-1: SerialNumber: syz [ 133.468392][ T6233] usb 3-1: config 0 descriptor?? [ 133.516869][ T6233] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 134.137940][ T6233] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 134.181024][ T6233] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 134.292556][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 134.320244][ T45] usb 3-1: USB disconnect, device number 4 [ 134.352916][ T45] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 134.409918][ T45] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 134.410997][ T45] quatech2 3-1:0.51: device disconnected [ 134.628029][ T6348] netlink: 256 bytes leftover after parsing attributes in process `syz.4.170'. [ 134.628056][ T6348] netlink: 40 bytes leftover after parsing attributes in process `syz.4.170'. [ 134.729461][ T5902] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.891026][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 134.911590][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.917033][ T6354] mkiss: ax0: crc mode is auto. [ 134.917342][ T5902] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 31 [ 134.917368][ T5902] usb 2-1: config 8 interface 0 has no altsetting 0 [ 134.932919][ T5902] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 134.932954][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.932976][ T5902] usb 2-1: Product: syz [ 134.932989][ T5902] usb 2-1: Manufacturer: syz [ 134.933003][ T5902] usb 2-1: SerialNumber: syz [ 134.973545][ T6340] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.008755][ T6358] ======================================================= [ 135.008755][ T6358] WARNING: The mand mount option has been deprecated and [ 135.008755][ T6358] and is ignored by this kernel. Remove the mand [ 135.008755][ T6358] option from the mount to silence this warning. [ 135.008755][ T6358] ======================================================= [ 135.095328][ T6360] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.263423][ T5902] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.263637][ T5902] usb 2-1: selecting invalid altsetting 0 [ 135.519211][ T5902] usb 2-1: USB disconnect, device number 5 [ 136.030332][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.307740][ T6382] rdma_op ffff88803db1f270 conn xmit_rdma 0000000000000000 [ 138.070523][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.070608][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.688993][ T6443] vivid-003: disconnect [ 138.719017][ T6442] vivid-003: reconnect [ 139.779379][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.933585][ T45] usb 3-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 139.933622][ T45] usb 3-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.933645][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 139.933680][ T45] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 139.933701][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.000493][ T45] usb 3-1: config 0 descriptor?? [ 140.462126][ T45] sony 0003:054C:024B.0005: unbalanced delimiter at end of report description [ 140.463007][ T45] sony 0003:054C:024B.0005: parse failed [ 140.463118][ T45] sony 0003:054C:024B.0005: probe with driver sony failed with error -22 [ 140.649081][ T45] usb 3-1: USB disconnect, device number 5 [ 140.779538][ T6029] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.856053][ T6497] program syz.1.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.945008][ T6029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.945048][ T6029] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.945095][ T6029] usb 4-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 140.945124][ T6029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.991641][ T6029] usb 4-1: config 0 descriptor?? [ 141.093207][ T6501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 141.093230][ T6501] UDF-fs: Scanning with blocksize 512 failed [ 141.094485][ T6501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 141.094506][ T6501] UDF-fs: Scanning with blocksize 1024 failed [ 141.094992][ T6501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 141.095008][ T6501] UDF-fs: Scanning with blocksize 2048 failed [ 141.095451][ T6501] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 141.095466][ T6501] UDF-fs: Scanning with blocksize 4096 failed [ 141.436855][ T6233] IPVS: starting estimator thread 0... [ 141.522036][ T6506] IPVS: using max 6 ests per chain, 14400 per kthread [ 141.670175][ T6029] wacom 0003:056A:0336.0006: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.3-1/input0 [ 141.760080][ T6029] usb 4-1: USB disconnect, device number 3 [ 142.102703][ T6517] fido_id[6517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 142.383696][ T6528] netlink: 32 bytes leftover after parsing attributes in process `syz.2.253'. [ 142.565847][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 142.565872][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 142.565900][ T6533] netlink: 'syz.3.256': attribute type 14 has an invalid length. [ 142.565917][ T6533] netlink: 'syz.3.256': attribute type 11 has an invalid length. [ 143.928765][ T6576] nbd: must specify a size in bytes for the device [ 144.414909][ T6593] process 'syz.1.284' launched './file0' with NULL argv: empty string added [ 144.809829][ T6603] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 144.809859][ T6603] CIFS mount error: No usable UNC path provided in device string! [ 144.809859][ T6603] [ 144.810083][ T6603] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 145.351411][ T5902] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.460668][ T6029] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 145.504763][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.504790][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.504811][ T5902] usb 5-1: config 1 has no interface number 0 [ 145.504858][ T5902] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.508187][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.508218][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.508239][ T5902] usb 5-1: Product: syz [ 145.508253][ T5902] usb 5-1: Manufacturer: syz [ 145.508269][ T5902] usb 5-1: SerialNumber: syz [ 145.610892][ T5902] usb 5-1: selecting invalid altsetting 1 [ 145.612455][ T6029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.612485][ T6029] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.612523][ T6029] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 145.612545][ T6029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.663486][ T6029] usb 2-1: config 0 descriptor?? [ 145.672533][ T6029] hub 2-1:0.0: USB hub found [ 145.900480][ T6029] hub 2-1:0.0: 2 ports detected [ 146.119434][ T5902] usb 5-1: selecting invalid altsetting 1 [ 146.119506][ T5902] cdc_ncm 5-1:1.1: bind() failure [ 146.322949][ T6233] usb 5-1: USB disconnect, device number 4 [ 146.328077][ T6029] usb 2-1: USB disconnect, device number 6 [ 146.393329][ T6635] binder: BINDER_SET_CONTEXT_MGR already set [ 146.393346][ T6635] binder: 6634:6635 ioctl 40046207 0 returned -16 [ 147.109471][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.260009][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 147.265834][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.265879][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.265903][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.265948][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.265972][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.332039][ T45] usb 3-1: config 0 descriptor?? [ 147.440067][ T6662] random: crng reseeded on system resumption [ 147.734045][ T6669] syz.1.318 uses obsolete (PF_INET,SOCK_PACKET) [ 147.757769][ T45] HID 045e:07da: Invalid code 65791 type 1 [ 147.768731][ T45] HID 045e:07da: Invalid code 768 type 1 [ 147.768755][ T45] HID 045e:07da: Invalid code 769 type 1 [ 147.768769][ T45] HID 045e:07da: Invalid code 770 type 1 [ 147.768783][ T45] HID 045e:07da: Invalid code 771 type 1 [ 147.768896][ T45] HID 045e:07da: Invalid code 772 type 1 [ 147.768912][ T45] HID 045e:07da: Invalid code 773 type 1 [ 147.768926][ T45] HID 045e:07da: Invalid code 774 type 1 [ 147.768940][ T45] HID 045e:07da: Invalid code 775 type 1 [ 147.768954][ T45] HID 045e:07da: Invalid code 776 type 1 [ 147.841336][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input9 [ 147.964723][ T45] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 147.986688][ T45] usb 3-1: USB disconnect, device number 6 [ 148.054368][ T6676] option changes via remount are deprecated (pid=6675 comm=syz.1.322) [ 148.169573][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 148.590871][ T6688] netlink: 40 bytes leftover after parsing attributes in process `syz.3.327'. [ 148.733405][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 149.345381][ T6706] fido_id[6706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 149.529995][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 149.879565][ T6233] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.919822][ T5916] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 150.031943][ T6233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.031979][ T6233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.032022][ T6233] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 150.032046][ T6233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.082154][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 150.085028][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.085062][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.085103][ T5916] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 150.085127][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.168451][ T6233] usb 3-1: config 0 descriptor?? [ 150.186845][ T5916] usb 2-1: config 0 descriptor?? [ 150.634230][ T5916] hid (null): unknown global tag 0xe [ 150.777199][ T5916] aquacomputer_d5next 0003:0C70:F0B6.0009: unknown global tag 0xe [ 150.777227][ T5916] aquacomputer_d5next 0003:0C70:F0B6.0009: item 0 1 1 14 parsing failed [ 150.778201][ T5916] aquacomputer_d5next 0003:0C70:F0B6.0009: probe with driver aquacomputer_d5next failed with error -22 [ 150.815412][ T6233] stadia 0003:18D1:9400.0008: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 150.815450][ T6233] stadia 0003:18D1:9400.0008: no inputs found [ 150.815474][ T6233] stadia 0003:18D1:9400.0008: force feedback init failed [ 150.893592][ T5916] usb 2-1: USB disconnect, device number 7 [ 150.963555][ T6233] usb 3-1: USB disconnect, device number 7 [ 151.821920][ T6762] fido_id[6762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 152.815540][ T6797] warning: `syz.1.377' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.662893][ T6819] ALSA: seq fatal error: cannot create timer (-19) [ 153.801246][ T6832] xt_l2tp: unknown flags: 10 [ 154.551126][ T5909] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 154.571416][ T6855] program syz.2.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.705826][ T5909] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 154.705862][ T5909] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 154.705882][ T5909] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 154.705914][ T5909] usb 2-1: config 220 has no interface number 2 [ 154.706030][ T5909] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 154.706065][ T5909] usb 2-1: config 220 interface 0 has no altsetting 0 [ 154.706089][ T5909] usb 2-1: config 220 interface 76 has no altsetting 0 [ 154.706109][ T5909] usb 2-1: config 220 interface 1 has no altsetting 0 [ 154.717209][ T5909] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 154.717241][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.717261][ T5909] usb 2-1: Product: syz [ 154.717276][ T5909] usb 2-1: Manufacturer: syz [ 154.717291][ T5909] usb 2-1: SerialNumber: syz [ 155.093191][ T5909] usb 2-1: selecting invalid altsetting 0 [ 155.108910][ T5909] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 155.108953][ T5909] usb 2-1: No valid video chain found. [ 155.150012][ T5909] usb 2-1: selecting invalid altsetting 0 [ 155.150056][ T5909] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 155.154413][ T5909] usb 2-1: USB disconnect, device number 8 [ 155.449478][ T5902] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.471369][ T6877] vim2m vim2m.0: vidioc_s_fmt queue busy [ 155.605287][ T5902] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 155.605319][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.605340][ T5902] usb 4-1: Product: syz [ 155.605356][ T5902] usb 4-1: Manufacturer: syz [ 155.605371][ T5902] usb 4-1: SerialNumber: syz [ 155.645572][ T5902] usb 4-1: config 0 descriptor?? [ 155.664958][ T5902] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 156.048489][ T6885] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 156.291149][ T6233] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 156.317237][ T5902] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 156.317338][ T5902] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 156.349954][ T5902] usb 4-1: USB disconnect, device number 4 [ 156.449488][ T6233] usb 3-1: Using ep0 maxpacket: 8 [ 156.452662][ T6233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.452695][ T6233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.452719][ T6233] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 156.452763][ T6233] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 156.452788][ T6233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.481695][ T6233] usb 3-1: config 0 descriptor?? [ 156.949605][ T6233] elecom 0003:056E:00FE.000A: unknown main item tag 0x4 [ 156.949650][ T6233] elecom 0003:056E:00FE.000A: unknown main item tag 0x6 [ 156.949679][ T6233] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 156.949706][ T6233] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 156.949732][ T6233] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 156.949758][ T6233] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 156.949784][ T6233] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 156.949810][ T6233] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 156.949836][ T6233] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 156.949871][ T6233] elecom 0003:056E:00FE.000A: unknown main item tag 0x0 [ 156.970407][ T6233] elecom 0003:056E:00FE.000A: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.2-1/input0 [ 157.120155][ T5909] usb 3-1: USB disconnect, device number 8 [ 157.192442][ T6898] fido_id[6898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 157.442506][ T6905] capability: warning: `syz.3.429' uses 32-bit capabilities (legacy support in use) [ 157.839443][ T5909] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.904114][ T6912] can0: slcan on ttynull. [ 157.989542][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 157.992220][ T5909] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 157.992248][ T5909] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 157.992287][ T5909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.992311][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.187236][ T6910] can0 (unregistered): slcan off ttynull. [ 158.319559][ T5909] usb 2-1: USB disconnect, device number 9 [ 159.039612][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 159.239844][ T989] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.669612][ T989] usb 3-1: Using ep0 maxpacket: 32 [ 159.689090][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.689127][ T989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.689170][ T989] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.689194][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.748167][ T989] usb 3-1: config 0 descriptor?? [ 159.764198][ T989] hub 3-1:0.0: USB hub found [ 160.187927][ T989] hub 3-1:0.0: 29 ports detected [ 160.188525][ T989] hub 3-1:0.0: insufficient power available to use all downstream ports [ 160.685492][ T989] usb 3-1: USB disconnect, device number 9 [ 161.485070][ T6977] netlink: 104 bytes leftover after parsing attributes in process `syz.2.464'. [ 162.473358][ T7002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 162.473509][ T7002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 162.474051][ T7002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 162.476003][ T7002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 162.476795][ T7002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 162.476881][ T7002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 162.477210][ T7002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 162.477300][ T7002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 162.477600][ T7002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 162.477678][ T7002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 163.117120][ T7015] tipc: Started in network mode [ 163.117156][ T7015] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 163.134033][ T7013] mmap: syz.2.480 (7013): VmData 37400576 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 163.144538][ T7015] tipc: Enabled bearer , priority 0 [ 163.594861][ T7024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.485'. [ 164.232062][ T5902] tipc: Node number set to 11578026 [ 166.209117][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.241325][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.272615][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.307930][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.341810][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.379645][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.410890][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.444083][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.479588][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.515643][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.548889][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.584728][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.590815][ T5916] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.618331][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.652783][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.690942][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.728499][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.771058][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.804962][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.816469][ T5916] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 166.816501][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.836443][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.872213][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.902242][ T5916] usb 3-1: config 0 descriptor?? [ 166.907432][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.942588][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.972385][ T5916] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 166.975723][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.977096][ T5916] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 167.010119][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.044526][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.077415][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.117645][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.220528][ T6029] usb 3-1: USB disconnect, device number 10 [ 168.313704][ T7112] ALSA: seq fatal error: cannot create timer (-22) [ 168.772183][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.811111][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.844895][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.876962][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.914196][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.978728][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.009384][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.042714][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.110182][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.143610][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 169.144099][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.179621][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.213894][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.231615][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.294565][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.323450][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.364217][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.411364][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.443171][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.476849][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.516157][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.551293][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.583839][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.614595][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.652435][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.681877][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.736532][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.739302][ C1] sched: DL replenish lagged too much [ 170.194070][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.227040][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.263670][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.294199][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.324585][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.358200][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.393245][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.422580][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.452446][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.482684][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.527539][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.557764][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.593716][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.628630][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.658930][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.689954][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.720072][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.749779][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.781715][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.829788][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.860720][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.892357][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.922625][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.951936][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.984915][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.016773][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.064495][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.110113][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.142099][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.170282][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.203481][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.234989][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.265487][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.331571][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.369307][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.406461][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.436676][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.470680][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.499135][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.531494][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.594101][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.623131][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.656099][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.370608][ T7114] kthread_run failed with err -4 [ 180.900035][ T7143] net_ratelimit: 1052 callbacks suppressed [ 180.900059][ T7143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.900148][ T7143] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.900556][ T7143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.900640][ T7143] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.900976][ T7143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.901057][ T7143] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.901365][ T7143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.901446][ T7143] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.901742][ T7143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.901824][ T7143] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 182.224917][ T6029] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 182.245192][ T7161] tipc: Started in network mode [ 182.245228][ T7161] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 182.245297][ T7161] tipc: Enabling of bearer rejected, failed to enable media [ 182.398103][ T6029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 182.398140][ T6029] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 182.398194][ T6029] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 182.398218][ T6029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.550887][ T6029] usb 3-1: config 0 descriptor?? [ 182.556559][ T7159] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 183.254586][ T6029] hid_parser_main: 49 callbacks suppressed [ 183.254615][ T6029] waltop 0003:172F:0500.000B: unknown main item tag 0x0 [ 183.254648][ T6029] waltop 0003:172F:0500.000B: unknown main item tag 0x0 [ 183.254676][ T6029] waltop 0003:172F:0500.000B: unknown main item tag 0x0 [ 183.254703][ T6029] waltop 0003:172F:0500.000B: unknown main item tag 0x0 [ 183.254729][ T6029] waltop 0003:172F:0500.000B: unknown main item tag 0x0 [ 183.254756][ T6029] waltop 0003:172F:0500.000B: unknown main item tag 0x0 [ 183.254782][ T6029] waltop 0003:172F:0500.000B: unknown main item tag 0x0 [ 183.390617][ T6029] waltop 0003:172F:0500.000B: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.2-1/input0 [ 183.477124][ T6029] usb 3-1: USB disconnect, device number 11 [ 183.695146][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 184.526457][ T7173] fido_id[7173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 187.438171][ T7207] netlink: 104 bytes leftover after parsing attributes in process `syz.4.567'. [ 188.079823][ T38] audit: type=1326 audit(1757890456.791:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.1.570" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff09ea6eba9 code=0x0 [ 198.565435][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.591171][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.592470][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.600883][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.602215][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.522687][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.522775][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.699463][ T5154] Bluetooth: hci5: command tx timeout [ 201.820300][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.829073][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.845271][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.846667][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.883222][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 202.779844][ T5154] Bluetooth: hci5: command tx timeout [ 203.982911][ T5154] Bluetooth: hci6: command tx timeout [ 204.871445][ T5154] Bluetooth: hci5: command tx timeout [ 205.808670][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 205.858498][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 205.869442][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 205.882848][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 205.883783][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 206.059550][ T5851] Bluetooth: hci6: command tx timeout [ 206.397871][ T5154] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 206.417438][ T5154] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 206.418610][ T5154] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 206.443787][ T5154] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 206.461390][ T5154] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 206.945294][ T5154] Bluetooth: hci5: command tx timeout [ 207.979523][ T5154] Bluetooth: hci7: command tx timeout [ 208.145131][ T5154] Bluetooth: hci6: command tx timeout [ 208.539489][ T5154] Bluetooth: hci8: command tx timeout [ 210.059439][ T5154] Bluetooth: hci7: command tx timeout [ 210.219944][ T5154] Bluetooth: hci6: command tx timeout [ 210.619538][ T5154] Bluetooth: hci8: command tx timeout [ 212.139532][ T5154] Bluetooth: hci7: command tx timeout [ 212.699883][ T5154] Bluetooth: hci8: command tx timeout [ 214.219553][ T5154] Bluetooth: hci7: command tx timeout [ 214.784672][ T5154] Bluetooth: hci8: command tx timeout [ 216.544527][ T5851] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 216.565646][ T5851] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 216.566886][ T5851] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 216.590299][ T5851] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 216.593086][ T5851] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 227.209898][ T7272] Bluetooth: hci4: command 0x0406 tx timeout [ 227.209942][ T7272] Bluetooth: hci1: command 0x0406 tx timeout [ 229.420232][ T5851] Bluetooth: hci9: command tx timeout [ 230.230178][ T7242] chnl_net:caif_netlink_parms(): no params data found [ 230.330153][ T7255] chnl_net:caif_netlink_parms(): no params data found [ 230.441840][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 231.499421][ T5851] Bluetooth: hci9: command tx timeout [ 233.579544][ T5851] Bluetooth: hci9: command tx timeout [ 235.664592][ T5851] Bluetooth: hci9: command tx timeout [ 254.826460][ T7264] chnl_net:caif_netlink_parms(): no params data found [ 259.047433][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.085350][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.087757][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.089116][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.100327][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.183720][ T5842] Bluetooth: hci0: command tx timeout [ 261.422460][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.422580][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.784066][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.803688][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.804847][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.806938][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.807777][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.259450][ T5842] Bluetooth: hci0: command tx timeout [ 263.899452][ T5842] Bluetooth: hci1: command tx timeout [ 265.339851][ T5842] Bluetooth: hci0: command tx timeout [ 265.979826][ T5842] Bluetooth: hci1: command tx timeout [ 267.429352][ T5842] Bluetooth: hci0: command tx timeout [ 268.059696][ T5842] Bluetooth: hci1: command tx timeout [ 268.583071][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.603231][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.604424][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.605724][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.606605][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.821532][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.844153][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.845389][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.847108][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.848021][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.139376][ T5154] Bluetooth: hci1: command tx timeout [ 270.699393][ T5154] Bluetooth: hci2: command tx timeout [ 270.939937][ T5154] Bluetooth: hci3: command tx timeout [ 272.779693][ T5154] Bluetooth: hci2: command tx timeout [ 273.019569][ T5154] Bluetooth: hci3: command tx timeout [ 274.864774][ T5154] Bluetooth: hci2: command tx timeout [ 275.100156][ T5154] Bluetooth: hci3: command tx timeout [ 276.940079][ T5154] Bluetooth: hci2: command tx timeout [ 277.070784][ T5154] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 277.093018][ T5154] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 277.094287][ T5154] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 277.095607][ T5154] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 277.096622][ T5154] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 277.181911][ T5154] Bluetooth: hci3: command tx timeout [ 279.179489][ T5154] Bluetooth: hci10: command tx timeout [ 281.266732][ T5154] Bluetooth: hci10: command tx timeout [ 283.339601][ T5154] Bluetooth: hci10: command tx timeout [ 285.419659][ T5154] Bluetooth: hci10: command tx timeout [ 305.455917][ T7242] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 319.703061][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 319.735316][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 319.737152][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 319.760039][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 319.761080][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 321.830538][ T7259] chnl_net:caif_netlink_parms(): no params data found [ 322.287813][ T5842] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 322.313261][ T5842] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 322.314538][ T5842] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 322.315790][ T5842] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 322.343856][ T5842] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 322.924288][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.924376][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.819916][ T5154] Bluetooth: hci11: command tx timeout [ 324.477997][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 324.478076][ T5154] Bluetooth: hci12: command tx timeout [ 325.899447][ T5154] Bluetooth: hci11: command tx timeout [ 326.539615][ T5154] Bluetooth: hci12: command tx timeout [ 327.996173][ T5154] Bluetooth: hci11: command tx timeout [ 328.619336][ T5154] Bluetooth: hci12: command tx timeout [ 329.337581][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 329.364930][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 329.366159][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 329.380803][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 329.390681][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 329.583416][ T59] Bluetooth: hci8: command 0x0406 tx timeout [ 329.583463][ T59] Bluetooth: hci7: command 0x0406 tx timeout [ 329.772167][ T7349] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 329.800033][ T7349] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 329.802364][ T7349] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 329.803647][ T7349] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 329.804517][ T7349] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 330.061508][ T7349] Bluetooth: hci11: command tx timeout [ 330.700170][ T7349] Bluetooth: hci12: command tx timeout [ 337.723437][ T7349] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 337.744973][ T7349] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 337.746515][ T7349] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 337.771625][ T7349] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 337.772519][ T7349] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 359.659510][ T5842] Bluetooth: hci13: command tx timeout [ 359.659859][ T5842] Bluetooth: hci14: command tx timeout [ 361.739990][ T5154] Bluetooth: hci14: command tx timeout [ 361.740030][ T5154] Bluetooth: hci13: command tx timeout [ 363.819477][ T5842] Bluetooth: hci13: command tx timeout [ 363.819512][ T5842] Bluetooth: hci14: command tx timeout [ 365.899674][ T5154] Bluetooth: hci14: command tx timeout [ 365.899714][ T5154] Bluetooth: hci13: command tx timeout [ 368.140151][ T7273] Bluetooth: hci15: command tx timeout [ 370.219360][ T7273] Bluetooth: hci15: command tx timeout [ 372.300133][ T7273] Bluetooth: hci15: command tx timeout [ 374.379490][ T7273] Bluetooth: hci15: command tx timeout [ 379.809069][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.844641][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.845912][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.848893][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.873067][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.620059][ T39] INFO: task syz.0.560:7190 blocked for more than 143 seconds. [ 380.620090][ T39] Not tainted syzkaller #0 [ 380.620102][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.620115][ T39] task:syz.0.560 state:D stack:25128 pid:7190 tgid:7190 ppid:5850 task_flags:0x400040 flags:0x00004006 [ 380.620195][ T39] Call Trace: [ 380.620203][ T39] [ 380.620219][ T39] __schedule+0x16f3/0x4c20 [ 380.620283][ T39] ? __lock_acquire+0xab9/0xd20 [ 380.620314][ T39] ? __pfx___schedule+0x10/0x10 [ 380.620364][ T39] ? schedule+0x91/0x360 [ 380.620398][ T39] schedule+0x165/0x360 [ 380.620433][ T39] schedule_timeout+0x9a/0x270 [ 380.620463][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 380.620516][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.620549][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.620579][ T39] ? wait_for_completion+0x267/0x5d0 [ 380.620614][ T39] wait_for_completion+0x2bf/0x5d0 [ 380.620661][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 380.620701][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 380.620733][ T39] rcu_barrier+0x463/0x570 [ 380.620765][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 380.620800][ T39] netdev_run_todo+0x327/0xea0 [ 380.620828][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 380.620859][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 380.620879][ T39] ? kasan_quarantine_put+0xdd/0x220 [ 380.620903][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.620945][ T39] ? netdev_state_change+0x1ca/0x220 [ 380.620979][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 380.621012][ T39] tun_chr_close+0x13f/0x1c0 [ 380.621046][ T39] __fput+0x45b/0xa80 [ 380.621082][ T39] task_work_run+0x1d4/0x260 [ 380.621108][ T39] ? __pfx_task_work_run+0x10/0x10 [ 380.621138][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 380.621172][ T39] exit_to_user_mode_loop+0xec/0x110 [ 380.621202][ T39] do_syscall_64+0x2bd/0x3b0 [ 380.621222][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.621255][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.621277][ T39] ? clear_bhb_loop+0x60/0xb0 [ 380.621304][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.621332][ T39] RIP: 0033:0x7f579a47eba9 [ 380.621355][ T39] RSP: 002b:00007ffd16f83b48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 380.621378][ T39] RAX: 0000000000000000 RBX: 000000000002d433 RCX: 00007f579a47eba9 [ 380.621393][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 380.621407][ T39] RBP: 00007f579a6c7da0 R08: 0000000000000001 R09: 0000000316f83e3f [ 380.621422][ T39] R10: 0000001b30b20000 R11: 0000000000000246 R12: 00007f579a6c5fac [ 380.621437][ T39] R13: 00007f579a6c5fa0 R14: ffffffffffffffff R15: 00007ffd16f83c60 [ 380.621473][ T39] [ 380.621515][ T39] [ 380.621515][ T39] Showing all locks held in the system: [ 380.621528][ T39] 2 locks held by kworker/1:0/31: [ 380.621542][ T39] 1 lock held by khungtaskd/39: [ 380.621554][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 380.621610][ T39] 3 locks held by kworker/u8:3/57: [ 380.621623][ T39] 3 locks held by kworker/u8:4/67: [ 380.621635][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.621692][ T39] #1: ffffc9000152fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.621748][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 380.621804][ T39] 2 locks held by kworker/0:2/989: [ 380.621816][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.621871][ T39] #1: ffffc900047afbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.621930][ T39] 3 locks held by kworker/u8:6/1262: [ 380.621942][ T39] #0: ffff88814d134938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.621998][ T39] #1: ffffc90004f87bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.622056][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 380.622125][ T39] 2 locks held by getty/5596: [ 380.622137][ T39] #0: ffff88823bf768a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 380.622198][ T39] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 380.622257][ T39] 4 locks held by kworker/u9:2/5842: [ 380.622269][ T39] #0: ffff888066549138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.622329][ T39] #1: ffffc90004d57bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.622386][ T39] #2: ffff88804f0880a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 380.622442][ T39] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 380.622510][ T39] 4 locks held by kworker/1:6/5923: [ 380.622523][ T39] 3 locks held by kworker/0:7/6029: [ 380.622535][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 380.622592][ T39] #1: ffffc90005b87bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 380.622647][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 380.622699][ T39] 1 lock held by syz.3.546/7157: [ 380.622710][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 380.622762][ T39] 1 lock held by syz.0.560/7190: [ 380.622773][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 380.622824][ T39] 1 lock held by syz.4.575/7225: [ 380.622836][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 380.622887][ T39] 1 lock held by syz.1.577/7229: [ 380.622899][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 380.622959][ T39] 8 locks held by kworker/1:10/7237: [ 380.622972][ T39] 1 lock held by syz-executor/7242: [ 380.622983][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 380.623043][ T39] 1 lock held by syz.2.581/7252: [ 380.623055][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 380.623115][ T39] 4 locks held by syz-executor/7255: [ 380.623126][ T39] #0: ffff8880636f0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 380.623182][ T39] #1: ffff8880636f00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 380.623242][ T39] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 380.623292][ T39] #3: ffff88803130a358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 380.623359][ T39] 1 lock held by syz-executor/7259: [ 380.623371][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 380.623430][ T39] 3 locks held by syz-executor/7264: [ 380.623442][ T39] #0: ffff888063384e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 380.623505][ T39] #1: ffff8880633840a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 380.623564][ T39] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 380.623615][ T39] 1 lock held by syz-executor/7267: [ 380.623631][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 380.623694][ T39] 1 lock held by syz-executor/7301: [ 380.623706][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 380.623758][ T39] 1 lock held by syz-executor/7311: [ 380.623770][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 380.623821][ T39] 1 lock held by syz-executor/7316: [ 380.623834][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 380.623885][ T39] 1 lock held by syz-executor/7320: [ 380.623897][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 380.623948][ T39] 1 lock held by syz-executor/7323: [ 380.623960][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 380.624011][ T39] 1 lock held by syz-executor/7330: [ 380.624023][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 380.624075][ T39] 1 lock held by syz-executor/7337: [ 380.624087][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 380.624138][ T39] 1 lock held by syz-executor/7346: [ 380.624150][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 380.624201][ T39] 1 lock held by syz-executor/7348: [ 380.624212][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 380.624264][ T39] 1 lock held by syz-executor/7353: [ 380.624276][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 380.624326][ T39] 1 lock held by syz-executor/7366: [ 380.624338][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 380.624390][ T39] [ 380.624395][ T39] ============================================= [ 380.624395][ T39] [ 380.624415][ T39] NMI backtrace for cpu 0 [ 380.624441][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.624465][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.624477][ T39] Call Trace: [ 380.624492][ T39] [ 380.624500][ T39] dump_stack_lvl+0x189/0x250 [ 380.624537][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.624569][ T39] ? __pfx__printk+0x10/0x10 [ 380.624607][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 380.624639][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 380.624669][ T39] ? __pfx__printk+0x10/0x10 [ 380.624697][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 380.624727][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 380.624759][ T39] watchdog+0xf93/0xfe0 [ 380.624790][ T39] ? watchdog+0x1de/0xfe0 [ 380.624824][ T39] kthread+0x70e/0x8a0 [ 380.624861][ T39] ? __pfx_watchdog+0x10/0x10 [ 380.624887][ T39] ? __pfx_kthread+0x10/0x10 [ 380.624926][ T39] ? __pfx_kthread+0x10/0x10 [ 380.624959][ T39] ret_from_fork+0x439/0x7d0 [ 380.624991][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 380.625026][ T39] ? __switch_to_asm+0x39/0x70 [ 380.625046][ T39] ? __switch_to_asm+0x33/0x70 [ 380.625065][ T39] ? __pfx_kthread+0x10/0x10 [ 380.625099][ T39] ret_from_fork_asm+0x1a/0x30 [ 380.625137][ T39] [ 380.625145][ T39] Sending NMI from CPU 0 to CPUs 1: [ 380.625179][ C1] NMI backtrace for cpu 1 [ 380.625194][ C1] CPU: 1 UID: 0 PID: 7237 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.625215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.625227][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 380.625287][ C1] RIP: 0010:unwind_next_frame+0xa67/0x2390 [ 380.625316][ C1] Code: 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 82 17 00 00 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 99 17 00 00 48 0f bf 02 49 01 c4 <48> 8d 5e 01 48 8b 44 24 40 0f b6 04 28 84 c0 0f 85 78 13 00 00 49 [ 380.625331][ C1] RSP: 0018:ffffc90005dd6178 EFLAGS: 00000282 [ 380.625346][ C1] RAX: 0000000000000010 RBX: ffffffff8fa5a5a5 RCX: ffffffff8f2fae20 [ 380.625359][ C1] RDX: ffffffff8fa5a5a4 RSI: ffffffff8fa5a5a8 RDI: ffffffff8b6215a0 [ 380.625373][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8172c165 [ 380.625386][ C1] R10: ffffc90005dd62f8 R11: fffff52000bbac61 R12: ffffc90005dd6340 [ 380.625399][ C1] R13: ffffc90005dd62f8 R14: ffffc90005dd62a8 R15: ffffc90005dd62e0 [ 380.625413][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 380.625427][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.625439][ C1] CR2: 00007f37e2de0587 CR3: 000000003e7f0000 CR4: 00000000003526f0 [ 380.625456][ C1] Call Trace: [ 380.625463][ C1] [ 380.625473][ C1] ? unwind_next_frame+0xa5/0x2390 [ 380.625646][ C1] ? arch_stack_walk+0xe4/0x150 [ 380.625682][ C1] __unwind_start+0x5b9/0x760 [ 380.625712][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 380.625739][ C1] arch_stack_walk+0xe4/0x150 [ 380.625769][ C1] ? arch_stack_walk+0xe4/0x150 [ 380.625798][ C1] stack_trace_save+0x9c/0xe0 [ 380.625817][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 380.625835][ C1] ? do_raw_spin_lock+0x121/0x290 [ 380.625863][ C1] kasan_save_track+0x3e/0x80 [ 380.625913][ C1] ? dst_alloc+0x105/0x170 [ 380.625934][ C1] __kasan_slab_alloc+0x6c/0x80 [ 380.625957][ C1] ? dst_alloc+0x105/0x170 [ 380.625974][ C1] kmem_cache_alloc_noprof+0x143/0x310 [ 380.626006][ C1] dst_alloc+0x105/0x170 [ 380.626027][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 380.626054][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 380.626074][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 380.626093][ C1] ? __lock_acquire+0xab9/0xd20 [ 380.626119][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 380.626143][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 380.626177][ C1] ip_route_output_flow+0x2a/0x150 [ 380.626194][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 380.626216][ C1] ip_route_me_harder+0x6d2/0x1030 [ 380.626255][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 380.626295][ C1] synproxy_send_tcp+0x359/0x6c0 [ 380.626329][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 380.626366][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 380.626395][ C1] ? nft_tunnel_get_reduce+0x548/0x640 [ 380.626423][ C1] ? synproxy_pernet+0x45/0x270 [ 380.626447][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 380.626470][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 380.626492][ C1] ? nf_ip_checksum+0x13c/0x510 [ 380.626513][ C1] nft_synproxy_do_eval+0x345/0x570 [ 380.626539][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 380.626560][ C1] ? __lock_acquire+0xab9/0xd20 [ 380.626591][ C1] nft_do_chain+0x409/0x1920 [ 380.626619][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 380.626659][ C1] nft_do_chain_inet+0x25d/0x340 [ 380.626678][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 380.626696][ C1] ? __lock_acquire+0xab9/0xd20 [ 380.626726][ C1] ? NF_HOOK+0x9a/0x3a0 [ 380.626753][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 380.626773][ C1] nf_hook_slow+0xc5/0x220 [ 380.626803][ C1] NF_HOOK+0x206/0x3a0 [ 380.626829][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 380.626856][ C1] ? NF_HOOK+0x9a/0x3a0 [ 380.626880][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 380.626913][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 380.626942][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 380.626969][ C1] ? skb_dst+0x4f/0xd0 [ 380.626994][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 380.627022][ C1] NF_HOOK+0x309/0x3a0 [ 380.627050][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 380.627077][ C1] ? NF_HOOK+0x9a/0x3a0 [ 380.627101][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 380.627127][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 380.627158][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 380.627228][ C1] __netif_receive_skb+0x143/0x380 [ 380.627251][ C1] ? rt_spin_unlock+0x65/0x80 [ 380.627277][ C1] ? process_backlog+0x27b/0x900 [ 380.627301][ C1] process_backlog+0x31e/0x900 [ 380.627334][ C1] __napi_poll+0xb3/0x540 [ 380.627360][ C1] net_rx_action+0x707/0xe00 [ 380.627394][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 380.627427][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 380.627459][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 380.627486][ C1] handle_softirqs+0x22f/0x710 [ 380.627515][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 380.627544][ C1] __local_bh_enable_ip+0x179/0x270 [ 380.627567][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 380.627590][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 380.627612][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 380.627647][ C1] ? neigh_periodic_work+0x57/0xe90 [ 380.627673][ C1] neigh_periodic_work+0xc37/0xe90 [ 380.627701][ C1] ? neigh_periodic_work+0x57/0xe90 [ 380.627732][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 380.627761][ C1] process_scheduled_works+0xade/0x17b0 [ 380.627800][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.627833][ C1] worker_thread+0x8a0/0xda0 [ 380.627872][ C1] kthread+0x70e/0x8a0 [ 380.627902][ C1] ? __pfx_worker_thread+0x10/0x10 [ 380.627925][ C1] ? __pfx_kthread+0x10/0x10 [ 380.627955][ C1] ? __pfx_kthread+0x10/0x10 [ 380.627983][ C1] ret_from_fork+0x439/0x7d0 [ 380.628010][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 380.628037][ C1] ? __switch_to_asm+0x39/0x70 [ 380.628056][ C1] ? __switch_to_asm+0x33/0x70 [ 380.628072][ C1] ? __pfx_kthread+0x10/0x10 [ 380.628100][ C1] ret_from_fork_asm+0x1a/0x30 [ 380.628127][ C1] [ 380.628189][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 380.628210][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.628235][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.628247][ T39] Call Trace: [ 380.628255][ T39] [ 380.628264][ T39] dump_stack_lvl+0x99/0x250 [ 380.628297][ T39] ? __asan_memcpy+0x40/0x70 [ 380.628320][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.628352][ T39] ? __pfx__printk+0x10/0x10 [ 380.628389][ T39] vpanic+0x281/0x750 [ 380.628431][ T39] ? __pfx_vpanic+0x10/0x10 [ 380.628461][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 380.628484][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.628529][ T39] panic+0xb9/0xc0 [ 380.628561][ T39] ? __pfx_panic+0x10/0x10 [ 380.628596][ T39] ? irq_work_queue+0xc3/0x140 [ 380.628628][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 380.628660][ T39] watchdog+0xfd2/0xfe0 [ 380.628694][ T39] ? watchdog+0x1de/0xfe0 [ 380.628728][ T39] kthread+0x70e/0x8a0 [ 380.628764][ T39] ? __pfx_watchdog+0x10/0x10 [ 380.628792][ T39] ? __pfx_kthread+0x10/0x10 [ 380.628831][ T39] ? __pfx_kthread+0x10/0x10 [ 380.628866][ T39] ret_from_fork+0x439/0x7d0 [ 380.628898][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 380.628933][ T39] ? __switch_to_asm+0x39/0x70 [ 380.628953][ T39] ? __switch_to_asm+0x33/0x70 [ 380.628972][ T39] ? __pfx_kthread+0x10/0x10 [ 380.629006][ T39] ret_from_fork_asm+0x1a/0x30 [ 380.629045][ T39] [ 380.629399][ T39] Kernel Offset: disabled