last executing test programs: 8.483595725s ago: executing program 4 (id=2088): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "0c959905"}]}}, 0x0}, 0x0) 7.859646905s ago: executing program 0 (id=2095): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) 7.541153433s ago: executing program 0 (id=2098): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x9, 0x8}, 0xc) 7.087650746s ago: executing program 0 (id=2102): r0 = epoll_create(0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x8, r1, &(0x7f0000000100)={0x5000201a}) 6.670357275s ago: executing program 0 (id=2105): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x16, 0x48000038, r1, 0x0) 6.339224048s ago: executing program 0 (id=2109): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xfffffffc, 0x5, 0x1}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix_mp={0xfffffffe}}) 6.267315601s ago: executing program 4 (id=2110): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101601) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 5.976770551s ago: executing program 4 (id=2112): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) 5.936344496s ago: executing program 0 (id=2113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) 5.439532973s ago: executing program 4 (id=2114): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x58000}) 5.357555744s ago: executing program 1 (id=2115): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x3, r0) 5.139353485s ago: executing program 1 (id=2116): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)=ANY=[@ANYBLOB="5cc700001700000081"]) 5.126975801s ago: executing program 4 (id=2117): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) tkill(r1, 0x0) 4.862208167s ago: executing program 4 (id=2118): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.861641696s ago: executing program 1 (id=2119): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000280)={0x0, 0xea60}, 0x10) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.642230897s ago: executing program 1 (id=2120): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="c1", 0xfe41) poll(&(0x7f0000000180)=[{r0, 0x4}], 0x1, 0x0) 4.530266341s ago: executing program 1 (id=2121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) 4.247613302s ago: executing program 1 (id=2124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x300}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}]}, 0x3c}}, 0x0) 3.629659363s ago: executing program 2 (id=2128): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getdents(r0, &(0x7f00000000c0)=""/91, 0x5b) 3.46095131s ago: executing program 2 (id=2129): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x2304000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.08999665s ago: executing program 2 (id=2130): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x980905}) 2.964096366s ago: executing program 2 (id=2131): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1b"], 0xb, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/56}, 0x40, 0x0, 0x4800) 2.850114987s ago: executing program 2 (id=2132): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r0, r1, r1}, &(0x7f0000002f00)=""/4096, 0x1000, 0x0) 2.701081758s ago: executing program 2 (id=2133): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003040)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0xc}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfdb1, 0xf}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}}, 0x0) 2.27052993s ago: executing program 3 (id=2135): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') 2.172999678s ago: executing program 3 (id=2136): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='map_files\x00') fchdir(r0) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') 2.071745587s ago: executing program 3 (id=2137): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001340)={0x1c, &(0x7f00000016c0)=ANY=[], 0x0, 0x0}) 172.761673ms ago: executing program 3 (id=2138): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) recvmsg$kcm(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/40, 0x28}, 0x0) 88.607855ms ago: executing program 3 (id=2139): unshare(0x600) r0 = socket(0x1e, 0x4, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0x0, 0x0) 0s ago: executing program 3 (id=2140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x117, 0x29}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x50) kernel console output (not intermixed with test programs): [ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.035688][ T8339] team0: Port device team_slave_1 added [ 378.051929][ T5280] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 378.102572][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.137305][ T5280] usb 3-1: config 0 descriptor?? [ 378.144576][ T8334] hsr_slave_0: entered promiscuous mode [ 378.192606][ T5280] hub 3-1:0.0: USB hub found [ 378.244135][ T8334] hsr_slave_1: entered promiscuous mode [ 378.311049][ T8334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.336605][ T8334] Cannot create hsr debugfs directory [ 378.409622][ T5280] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 378.498196][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.525667][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.640475][ T5280] usbhid 3-1:0.0: can't add hid device: -71 [ 378.658971][ T5280] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 378.672710][ T8339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.740860][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.767149][ T5280] usb 3-1: USB disconnect, device number 22 [ 378.783750][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.838354][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.860523][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.936506][ T8339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.146807][ T5231] Bluetooth: hci0: command tx timeout [ 379.197237][ T8339] hsr_slave_0: entered promiscuous mode [ 379.250538][ T8339] hsr_slave_1: entered promiscuous mode [ 379.286945][ T8339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.294566][ T8339] Cannot create hsr debugfs directory [ 379.693694][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 379.717041][ T5231] Bluetooth: hci4: command tx timeout [ 381.209351][ T5280] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 381.226368][ T5231] Bluetooth: hci0: command tx timeout [ 381.392012][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.406235][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.435529][ T5280] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 381.455770][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.477753][ T5280] usb 3-1: config 0 descriptor?? [ 381.786686][ T5231] Bluetooth: hci4: command tx timeout [ 381.937430][ T5280] ortek 0003:1223:3F07.003D: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.2-1/input0 [ 382.178271][ T5280] usb 3-1: USB disconnect, device number 23 [ 382.524983][ T8222] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.544665][ T8222] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.456381][ T8429] tipc: Started in network mode [ 383.476324][ T8429] tipc: Node identity ac14142a, cluster identity 4711 [ 383.487784][ T8429] tipc: Enabled bearer , priority 10 [ 383.756551][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 383.850120][ T8222] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.891355][ T8222] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.926511][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 383.953465][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 383.983596][ T9] usb 2-1: config 0 has no interface number 0 [ 384.016499][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 384.046396][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 384.082685][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 384.096238][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.125641][ T9] usb 2-1: Product: syz [ 384.130405][ T9] usb 2-1: Manufacturer: syz [ 384.135054][ T9] usb 2-1: SerialNumber: syz [ 384.167246][ T9] usb 2-1: config 0 descriptor?? [ 384.192346][ T8431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 384.210396][ T8431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 384.497402][ T8431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 384.504738][ T8431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 384.628643][ T5284] tipc: Node number set to 2886997034 [ 384.985995][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.035941][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 385.081477][ T9] asix 2-1:0.251: probe with driver asix failed with error -71 [ 385.089692][ T8446] tipc: Enabling of bearer rejected, failed to enable media [ 385.133413][ T9] usb 2-1: USB disconnect, device number 20 [ 385.469368][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1338'. [ 389.752848][ T8222] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.793961][ T8222] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.528266][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 391.152091][ T5237] Bluetooth: hci5: command 0x0406 tx timeout [ 391.159354][ T5233] Bluetooth: hci7: command 0x0406 tx timeout [ 391.406055][ T8222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 391.457299][ T8222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 391.539465][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 391.706818][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 391.719101][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.750623][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.781121][ T9] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 391.813301][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.841090][ T9] usb 3-1: config 0 descriptor?? [ 392.096756][ T5284] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 392.296536][ T5284] usb 2-1: Using ep0 maxpacket: 16 [ 392.304752][ T5284] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 392.334652][ T9] glorious 0003:22D4:1503.003E: unknown main item tag 0x2 [ 392.342120][ T5284] usb 2-1: config 0 has no interface number 0 [ 392.359276][ T5284] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 392.372959][ T9] glorious 0003:22D4:1503.003E: item fetching failed at offset 3/5 [ 392.392279][ T9] glorious 0003:22D4:1503.003E: probe with driver glorious failed with error -22 [ 392.401909][ T5284] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 392.432892][ T5284] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 392.456457][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 392.478854][ T5284] usb 2-1: Product: syz [ 392.489768][ T5284] usb 2-1: SerialNumber: syz [ 392.512917][ T5284] usb 2-1: config 0 descriptor?? [ 392.537797][ T5284] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 392.567326][ T5284] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input26 [ 392.594973][ T9] usb 3-1: USB disconnect, device number 24 [ 392.870940][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 392.878685][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 392.885881][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 392.893175][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 392.900390][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 392.907939][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 392.915116][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 392.924502][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 392.932732][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 392.940053][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 392.950329][ T9] usb 2-1: USB disconnect, device number 21 [ 392.956424][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 393.014123][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 396.836075][ T8334] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.892775][ T8222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.932120][ T8222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.907289][ T5284] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 398.066825][ T5284] usb 2-1: Using ep0 maxpacket: 16 [ 398.083541][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.102682][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.123173][ T5284] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 398.153224][ T5284] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 398.172844][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.194803][ T5284] usb 2-1: config 0 descriptor?? [ 398.697133][ T5284] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 398.718831][ T5284] microsoft 0003:045E:07DA.003F: No inputs registered, leaving [ 398.743467][ T5284] microsoft 0003:045E:07DA.003F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 398.779688][ T5284] microsoft 0003:045E:07DA.003F: no inputs found [ 398.797025][ T5284] microsoft 0003:045E:07DA.003F: could not initialize ff, continuing anyway [ 398.970812][ T5284] usb 2-1: USB disconnect, device number 22 [ 404.679256][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.688707][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.699834][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.710795][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.726413][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 404.735359][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.826574][ T54] Bluetooth: hci1: command tx timeout [ 407.239218][ T8334] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.740819][ T8222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.818830][ T8222] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.875195][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.882423][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.916060][ T8545] chnl_net:caif_netlink_parms(): no params data found [ 407.941874][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.949086][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.112871][ T8222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.139540][ T8222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.284234][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.302279][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.316603][ T8545] bridge_slave_0: entered allmulticast mode [ 408.334088][ T8545] bridge_slave_0: entered promiscuous mode [ 408.378465][ T8222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.396744][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.414504][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.427049][ T8545] bridge_slave_1: entered allmulticast mode [ 408.436812][ T8545] bridge_slave_1: entered promiscuous mode [ 408.628751][ T8545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.681373][ T8545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.869852][ T8545] team0: Port device team_slave_0 added [ 408.910194][ T54] Bluetooth: hci1: command tx timeout [ 408.917407][ T8545] team0: Port device team_slave_1 added [ 409.817888][ T8560] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1385'. [ 409.834598][ T8560] openvswitch: netlink: Actions may not be safe on all matching packets [ 410.986532][ T54] Bluetooth: hci1: command tx timeout [ 413.066756][ T54] Bluetooth: hci1: command tx timeout [ 414.885716][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.897437][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.943893][ T8545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.964373][ T8222] veth0_vlan: entered promiscuous mode [ 415.062588][ T8334] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.098067][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.107638][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.216400][ T8545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.292461][ T8222] veth1_vlan: entered promiscuous mode [ 415.472940][ T8545] hsr_slave_0: entered promiscuous mode [ 415.497917][ T8545] hsr_slave_1: entered promiscuous mode [ 415.524202][ T8545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.534346][ T8545] Cannot create hsr debugfs directory [ 415.709215][ T8222] veth0_macvtap: entered promiscuous mode [ 415.753634][ T8222] veth1_macvtap: entered promiscuous mode [ 415.860772][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.890120][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.909106][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.928776][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.951085][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.980909][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.002065][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.019774][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.040618][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.064035][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.098682][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.153493][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.176945][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.206230][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.226223][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.246296][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.271729][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.301126][ T8222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.325039][ T8222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.342007][ T8222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.392070][ T8222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.415815][ T8222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.432768][ T8222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.452095][ T8222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.657423][ T2506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.685758][ T2506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.765230][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.785537][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.428172][ T8334] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.472591][ T29] audit: type=1326 audit(1727411972.779:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 417.582751][ T29] audit: type=1326 audit(1727411972.819:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 417.687064][ T29] audit: type=1326 audit(1727411972.819:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 417.786480][ T29] audit: type=1326 audit(1727411972.819:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 417.891507][ T29] audit: type=1326 audit(1727411972.819:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 417.994178][ T29] audit: type=1326 audit(1727411972.819:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 418.100932][ T9] IPVS: starting estimator thread 0... [ 418.107412][ T29] audit: type=1326 audit(1727411972.819:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 418.257243][ T8590] IPVS: using max 15 ests per chain, 36000 per kthread [ 419.147359][ T5284] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 419.224767][ T8613] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1408'. [ 419.275788][ T8613] Κό: entered promiscuous mode [ 419.316413][ T5284] usb 2-1: Using ep0 maxpacket: 8 [ 419.327897][ T5284] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 419.351950][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 419.391141][ T5284] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.434028][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.468671][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 419.514918][ T5284] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 419.532984][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 419.578845][ T5284] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.621802][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.685871][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 419.785967][ T5284] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 419.812275][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 419.866653][ T5284] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.906051][ T8334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.926250][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.959285][ T8334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.976456][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 420.033056][ T5284] usb 2-1: string descriptor 0 read error: -22 [ 420.046689][ T5284] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 420.091655][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.142943][ T8339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.169387][ T5284] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 420.259350][ T8334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.309400][ T8334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.523652][ T9] usb 2-1: USB disconnect, device number 23 [ 420.707056][ T8334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.785369][ T8334] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.847679][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.854883][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.890778][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.897987][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.191277][ T8334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.352184][ T8334] veth0_vlan: entered promiscuous mode [ 421.382084][ T8334] veth1_vlan: entered promiscuous mode [ 421.486738][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 421.511174][ T8334] veth0_macvtap: entered promiscuous mode [ 421.549749][ T8334] veth1_macvtap: entered promiscuous mode [ 421.622274][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.669204][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.699459][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 421.726294][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.736522][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.766406][ T9] usb 5-1: Product: syz [ 421.770634][ T9] usb 5-1: Manufacturer: syz [ 421.775259][ T9] usb 5-1: SerialNumber: syz [ 421.787157][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.824741][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.840394][ T9] usb 5-1: config 0 descriptor?? [ 421.864258][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 015 [ 421.884215][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.934881][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.965995][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.014452][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.079559][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.108852][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.150234][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.194226][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.498658][ T9] i2c i2c-1: failure reading functionality [ 422.517374][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 422.551611][ T9] usb 5-1: USB disconnect, device number 15 [ 423.616408][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 423.809424][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 423.833611][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.865227][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.899035][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 423.929139][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.964147][ T9] usb 2-1: config 0 descriptor?? [ 424.206546][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 424.380257][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 424.404370][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.428623][ T9] nzxt-smart2 0003:1E71:200F.0040: unknown main item tag 0xe [ 424.446383][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.468392][ T9] nzxt-smart2 0003:1E71:200F.0040: hidraw0: USB HID v0.00 Device [HID 1e71:200f] on usb-dummy_hcd.1-1/input0 [ 424.493063][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.520606][ T8] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 424.540462][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.581760][ T8] usb 5-1: config 0 descriptor?? [ 424.690210][ T9] usb 2-1: USB disconnect, device number 24 [ 424.965803][ T8339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.030014][ T8] cypress 0003:04B4:07B1.0041: unknown main item tag 0x0 [ 425.052439][ T8] cypress 0003:04B4:07B1.0041: unknown main item tag 0x0 [ 425.061526][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.085080][ T8] cypress 0003:04B4:07B1.0041: unknown main item tag 0x0 [ 425.103655][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.123226][ T8] cypress 0003:04B4:07B1.0041: unknown main item tag 0x0 [ 425.134833][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.145707][ T8] cypress 0003:04B4:07B1.0041: unknown main item tag 0x0 [ 425.165976][ T8] cypress 0003:04B4:07B1.0041: unknown main item tag 0x0 [ 425.173530][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.195172][ T8] cypress 0003:04B4:07B1.0041: unknown main item tag 0x0 [ 425.207707][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.233845][ T8] cypress 0003:04B4:07B1.0041: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.4-1/input0 [ 425.272371][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.303947][ T8] usb 5-1: USB disconnect, device number 16 [ 425.323434][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.385628][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.426445][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.463083][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.518686][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.652485][ T8334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.684070][ T8334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.715976][ T8334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.749644][ T8334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.089439][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.128910][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.244283][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.277699][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.501175][ T8339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.506520][ T5284] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 429.688630][ T5284] usb 1-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 429.707407][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.732171][ T5284] usb 1-1: config 0 descriptor?? [ 429.905981][ T29] audit: type=1326 audit(1727411985.209:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.1.1455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7fc00000 [ 430.215870][ T5284] aquacomputer_d5next 0003:0C70:F010.0042: hidraw0: USB HID vff.fd Device [HID 0c70:f010] on usb-dummy_hcd.0-1/input0 [ 430.510393][ T5284] usb 1-1: USB disconnect, device number 21 [ 431.466848][ T5284] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 431.656664][ T5284] usb 2-1: Using ep0 maxpacket: 16 [ 431.670739][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.714544][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.770716][ T5284] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 431.798878][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.838661][ T5284] usb 2-1: config 0 descriptor?? [ 432.277168][ T5284] mcp2200 0003:04D8:00DF.0043: unknown main item tag 0x0 [ 432.285005][ T5284] mcp2200 0003:04D8:00DF.0043: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 432.561302][ T5284] usb 2-1: USB disconnect, device number 25 [ 432.628077][ T8339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.685182][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.698042][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.728583][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.757529][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.765329][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 432.772940][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.912435][ T2567] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.141953][ T2567] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.394597][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 433.419543][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 433.436774][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 433.445962][ T2567] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.467666][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 433.478934][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 433.487243][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 433.665667][ T2567] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.957769][ T2567] bridge_slave_1: left allmulticast mode [ 433.963509][ T2567] bridge_slave_1: left promiscuous mode [ 433.989202][ T2567] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.013163][ T2567] bridge_slave_0: left allmulticast mode [ 434.026580][ T2567] bridge_slave_0: left promiscuous mode [ 434.043868][ T2567] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.058751][ T2567] bridge_slave_1: left allmulticast mode [ 434.064450][ T2567] bridge_slave_1: left promiscuous mode [ 434.092035][ T2567] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.137986][ T2567] bridge_slave_0: left allmulticast mode [ 434.143778][ T2567] bridge_slave_0: left promiscuous mode [ 434.161301][ T2567] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.180443][ T2567] bridge_slave_1: left allmulticast mode [ 434.196402][ T2567] bridge_slave_1: left promiscuous mode [ 434.202310][ T2567] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.267210][ T2567] bridge_slave_0: left allmulticast mode [ 434.272950][ T2567] bridge_slave_0: left promiscuous mode [ 434.291549][ T2567] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.336673][ T2567] bridge_slave_1: left allmulticast mode [ 434.342396][ T2567] bridge_slave_1: left promiscuous mode [ 434.348281][ T2567] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.358566][ T2567] bridge_slave_0: left allmulticast mode [ 434.364260][ T2567] bridge_slave_0: left promiscuous mode [ 434.371662][ T2567] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.552826][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 434.582632][ T8801] netlink: 287 bytes leftover after parsing attributes in process `syz.1.1494'. [ 434.613817][ T8801] netlink: 287 bytes leftover after parsing attributes in process `syz.1.1494'. [ 434.836409][ T54] Bluetooth: hci2: command tx timeout [ 435.189023][ T2567] gretap0 (unregistering): left allmulticast mode [ 435.547215][ T54] Bluetooth: hci3: command tx timeout [ 435.574186][ T2567] team0: Port device bridge1 removed [ 435.851118][ T2567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.864849][ T2567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.879402][ T2567] bond0 (unregistering): Released all slaves [ 435.994677][ T2567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.003485][ T8783] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 436.014022][ T2567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.025678][ T2567] bond0 (unregistering): Released all slaves [ 436.040740][ T2567] bond1 (unregistering): Released all slaves [ 436.158382][ T2567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.169034][ T8783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.182002][ T8783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.192266][ T8783] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 436.192674][ T2567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.210667][ T8783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.220700][ T8783] usb 2-1: config 0 descriptor?? [ 436.241222][ T2567] bond0 (unregistering): Released all slaves [ 436.363277][ T2567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.375142][ T2567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.387147][ T2567] bond0 (unregistering): Released all slaves [ 436.602949][ T2567] tipc: Disabling bearer [ 436.614778][ T2567] tipc: Left network mode [ 436.716308][ T2567] tipc: Left network mode [ 436.748281][ T8750] chnl_net:caif_netlink_parms(): no params data found [ 436.797596][ T2567] tipc: Left network mode [ 436.876990][ T8783] hid-led 0003:1D34:000A.0044: probe with driver hid-led failed with error -71 [ 436.900358][ T8783] usb 2-1: USB disconnect, device number 26 [ 436.906513][ T54] Bluetooth: hci2: command tx timeout [ 437.100988][ T8765] chnl_net:caif_netlink_parms(): no params data found [ 437.208943][ T8750] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.230963][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.245301][ T8750] bridge_slave_0: entered allmulticast mode [ 437.260350][ T8750] bridge_slave_0: entered promiscuous mode [ 437.415020][ T8545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 437.428976][ T8750] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.446957][ T8750] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.454325][ T8750] bridge_slave_1: entered allmulticast mode [ 437.487910][ T8750] bridge_slave_1: entered promiscuous mode [ 437.626344][ T54] Bluetooth: hci3: command tx timeout [ 437.673632][ T8545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 437.682875][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1504'. [ 437.694883][ T8545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 437.745948][ T8750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.768092][ T8845] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1504'. [ 437.781497][ T8845] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1504'. [ 437.858303][ T8545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 437.910607][ T8750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.953090][ T8765] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.969257][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.987225][ T8765] bridge_slave_0: entered allmulticast mode [ 438.001413][ T8765] bridge_slave_0: entered promiscuous mode [ 438.134837][ T8750] team0: Port device team_slave_0 added [ 438.148138][ T8765] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.169679][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.187377][ T8765] bridge_slave_1: entered allmulticast mode [ 438.202136][ T8765] bridge_slave_1: entered promiscuous mode [ 438.347821][ T8750] team0: Port device team_slave_1 added [ 438.504702][ T8765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.519237][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1510'. [ 438.541808][ T8765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.653120][ T8750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.660428][ T8750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.688014][ T8750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.727384][ T8750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.735102][ T8750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.762035][ T8750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.916755][ T8765] team0: Port device team_slave_0 added [ 438.967818][ T8765] team0: Port device team_slave_1 added [ 438.986622][ T54] Bluetooth: hci2: command tx timeout [ 439.011849][ T8750] hsr_slave_0: entered promiscuous mode [ 439.019253][ T8750] hsr_slave_1: entered promiscuous mode [ 439.025592][ T8750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.034944][ T8750] Cannot create hsr debugfs directory [ 439.111774][ T8765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.122114][ T8765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.149061][ T8765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.184627][ T8765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.191942][ T8765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.217882][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.226833][ T8765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.367062][ T8765] hsr_slave_0: entered promiscuous mode [ 439.374771][ T8765] hsr_slave_1: entered promiscuous mode [ 439.383902][ T8765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.392707][ T8765] Cannot create hsr debugfs directory [ 439.415369][ T2567] hsr_slave_0: left promiscuous mode [ 439.421540][ T2567] hsr_slave_1: left promiscuous mode [ 439.428338][ T2567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.435821][ T2567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.444758][ T2567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.453291][ T2567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.470786][ T2567] hsr_slave_0: left promiscuous mode [ 439.477036][ T2567] hsr_slave_1: left promiscuous mode [ 439.483735][ T2567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.492800][ T2567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.501041][ T2567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.509603][ T2567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.523673][ T2567] hsr_slave_0: left promiscuous mode [ 439.530258][ T2567] hsr_slave_1: left promiscuous mode [ 439.536652][ T2567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.544213][ T2567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.552905][ T2567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.560588][ T2567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.593549][ T2567] hsr_slave_0: left promiscuous mode [ 439.607254][ T2567] hsr_slave_1: left promiscuous mode [ 439.622121][ T2567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.631632][ T2567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.694642][ T2567] veth1_macvtap: left promiscuous mode [ 439.700341][ T2567] veth0_macvtap: left promiscuous mode [ 439.705994][ T2567] veth1_vlan: left promiscuous mode [ 439.706412][ T54] Bluetooth: hci3: command tx timeout [ 439.713404][ T2567] veth0_vlan: left promiscuous mode [ 439.724762][ T2567] veth1_macvtap: left promiscuous mode [ 439.730694][ T2567] veth0_macvtap: left promiscuous mode [ 439.736569][ T2567] veth1_vlan: left promiscuous mode [ 439.741891][ T2567] veth0_vlan: left promiscuous mode [ 439.749534][ T2567] veth1_macvtap: left promiscuous mode [ 439.755065][ T2567] veth0_macvtap: left promiscuous mode [ 439.760959][ T2567] veth1_vlan: left promiscuous mode [ 439.766380][ T2567] veth0_vlan: left promiscuous mode [ 439.772795][ T2567] veth1_macvtap: left promiscuous mode [ 439.778721][ T2567] veth0_macvtap: left promiscuous mode [ 439.785233][ T2567] veth1_vlan: left promiscuous mode [ 439.793772][ T2567] veth0_vlan: left promiscuous mode [ 440.269349][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.277983][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.595350][ T2567] team0 (unregistering): Port device team_slave_1 removed [ 440.643325][ T2567] team0 (unregistering): Port device team_slave_0 removed [ 441.067704][ T54] Bluetooth: hci2: command tx timeout [ 441.446142][ T2567] team0 (unregistering): Port device team_slave_1 removed [ 441.493746][ T2567] team0 (unregistering): Port device team_slave_0 removed [ 441.787267][ T54] Bluetooth: hci3: command tx timeout [ 442.320235][ T2567] team0 (unregistering): Port device team_slave_1 removed [ 442.369623][ T2567] team0 (unregistering): Port device team_slave_0 removed [ 443.203192][ T2567] team0 (unregistering): Port device team_slave_1 removed [ 443.254542][ T2567] team0 (unregistering): Port device team_slave_0 removed [ 443.959223][ T8545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.046134][ T8545] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.105704][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.112896][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.153058][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.160271][ T8005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.300368][ T8750] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 444.332508][ T8750] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 444.400888][ T8765] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.472030][ T8750] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.520016][ T8750] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.585604][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.603346][ T8545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.641434][ T8545] veth0_vlan: entered promiscuous mode [ 444.648446][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.657547][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.669491][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.685156][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 444.687948][ T8765] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.707874][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 444.738224][ T8545] veth1_vlan: entered promiscuous mode [ 444.870329][ T8765] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.983412][ T8765] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.032113][ T8545] veth0_macvtap: entered promiscuous mode [ 445.069867][ T8896] netlink: 'syz.1.1521': attribute type 3 has an invalid length. [ 445.091787][ T8545] veth1_macvtap: entered promiscuous mode [ 445.399835][ T8750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.414878][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.427391][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.437851][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.456296][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.472407][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.490267][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.502085][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.534696][ T8765] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 445.569108][ T8765] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 445.582831][ T8892] chnl_net:caif_netlink_parms(): no params data found [ 445.594324][ T8765] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 445.616662][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.631736][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.641862][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.652662][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.663868][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.674659][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.687740][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.730523][ T8765] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 445.754403][ T8545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.764098][ T8545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.768957][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 445.775860][ T8545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.795927][ T8545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.822124][ T8750] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.875033][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.882738][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.890201][ T8892] bridge_slave_0: entered allmulticast mode [ 445.897713][ T8892] bridge_slave_0: entered promiscuous mode [ 445.906092][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.913675][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.923343][ T8892] bridge_slave_1: entered allmulticast mode [ 445.930909][ T8892] bridge_slave_1: entered promiscuous mode [ 445.958531][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.965742][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.976866][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.991060][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.998300][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.006795][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 446.007951][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.018204][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.054199][ T9] usb 2-1: config 0 descriptor?? [ 446.081837][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.118689][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.202160][ T8892] team0: Port device team_slave_0 added [ 446.229418][ T8892] team0: Port device team_slave_1 added [ 446.257663][ T2506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.289990][ T2506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.360435][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.367734][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.399314][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.418366][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.425493][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.452016][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.476510][ T2506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.484752][ T2506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.502664][ T9] wacom 0003:056A:0003.0045: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 446.555101][ T9] wacom 0003:056A:0003.0045: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.1-1/input0 [ 446.609949][ T9] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0003.0045/input/input28 [ 446.692893][ T8765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.746639][ T5231] Bluetooth: hci0: command tx timeout [ 446.774851][ T8882] usb 2-1: USB disconnect, device number 27 [ 446.775161][ T8892] hsr_slave_0: entered promiscuous mode [ 446.838395][ T8892] hsr_slave_1: entered promiscuous mode [ 446.914407][ T1063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.034171][ T8765] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.063593][ T2506] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.070900][ T2506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.115700][ T1063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.192943][ T2506] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.200134][ T2506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.262350][ T8750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.355433][ T1063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.464133][ T1063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.543197][ T8750] veth0_vlan: entered promiscuous mode [ 447.571058][ T8750] veth1_vlan: entered promiscuous mode [ 447.576512][ T5298] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 447.683778][ T1063] bridge_slave_1: left allmulticast mode [ 447.695745][ T1063] bridge_slave_1: left promiscuous mode [ 447.707686][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.719997][ T1063] bridge_slave_0: left allmulticast mode [ 447.725862][ T1063] bridge_slave_0: left promiscuous mode [ 447.727624][ T5298] usb 3-1: Using ep0 maxpacket: 32 [ 447.736726][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.749664][ T1063] bridge_slave_1: left allmulticast mode [ 447.755355][ T1063] bridge_slave_1: left promiscuous mode [ 447.758774][ T5298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.766792][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.772129][ T8909] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 447.796036][ T5298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.797697][ T1063] bridge_slave_0: left allmulticast mode [ 447.818249][ T5298] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.826218][ T1063] bridge_slave_0: left promiscuous mode [ 447.834526][ T5298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.843324][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.854699][ T5298] usb 3-1: config 0 descriptor?? [ 447.864669][ T1063] bridge_slave_1: left allmulticast mode [ 447.874516][ T5298] hub 3-1:0.0: USB hub found [ 447.883883][ T1063] bridge_slave_1: left promiscuous mode [ 447.894160][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.910217][ T1063] bridge_slave_0: left allmulticast mode [ 447.916271][ T1063] bridge_slave_0: left promiscuous mode [ 447.922059][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.975733][ T8909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.987921][ T8909] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.000022][ T8909] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.010960][ T8909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 448.018414][ T8909] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 448.039358][ T8909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.085592][ T8909] usb 2-1: config 0 descriptor?? [ 448.096881][ T5298] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 448.313555][ T5298] usbhid 3-1:0.0: can't add hid device: -71 [ 448.336124][ T5298] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 448.378058][ T5298] usb 3-1: USB disconnect, device number 25 [ 448.551379][ T8909] zeroplus 0003:0C12:0005.0046: unknown main item tag 0x0 [ 448.560897][ T8909] zeroplus 0003:0C12:0005.0046: unknown main item tag 0x0 [ 448.569100][ T8909] zeroplus 0003:0C12:0005.0046: unknown main item tag 0x0 [ 448.576934][ T8909] zeroplus 0003:0C12:0005.0046: unknown main item tag 0x0 [ 448.585514][ T8909] zeroplus 0003:0C12:0005.0046: unknown main item tag 0x0 [ 448.603001][ T8909] zeroplus 0003:0C12:0005.0046: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.1-1/input0 [ 448.614971][ T8909] zeroplus 0003:0C12:0005.0046: no inputs found [ 448.793205][ T8909] usb 2-1: USB disconnect, device number 28 [ 448.826680][ T5231] Bluetooth: hci0: command tx timeout [ 449.101555][ T1063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.124826][ T1063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.152703][ T1063] bond0 (unregistering): Released all slaves [ 449.167839][ T1063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.191801][ T1063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.208624][ T1063] bond0 (unregistering): Released all slaves [ 449.409685][ T1063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.431267][ T1063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.442895][ T1063] bond0 (unregistering): Released all slaves [ 449.492341][ T8750] veth0_macvtap: entered promiscuous mode [ 449.521990][ T8750] veth1_macvtap: entered promiscuous mode [ 449.638925][ T1063] Κό: left promiscuous mode [ 449.656302][ T5280] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 449.690642][ T8765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.839551][ T8750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.850683][ T8750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.865326][ T8750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.876077][ T8750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.886006][ T8750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.896627][ T8750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.906922][ T8750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.917793][ T8750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.929475][ T8750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.939530][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.950960][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.961781][ T5280] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 449.971678][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.989820][ T5280] usb 2-1: config 0 descriptor?? [ 450.131959][ T8765] veth0_vlan: entered promiscuous mode [ 450.150776][ T8750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.169713][ T8750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.180042][ T8750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.195266][ T8750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.205391][ T8750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.216460][ T8750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.226557][ T8750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.237145][ T8750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.249779][ T8750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.369160][ T8750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.379794][ T8750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.390530][ T8750] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.399771][ T8750] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.461731][ T5280] cm6533_jd 0003:0D8C:0022.0047: unknown main item tag 0x0 [ 450.490021][ T8765] veth1_vlan: entered promiscuous mode [ 450.495899][ T5280] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0047/input/input31 [ 450.562311][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1543'. [ 450.622457][ T5280] cm6533_jd 0003:0D8C:0022.0047: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 450.700421][ T5280] usb 2-1: USB disconnect, device number 29 [ 450.908014][ T5231] Bluetooth: hci0: command tx timeout [ 451.134384][ T8765] veth0_macvtap: entered promiscuous mode [ 451.455975][ T8765] veth1_macvtap: entered promiscuous mode [ 451.622585][ T1063] hsr_slave_0: left promiscuous mode [ 451.667277][ T1063] hsr_slave_1: left promiscuous mode [ 451.675686][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.697650][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.718060][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.725625][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.782144][ T1063] hsr_slave_0: left promiscuous mode [ 451.808877][ T1063] hsr_slave_1: left promiscuous mode [ 451.819928][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.832685][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.855583][ T1063] hsr_slave_0: left promiscuous mode [ 451.869935][ T1063] hsr_slave_1: left promiscuous mode [ 451.885028][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.893104][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.904385][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.913188][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.958525][ T1063] veth1_macvtap: left promiscuous mode [ 451.964247][ T1063] veth0_macvtap: left promiscuous mode [ 451.971282][ T1063] veth1_vlan: left promiscuous mode [ 451.977431][ T1063] veth0_vlan: left promiscuous mode [ 451.983966][ T1063] veth1_macvtap: left promiscuous mode [ 451.990372][ T1063] veth0_macvtap: left promiscuous mode [ 451.996099][ T1063] veth1_vlan: left promiscuous mode [ 452.002026][ T1063] veth0_vlan: left promiscuous mode [ 452.042290][ T8909] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 452.199308][ T8909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.214996][ T8909] usb 3-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 452.235614][ T8909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.260644][ T8909] usb 3-1: config 0 descriptor?? [ 452.708120][ T8909] hid (null): usage index exceeded [ 452.728805][ T8909] hid-generic 0003:093A:8002.0048: unknown main item tag 0x0 [ 452.737260][ T8909] hid-generic 0003:093A:8002.0048: unknown main item tag 0xe [ 452.744728][ T8909] hid-generic 0003:093A:8002.0048: unknown main item tag 0x5 [ 452.752395][ T8909] hid-generic 0003:093A:8002.0048: unknown main item tag 0x4 [ 452.760794][ T8909] hid-generic 0003:093A:8002.0048: ignoring exceeding usage max [ 452.770212][ T8909] hid-generic 0003:093A:8002.0048: usage index exceeded [ 452.779015][ T8909] hid-generic 0003:093A:8002.0048: item 0 0 2 0 parsing failed [ 452.787807][ T8909] hid-generic 0003:093A:8002.0048: probe with driver hid-generic failed with error -22 [ 452.929595][ T1063] team0 (unregistering): Port device team_slave_1 removed [ 452.943416][ T5280] usb 3-1: USB disconnect, device number 26 [ 452.986448][ T5231] Bluetooth: hci0: command tx timeout [ 453.001499][ T1063] team0 (unregistering): Port device team_slave_0 removed [ 453.592269][ T1063] team0 (unregistering): Port device team_slave_1 removed [ 453.665744][ T1063] team0 (unregistering): Port device team_slave_0 removed [ 454.196573][ T5280] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 454.285525][ T1063] team0 (unregistering): Port device team_slave_1 removed [ 454.325666][ T1063] team0 (unregistering): Port device team_slave_0 removed [ 454.370586][ T5280] usb 3-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 454.383468][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 454.400327][ T5280] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 454.410602][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.418699][ T5280] usb 3-1: Product: syz [ 454.423093][ T5280] usb 3-1: Manufacturer: syz [ 454.428262][ T5280] usb 3-1: SerialNumber: syz [ 454.435071][ T5280] usb 3-1: config 0 descriptor?? [ 454.679089][ T5280] redrat3 3-1:0.0: Couldn't find all endpoints [ 454.701599][ T5280] usb 3-1: USB disconnect, device number 27 [ 454.856772][ T8892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.874216][ T8892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.923522][ T8892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.923735][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.952204][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.960168][ T8892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 455.013757][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.032488][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.044074][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.054765][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.067064][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.078028][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.089124][ T8765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.120717][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.137328][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.158896][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.175774][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.198261][ T8765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.209038][ T5280] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 455.209052][ T8765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.219945][ T8765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.244278][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.269783][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.281964][ T8765] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.293595][ T8765] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.303924][ T8765] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.313126][ T8765] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.418689][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 455.437139][ T8783] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 455.448313][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 455.489684][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 31265, setting to 1024 [ 455.516014][ T5280] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 455.531795][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.546050][ T5280] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 455.560496][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 455.571172][ T5280] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 455.620618][ T8783] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 455.621063][ T5280] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 455.640291][ T8783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.640403][ T8783] usb 2-1: Product: syz [ 455.640422][ T8783] usb 2-1: Manufacturer: syz [ 455.640440][ T8783] usb 2-1: SerialNumber: syz [ 455.671299][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 455.674645][ T8783] usb 2-1: config 0 descriptor?? [ 455.680259][ T5280] usb 3-1: Product: syz [ 455.689395][ T5280] usb 3-1: Manufacturer: syz [ 455.694730][ T5280] usb 3-1: SerialNumber: syz [ 455.705161][ T2567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.715544][ T2567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.725620][ T8892] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.745696][ T5280] usb 3-1: config 0 descriptor?? [ 455.782896][ T5280] usb 3-1: NFC: intf ffff8880206da000 id ffffffff8f3199e0 [ 455.795091][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.802283][ T2567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.883773][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.890973][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.933289][ T2506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.953184][ T2506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.962389][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 455.988084][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 456.079673][ T9034] netlink: 'syz.4.1473': attribute type 2 has an invalid length. [ 456.151785][ T8] usb 3-1: USB disconnect, device number 28 [ 456.187678][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.248284][ T8882] usb 2-1: USB disconnect, device number 30 [ 456.371491][ T8892] veth0_vlan: entered promiscuous mode [ 456.383367][ T8892] veth1_vlan: entered promiscuous mode [ 456.424245][ T8892] veth0_macvtap: entered promiscuous mode [ 456.433590][ T8892] veth1_macvtap: entered promiscuous mode [ 456.451283][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.461891][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.471900][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.482610][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.492759][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.503526][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.514389][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.525679][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.540121][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.554138][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.565097][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.575220][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.585984][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.596064][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.606744][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.617219][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.628284][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.639585][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.675229][ T8892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.692522][ T8892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.705284][ T8892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.715558][ T8892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.947652][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.955545][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.032248][ T1063] IPVS: stop unused estimator thread 0... [ 457.057062][ T2567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.097515][ T2567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.147162][ T5284] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 458.164581][ T9109] program syz.0.1594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.315294][ T5284] usb 5-1: Using ep0 maxpacket: 32 [ 458.333504][ T5284] usb 5-1: unable to get BOS descriptor or descriptor too short [ 458.370822][ T5284] usb 5-1: config 253 has an invalid interface number: 79 but max is 0 [ 458.388115][ T9116] atomic_op ffff88807c880998 conn xmit_atomic 0000000000000000 [ 458.396339][ T5284] usb 5-1: config 253 has no interface number 0 [ 458.402692][ T5284] usb 5-1: config 253 interface 79 altsetting 64 endpoint 0x3 has an invalid bInterval 98, changing to 10 [ 458.426209][ T5284] usb 5-1: config 253 interface 79 has no altsetting 0 [ 458.458641][ T5284] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 458.475089][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.500022][ T5284] usb 5-1: Product: syz [ 458.513517][ T5284] usb 5-1: Manufacturer: syz [ 458.518373][ T5284] usb 5-1: SerialNumber: syz [ 458.750440][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 458.810875][ T5284] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 458.835028][ T2506] usb 5-1: Failed to submit usb control message: -71 [ 458.842214][ T2506] usb 5-1: unable to send the bmi data to the device: -71 [ 458.851279][ T2506] usb 5-1: unable to get target info from device [ 458.857931][ T2506] usb 5-1: could not get target info (-71) [ 458.864064][ T2506] usb 5-1: could not probe fw (-71) [ 458.871157][ T5284] usb 5-1: USB disconnect, device number 17 [ 459.646710][ T8909] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 459.798324][ T9167] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1621'. [ 459.816496][ T8909] usb 4-1: Using ep0 maxpacket: 16 [ 459.833674][ T8909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.861799][ T8909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.887054][ T8909] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 459.921901][ T8909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.948281][ T8909] usb 4-1: config 0 descriptor?? [ 460.171694][ T9179] vivid-004: disconnect [ 460.187377][ T9178] vivid-004: reconnect [ 460.431880][ T8909] bigben 0003:146B:0902.0049: unexpected rdesc, please submit for review [ 460.448521][ T8909] bigben 0003:146B:0902.0049: item fetching failed at offset 3/5 [ 460.465500][ T8909] bigben 0003:146B:0902.0049: parse failed [ 460.473885][ T8909] bigben 0003:146B:0902.0049: probe with driver bigben failed with error -22 [ 460.628291][ T5298] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 460.707381][ T8909] usb 4-1: USB disconnect, device number 24 [ 460.808384][ T5298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.835753][ T5298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.863339][ T5298] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.896824][ T5298] usb 1-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 460.917927][ T5298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.967256][ T5298] usb 1-1: config 0 descriptor?? [ 461.108313][ T9217] netlink: 'syz.1.1643': attribute type 29 has an invalid length. [ 461.121172][ T9217] netlink: 'syz.1.1643': attribute type 29 has an invalid length. [ 461.244925][ T9223] openvswitch: netlink: Unknown key attributes 1 [ 461.468987][ T5298] wacom 0003:056A:0314.004A: unknown main item tag 0x0 [ 461.479259][ T5298] wacom 0003:056A:0314.004A: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 461.506908][ T5298] wacom 0003:056A:0314.004A: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.0-1/input0 [ 461.537808][ T5298] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0314.004A/input/input32 [ 461.607971][ T936] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 461.686286][ T5298] usb 1-1: USB disconnect, device number 22 [ 461.778285][ T936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.802803][ T936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.833514][ T936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.861145][ T936] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= e.00 [ 461.881308][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.904881][ T936] usb 2-1: config 0 descriptor?? [ 461.987519][ T9255] dlm: non-version read from control device 95 [ 462.312520][ T9270] IPv6: sit1: Disabled Multicast RS [ 462.329301][ T936] kye 0003:0458:0138.004B: item fetching failed at offset 2/5 [ 462.351824][ T936] kye 0003:0458:0138.004B: parse failed [ 462.369329][ T936] kye 0003:0458:0138.004B: probe with driver kye failed with error -22 [ 462.436840][ T5298] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 462.580149][ T5284] usb 2-1: USB disconnect, device number 31 [ 462.658299][ T5280] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 462.718151][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.731709][ T5298] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 462.770304][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.792259][ T5298] usb 5-1: config 0 descriptor?? [ 462.847337][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 462.863366][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.885013][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.895750][ T5280] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 462.895783][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.899139][ T5280] usb 4-1: config 0 descriptor?? [ 463.270175][ T5298] mcp2221 0003:04D8:00DD.004C: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 463.362594][ T5280] elecom 0003:056E:00E6.004D: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.3-1/input0 [ 463.494048][ T5298] usb 5-1: USB disconnect, device number 18 [ 463.592235][ T936] usb 4-1: USB disconnect, device number 25 [ 463.648591][ T5280] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 463.806429][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 463.825891][ T5280] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 463.842349][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.851374][ T5280] usb 3-1: Product: syz [ 463.855671][ T5280] usb 3-1: Manufacturer: syz [ 463.866695][ T5280] usb 3-1: SerialNumber: syz [ 463.881293][ T5280] usb 3-1: config 0 descriptor?? [ 463.908882][ T5280] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 464.306719][ T5284] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 464.341113][ T936] IPVS: starting estimator thread 0... [ 464.486517][ T9335] IPVS: using max 17 ests per chain, 40800 per kthread [ 464.530688][ T5284] usb 2-1: Using ep0 maxpacket: 16 [ 464.536260][ T5280] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 464.568655][ T5280] usb 3-1: USB disconnect, device number 29 [ 464.586128][ T5284] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 464.594317][ T5284] usb 2-1: config 0 has no interface number 0 [ 464.601573][ T5284] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.613192][ T5284] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 464.630498][ T5284] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 464.642040][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 464.651410][ T5284] usb 2-1: Product: syz [ 464.655656][ T5284] usb 2-1: SerialNumber: syz [ 464.663050][ T5284] usb 2-1: config 0 descriptor?? [ 464.688284][ T5284] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 464.695894][ T5284] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input35 [ 464.716566][ T936] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 464.846371][ T5298] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 464.868554][ T936] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 464.896320][ T936] usb 1-1: config 0 has no interface number 0 [ 464.902622][ T936] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.929252][ T936] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.941596][ T936] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 464.951868][ C0] cm109_urb_ctl_callback: 13 callbacks suppressed [ 464.951893][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 464.952617][ T8909] usb 2-1: USB disconnect, device number 32 [ 464.958427][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 464.984135][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.995032][ T936] usb 1-1: config 0 descriptor?? [ 465.008516][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.020788][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.033277][ T8909] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 465.051282][ T5298] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 465.062599][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.102251][ T5298] usb 5-1: config 0 descriptor?? [ 465.437182][ T936] uclogic 0003:5543:0522.004E: unknown main item tag 0x0 [ 465.454708][ T936] uclogic 0003:5543:0522.004E: unknown main item tag 0x0 [ 465.463437][ T936] uclogic 0003:5543:0522.004E: unknown main item tag 0x0 [ 465.476380][ T936] uclogic 0003:5543:0522.004E: unknown main item tag 0x0 [ 465.485713][ T936] uclogic 0003:5543:0522.004E: unknown main item tag 0x0 [ 465.501500][ T936] uclogic 0003:5543:0522.004E: No inputs registered, leaving [ 465.522156][ T936] uclogic 0003:5543:0522.004E: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.0-1/input2 [ 465.538489][ T5298] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 465.545547][ T5298] elecom 0003:056E:00FE.004F: unknown main item tag 0x6 [ 465.566879][ T5298] elecom 0003:056E:00FE.004F: unknown main item tag 0x5 [ 465.574033][ T5298] elecom 0003:056E:00FE.004F: unknown main item tag 0x4 [ 465.581820][ T5298] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 465.600426][ T5298] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 465.630870][ T5298] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 465.645814][ T5298] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 465.663660][ T5298] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 465.667501][ T9] usb 1-1: USB disconnect, device number 23 [ 465.670838][ T5298] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 465.712077][ T5298] elecom 0003:056E:00FE.004F: unknown global tag 0xd [ 465.739148][ T5298] elecom 0003:056E:00FE.004F: item 0 4 1 13 parsing failed [ 465.756768][ T5298] elecom 0003:056E:00FE.004F: probe with driver elecom failed with error -22 [ 465.775229][ T5298] usb 5-1: USB disconnect, device number 19 [ 465.894269][ T9358] vim2m vim2m.0: vidioc_s_fmt queue busy [ 466.169804][ T9366] netlink: 'syz.2.1709': attribute type 16 has an invalid length. [ 466.179526][ T9366] netlink: 'syz.2.1709': attribute type 3 has an invalid length. [ 466.189011][ T9366] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1709'. [ 466.266498][ T5298] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 466.322346][ T9370] tipc: Started in network mode [ 466.327821][ T9370] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 466.336977][ T9370] tipc: Enabling of bearer rejected, failed to enable media [ 466.436461][ T5298] usb 2-1: Using ep0 maxpacket: 8 [ 466.459003][ T5298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.482929][ T5298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.494743][ T5298] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 466.515188][ T5298] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 466.536303][ T5298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.557227][ T5298] usb 2-1: config 0 descriptor?? [ 466.706783][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 466.888320][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 466.896736][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 466.910762][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 466.945461][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 466.958258][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 466.978194][ T5298] sony 0003:054C:0268.0050: item fetching failed at offset 6/70 [ 466.979450][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 466.998864][ T5298] sony 0003:054C:0268.0050: parse failed [ 467.004764][ T5298] sony 0003:054C:0268.0050: probe with driver sony failed with error -22 [ 467.007848][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 467.023104][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 467.032994][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 467.046128][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 467.055258][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.078343][ T9] usb 3-1: config 0 descriptor?? [ 467.224152][ T5280] usb 2-1: USB disconnect, device number 33 [ 467.303197][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 467.540100][ T5280] usb 3-1: USB disconnect, device number 30 [ 467.556039][ T5280] usblp0: removed [ 467.673133][ T9421] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 468.166960][ T9441] binder: 9438:9441 ioctl 400c620e 20000040 returned -22 [ 468.296972][ T5284] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 468.489846][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.521793][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.544970][ T5284] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 468.572256][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.606696][ T5284] usb 4-1: config 0 descriptor?? [ 468.616610][ T9462] vim2m vim2m.0: vidioc_s_fmt queue busy [ 468.826283][ T5284] usbhid 4-1:0.0: can't add hid device: -71 [ 468.832454][ T5284] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 468.863948][ T5284] usb 4-1: USB disconnect, device number 26 [ 469.135061][ T5280] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 469.506246][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 469.513054][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.566291][ T5298] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 469.572355][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.596704][ T5280] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 469.605831][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.666274][ T5280] usb 5-1: config 0 descriptor?? [ 469.716270][ T5298] usb 3-1: Using ep0 maxpacket: 16 [ 469.730500][ T5298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.745085][ T5298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.775520][ T5298] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 469.843827][ T5298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.904241][ T5298] usb 3-1: config 0 descriptor?? [ 470.099394][ T5280] kye 0003:0458:5019.0051: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 470.126570][ T5280] kye 0003:0458:5019.0051: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 470.176482][ T5280] kye 0003:0458:5019.0051: tablet-enabling feature report not found [ 470.195624][ T5280] kye 0003:0458:5019.0051: tablet enabling failed [ 470.357067][ T936] usb 5-1: USB disconnect, device number 20 [ 470.392424][ T5298] megaworld 0003:07B5:0312.0052: item fetching failed at offset 2/5 [ 470.401239][ T5298] megaworld 0003:07B5:0312.0052: parse failed [ 470.407719][ T5298] megaworld 0003:07B5:0312.0052: probe with driver megaworld failed with error -22 [ 470.564139][ T5298] usb 3-1: USB disconnect, device number 31 [ 470.976555][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 471.156608][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 471.231858][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.243163][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.253022][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 471.266744][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 471.276761][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.280553][ T9567] sctp: [Deprecated]: syz.2.1800 (pid 9567) Use of int in max_burst socket option. [ 471.280553][ T9567] Use struct sctp_assoc_value instead [ 471.300106][ T8] usb 1-1: config 0 descriptor?? [ 471.396892][ T9570] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1802'. [ 471.556309][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 471.741456][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0053/input/input36 [ 471.753305][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 471.774711][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.786067][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.799464][ T9] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 471.813507][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.824375][ T5280] microsoft 0003:045E:07DA.0053: implement() called with too large value 1 (n: 0)! (kworker/0:5) [ 471.843653][ T9] usb 4-1: config 0 descriptor?? [ 471.922021][ T8] microsoft 0003:045E:07DA.0053: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 471.953913][ T8] usb 1-1: USB disconnect, device number 24 [ 472.026914][ T5284] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 472.186291][ T5284] usb 5-1: Using ep0 maxpacket: 8 [ 472.198417][ T5284] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 472.210051][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.229258][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.250189][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 472.284229][ T9] greenasia 0003:0E8F:0012.0054: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 472.303424][ T5284] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 472.315195][ T9] greenasia 0003:0E8F:0012.0054: no inputs found [ 472.326215][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.344244][ T5284] usb 5-1: config 0 descriptor?? [ 472.473053][ T5298] usb 4-1: USB disconnect, device number 27 [ 472.781615][ T5284] kye 0003:0458:5011.0055: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 472.814296][ T5284] kye 0003:0458:5011.0055: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 472.841697][ T5284] kye 0003:0458:5011.0055: tablet-enabling feature report not found [ 472.860111][ T5284] kye 0003:0458:5011.0055: tablet enabling failed [ 472.979771][ T5298] usb 5-1: USB disconnect, device number 21 [ 474.507674][ T9701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1858'. [ 475.097150][ T29] audit: type=1326 audit(1727412030.409:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 475.182554][ T29] audit: type=1326 audit(1727412030.409:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 475.257501][ T29] audit: type=1326 audit(1727412030.429:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=196 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 475.283699][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1875'. [ 475.336526][ T29] audit: type=1326 audit(1727412030.429:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 475.388690][ T29] audit: type=1326 audit(1727412030.429:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9729 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 475.548782][ T29] audit: type=1326 audit(1727412030.849:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 475.580281][ T9752] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 475.626397][ T8909] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 475.633936][ T29] audit: type=1326 audit(1727412030.849:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 475.689918][ T29] audit: type=1326 audit(1727412030.889:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 475.713379][ T29] audit: type=1326 audit(1727412030.889:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 475.738519][ T29] audit: type=1326 audit(1727412030.889:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.2.1883" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 475.773292][ T9759] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 475.836548][ T8909] usb 4-1: Using ep0 maxpacket: 16 [ 475.865249][ T8909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.887027][ T8909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.904467][ T8909] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 475.935044][ T8909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.948039][ T8909] usb 4-1: config 0 descriptor?? [ 476.364380][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 476.374241][ T9787] openvswitch: netlink: Actions may not be safe on all matching packets [ 476.392987][ T8909] corsair 0003:1B1C:1B02.0056: unbalanced collection at end of report description [ 476.403021][ T8909] corsair 0003:1B1C:1B02.0056: parse failed [ 476.413158][ T8909] corsair 0003:1B1C:1B02.0056: probe with driver corsair failed with error -22 [ 476.594746][ T8] usb 4-1: USB disconnect, device number 28 [ 476.630286][ T9799] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1904'. [ 476.837745][ T9807] bridge_slave_0: left allmulticast mode [ 476.860399][ T9807] bridge_slave_0: left promiscuous mode [ 476.868457][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.883276][ T9807] bridge_slave_1: left allmulticast mode [ 476.890754][ T9807] bridge_slave_1: left promiscuous mode [ 476.898665][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.917617][ T9807] bond0: (slave bond_slave_0): Releasing backup interface [ 476.963904][ T9807] bond0: (slave bond_slave_1): Releasing backup interface [ 477.065887][ T9807] team0: Port device team_slave_0 removed [ 477.086048][ T9807] team0: Port device team_slave_1 removed [ 477.094364][ T9807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.102527][ T9807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.112600][ T9807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.121296][ T9807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.153721][ T9812] netlink: 'syz.1.1905': attribute type 10 has an invalid length. [ 477.173900][ T9812] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1905'. [ 477.204419][ T9812] team0: entered promiscuous mode [ 477.217680][ T9812] bridge0: port 1(team0) entered blocking state [ 477.244510][ T9812] bridge0: port 1(team0) entered disabled state [ 477.252196][ T9812] team0: entered allmulticast mode [ 477.266716][ T9812] bridge0: port 1(team0) entered blocking state [ 477.273107][ T9812] bridge0: port 1(team0) entered forwarding state [ 477.355324][ T11] bridge0: port 1(team0) entered disabled state [ 477.378293][ T9820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1915'. [ 477.956303][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 478.115621][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 478.164019][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.175507][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.189985][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 478.199715][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.210090][ T9] usb 4-1: config 0 descriptor?? [ 478.652712][ T9] kovaplus 0003:1E7D:2D50.0057: unknown main item tag 0xe [ 478.673149][ T9] kovaplus 0003:1E7D:2D50.0057: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 478.902468][ T9] usb 4-1: USB disconnect, device number 29 [ 479.427081][ T9916] tipc: Enabled bearer , priority 10 [ 479.436334][ T936] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 479.641154][ T936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.665937][ T936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.697716][ T936] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 479.726235][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.750912][ T936] usb 2-1: config 0 descriptor?? [ 480.249032][ T936] magicmouse 0003:05AC:0269.0058: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 480.435918][ T9] usb 2-1: USB disconnect, device number 34 [ 480.467475][ T9948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1977'. [ 480.546538][ T936] tipc: Node number set to 4274061295 [ 481.436413][ T936] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 481.606333][ T936] usb 4-1: Using ep0 maxpacket: 8 [ 481.622998][ T936] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.666305][ T936] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.715528][ T936] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.740854][ T936] usb 4-1: config 0 interface 0 has no altsetting 0 [ 481.748058][ T936] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 481.763374][ T936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.787412][ T936] usb 4-1: config 0 descriptor?? [ 482.109279][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 482.220485][ T936] hid-steam 0003:28DE:1102.0059: unknown main item tag 0x0 [ 482.249535][ T936] hid-steam 0003:28DE:1102.0059: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 482.296361][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 482.341885][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.378819][ T936] hid-steam 0003:28DE:1102.0059: Steam Controller 'XXXXXXXXXX' connected [ 482.383944][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.389440][ T936] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0059/input/input38 [ 482.430630][ T936] hid-steam 0003:28DE:1102.005A: unknown main item tag 0x0 [ 482.441673][ T936] hid-steam 0003:28DE:1102.005A: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 482.468172][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 482.519150][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.526089][ T936] usb 4-1: USB disconnect, device number 30 [ 482.566262][ T9] usb 1-1: config 0 descriptor?? [ 482.613538][ T8883] udevd[8883]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 482.633467][ T936] hid-steam 0003:28DE:1102.0059: Steam Controller 'XXXXXXXXXX' disconnected [ 482.786755][T10017] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2010'. [ 482.795978][T10017] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2010'. [ 483.051113][ T9] savu 0003:1E7D:2D5A.005B: item fetching failed at offset 2/5 [ 483.059394][ T9] savu 0003:1E7D:2D5A.005B: parse failed [ 483.065145][ T9] savu 0003:1E7D:2D5A.005B: probe with driver savu failed with error -22 [ 483.106875][T10023] loop4: detected capacity change from 0 to 524287999 [ 483.122684][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 483.132115][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.153826][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 483.163078][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.184428][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 483.193742][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.206783][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 483.216048][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.226370][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 483.235864][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.259436][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 483.268726][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.278362][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 483.287683][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.295830][ T8909] usb 1-1: USB disconnect, device number 25 [ 483.309686][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 483.318952][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.332749][T10023] ldm_validate_partition_table(): Disk read failed. [ 483.345024][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 483.354302][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.365482][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 483.374764][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 483.390544][T10023] Dev loop4: unable to read RDB block 0 [ 483.400046][T10023] loop4: unable to read partition table [ 483.405958][T10023] loop_reread_partitions: partition scan of loop4 (3Ÿ Ύx³˜CΦ) failed (rc=-5) [ 484.092413][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2034'. [ 484.399217][T10086] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 484.417877][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 484.646361][ T5284] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 484.657539][T10100] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2048'. [ 484.686693][T10100] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 484.852960][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.871343][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.883219][T10111] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2052'. [ 484.892502][ T5284] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 484.902451][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.913869][ T5284] usb 3-1: config 0 descriptor?? [ 485.352552][ T5284] lg-g15 0003:046D:C222.005C: ignoring exceeding usage max [ 485.362595][ T5284] lg-g15 0003:046D:C222.005C: ignoring exceeding usage max [ 485.379510][ T5284] lg-g15 0003:046D:C222.005C: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 485.589258][ T8909] usb 3-1: USB disconnect, device number 32 [ 486.398159][T10150] netlink: 'syz.3.2069': attribute type 29 has an invalid length. [ 486.454414][T10150] netlink: 'syz.3.2069': attribute type 29 has an invalid length. [ 486.701845][T10156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2073'. [ 486.716380][ T936] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 486.918398][ T936] usb 3-1: Using ep0 maxpacket: 8 [ 486.952331][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 487.035972][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.101854][ T936] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 487.161926][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.217299][ T936] usb 3-1: config 0 descriptor?? [ 487.747215][ T936] hid-alps 0003:044E:1215.005D: hidraw0: USB HID v40.00 Device [HID 044e:1215] on usb-dummy_hcd.2-1/input0 [ 487.930105][ T936] usb 3-1: USB disconnect, device number 33 [ 488.526350][ T936] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 488.721260][ T936] usb 5-1: Using ep0 maxpacket: 16 [ 488.767511][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.824122][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.879665][ T936] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 488.919535][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.987926][ T936] usb 5-1: config 0 descriptor?? [ 488.993823][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 489.062695][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 489.694186][ T936] razer 0003:1532:011B.005E: failed to enable macro keys: -71 [ 489.766856][ T936] razer 0003:1532:011B.005E: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.4-1/input0 [ 489.826557][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2101'. [ 489.876818][ T936] usb 5-1: USB disconnect, device number 22 [ 490.656371][ T936] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 490.857782][ T936] usb 4-1: Using ep0 maxpacket: 16 [ 490.865468][ T936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.865509][ T936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.865548][ T936] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 490.865576][ T936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.875278][ T936] usb 4-1: config 0 descriptor?? [ 491.335875][ T936] hid-led 0003:1294:1320.005F: unbalanced delimiter at end of report description [ 491.386925][ T936] hid-led 0003:1294:1320.005F: probe with driver hid-led failed with error -22 [ 491.550805][ T936] usb 4-1: USB disconnect, device number 31 [ 491.691535][T10248] usb usb6: usbfs: process 10248 (syz.1.2116) did not claim interface 0 before use [ 492.252693][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 492.975669][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 493.876155][ C0] sched: DL replenish lagged too much [ 494.886408][ T936] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 495.048284][ T936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.064523][ T936] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 495.082078][ T936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.093065][ T936] usb 4-1: config 0 descriptor?? [ 495.117125][ T936] pwc: Askey VC010 type 2 USB webcam detected. [ 495.766520][ T936] pwc: recv_control_msg error -71 req 02 val 2700 [ 495.794339][ T936] pwc: recv_control_msg error -71 req 02 val 2c00 [ 495.803858][ T936] pwc: recv_control_msg error -71 req 04 val 1000 [ 495.820582][ T936] pwc: recv_control_msg error -71 req 04 val 1300 [ 495.833595][ T936] pwc: recv_control_msg error -71 req 04 val 1400 [ 495.843507][ T936] pwc: recv_control_msg error -71 req 02 val 2000 [ 495.855598][ T936] pwc: recv_control_msg error -71 req 02 val 2100 [ 495.865386][ T936] pwc: recv_control_msg error -71 req 04 val 1500 [ 495.876726][ T936] pwc: recv_control_msg error -71 req 02 val 2500 [ 495.890691][ T936] pwc: recv_control_msg error -71 req 02 val 2400 [ 495.901794][ T936] pwc: recv_control_msg error -71 req 02 val 2600 [ 495.911737][ T936] pwc: recv_control_msg error -71 req 02 val 2900 [ 495.921391][ T936] pwc: recv_control_msg error -71 req 02 val 2800 [ 495.934878][ T936] pwc: recv_control_msg error -71 req 04 val 1100 [ 495.942740][ T936] pwc: recv_control_msg error -71 req 04 val 1200 [ 495.966532][ T936] pwc: Registered as video71. [ 495.984801][ T936] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 496.045754][ T936] usb 4-1: USB disconnect, device number 32 [ 501.601588][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 501.614622][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 501.623277][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 501.631978][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 501.641391][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 501.656436][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 501.736867][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.743220][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.529192][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 502.538551][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 502.548590][ T5231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 502.557904][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 502.568384][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 502.578974][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 503.033798][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 503.042930][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 503.052052][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 503.066034][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 503.079629][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 503.093610][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 503.706375][ T54] Bluetooth: hci4: command tx timeout [ 504.528995][ T5231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 504.545284][ T5231] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 504.555326][ T5231] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 504.566723][ T5231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 504.574379][ T5231] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 504.582027][ T5231] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 504.666531][ T5231] Bluetooth: hci6: command tx timeout [ 505.146439][ T5231] Bluetooth: hci7: command tx timeout [ 505.786357][ T5231] Bluetooth: hci4: command tx timeout [ 506.666535][ T5231] Bluetooth: hci8: command tx timeout [ 506.746437][ T5231] Bluetooth: hci6: command tx timeout [ 507.226566][ T5231] Bluetooth: hci7: command tx timeout [ 507.536581][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 507.555077][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 507.563270][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 507.571748][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 507.579713][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 507.593844][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 507.866430][ T54] Bluetooth: hci4: command tx timeout [ 508.747664][ T54] Bluetooth: hci8: command tx timeout [ 508.826464][ T54] Bluetooth: hci6: command tx timeout [ 509.306407][ T54] Bluetooth: hci7: command tx timeout [ 509.626450][ T54] Bluetooth: hci9: command tx timeout [ 509.946430][ T54] Bluetooth: hci4: command tx timeout [ 510.826474][ T54] Bluetooth: hci8: command tx timeout [ 510.906368][ T54] Bluetooth: hci6: command tx timeout [ 511.386404][ T54] Bluetooth: hci7: command tx timeout [ 511.706395][ T54] Bluetooth: hci9: command tx timeout [ 512.906469][ T54] Bluetooth: hci8: command tx timeout [ 513.786399][ T54] Bluetooth: hci9: command tx timeout [ 515.866472][ T54] Bluetooth: hci9: command tx timeout [ 529.392710][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 554.994610][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 560.113703][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 562.117763][ T5231] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 562.132957][ T5231] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 562.141235][ T5231] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 562.152144][ T5231] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 562.160126][ T5231] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 562.172128][ T5231] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 563.165478][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.173409][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.356523][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 563.368161][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 563.382305][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 563.403019][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 563.411011][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 563.419274][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 563.465581][ T5231] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 563.478707][ T5231] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 563.494955][ T5231] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 563.514109][ T5231] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 563.522933][ T5231] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 563.536971][ T5231] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 564.266498][ T54] Bluetooth: hci10: command tx timeout [ 565.043761][ T5231] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 565.060381][ T5231] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 565.070364][ T5231] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 565.086901][ T5231] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 565.094811][ T5231] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 565.104680][ T5231] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 565.468270][ T5237] Bluetooth: hci11: command tx timeout [ 565.636571][ T5237] Bluetooth: hci12: command tx timeout [ 566.346511][ T5237] Bluetooth: hci10: command tx timeout [ 567.151961][ T5237] Bluetooth: hci13: command tx timeout [ 567.541685][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 567.550638][ T5231] Bluetooth: hci11: command tx timeout [ 567.558749][ T5231] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 567.567771][ T5231] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 567.575832][ T5231] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 567.583920][ T5231] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 567.596660][ T5231] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 567.709056][ T5231] Bluetooth: hci12: command tx timeout [ 568.426500][ T5237] Bluetooth: hci10: command tx timeout [ 569.226364][ T5237] Bluetooth: hci13: command tx timeout [ 569.626435][ T54] Bluetooth: hci11: command tx timeout [ 569.633203][ T5237] Bluetooth: hci14: command tx timeout [ 569.786706][ T5237] Bluetooth: hci12: command tx timeout [ 570.346600][ T5237] Bluetooth: hci0: command 0x0406 tx timeout [ 570.506410][ T5231] Bluetooth: hci10: command tx timeout [ 571.306487][ T5231] Bluetooth: hci13: command tx timeout [ 571.706344][ T5237] Bluetooth: hci11: command tx timeout [ 571.712709][ T5231] Bluetooth: hci14: command tx timeout [ 571.866525][ T5231] Bluetooth: hci12: command tx timeout [ 573.389531][ T5231] Bluetooth: hci13: command tx timeout [ 573.792351][ T5237] Bluetooth: hci14: command tx timeout [ 575.866273][ T5237] Bluetooth: hci14: command tx timeout [ 624.588628][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.595153][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.615161][T10348] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 625.629104][T10348] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 625.637878][T10348] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 625.646717][T10348] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 625.654499][T10348] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 625.666302][T10348] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 626.457113][T10345] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 626.468104][T10345] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 626.476262][T10345] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 626.485057][T10345] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 626.492977][T10345] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 626.508015][T10345] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 626.546810][T10348] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 626.556876][T10348] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 626.564983][T10348] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 626.573601][T10348] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 626.583593][T10348] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 626.593174][T10348] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 626.669488][T10348] Bluetooth: hci7: command 0x0406 tx timeout [ 626.835573][ T5231] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 626.843434][T10348] Bluetooth: hci4: command 0x0406 tx timeout [ 626.849600][T10345] Bluetooth: hci6: command 0x0406 tx timeout [ 626.868297][ T5231] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 626.877033][ T5231] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 626.886597][ T5231] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 626.894649][ T5231] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 626.905133][ T5231] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 627.609896][ T5231] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 627.626127][ T5231] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 627.635852][ T5231] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 627.644492][ T5231] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 627.652769][ T5231] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 627.660386][ T5231] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 627.723296][ T5231] Bluetooth: hci15: command tx timeout [ 628.586489][ T5231] Bluetooth: hci16: command tx timeout [ 628.666442][ T5231] Bluetooth: hci17: command tx timeout [ 628.986453][ T5231] Bluetooth: hci18: command tx timeout [ 629.716403][T10348] Bluetooth: hci19: command tx timeout [ 629.786390][T10348] Bluetooth: hci15: command tx timeout [ 630.666280][T10348] Bluetooth: hci16: command tx timeout [ 630.762411][T10348] Bluetooth: hci17: command tx timeout [ 631.067049][T10348] Bluetooth: hci18: command tx timeout [ 631.806192][T10345] Bluetooth: hci9: command 0x0406 tx timeout [ 631.812555][T10345] Bluetooth: hci19: command tx timeout [ 631.818315][T10348] Bluetooth: hci8: command 0x0406 tx timeout [ 631.869491][ T5237] Bluetooth: hci15: command tx timeout [ 632.760107][ T5231] Bluetooth: hci16: command tx timeout [ 632.826311][ T5231] Bluetooth: hci17: command tx timeout [ 633.156604][ T5231] Bluetooth: hci18: command tx timeout [ 633.868382][ T5231] Bluetooth: hci19: command tx timeout [ 633.946475][ T5231] Bluetooth: hci15: command tx timeout [ 634.826238][ T5231] Bluetooth: hci16: command tx timeout [ 634.906247][ T5231] Bluetooth: hci17: command tx timeout [ 635.226504][ T5231] Bluetooth: hci18: command tx timeout [ 635.951955][ T5231] Bluetooth: hci19: command tx timeout [ 654.026448][ T30] INFO: task syz.0.2113:10238 blocked for more than 143 seconds. [ 654.034250][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 654.076245][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 654.124560][ T30] task:syz.0.2113 state:D stack:25888 pid:10238 tgid:10238 ppid:8892 flags:0x20004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 654.215641][ T30] Call Trace: [ 654.236131][ T30] [ 654.239140][ T30] __schedule+0x1895/0x4b30 [ 654.243735][ T30] ? __pfx___schedule+0x10/0x10 [ 654.336139][ T30] ? __pfx_lock_release+0x10/0x10 [ 654.341279][ T30] ? schedule+0x90/0x320 [ 654.345595][ T30] schedule+0x14b/0x320 [ 654.421988][ T30] schedule_timeout+0xb0/0x310 [ 654.432441][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 654.466179][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 654.472274][ T30] ? wait_for_completion+0x2fe/0x620 [ 654.542199][ T30] ? wait_for_completion+0x2fe/0x620 [ 654.556632][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 654.561931][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 654.625824][ T30] ? wait_for_completion+0x2fe/0x620 [ 654.641248][ T30] wait_for_completion+0x355/0x620 [ 654.666477][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 654.672310][ T30] ? __flush_work+0xe7/0xc50 [ 654.706136][ T30] __flush_work+0xa37/0xc50 [ 654.710743][ T30] ? __flush_work+0xe7/0xc50 [ 654.715391][ T30] ? __pfx___flush_work+0x10/0x10 [ 654.786353][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 654.791745][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 654.830513][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 654.835730][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 654.881938][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 654.906262][ T30] ? __asan_memset+0x23/0x50 [ 654.910948][ T30] ? skb_queue_purge_reason+0x2de/0x500 [ 654.946460][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 654.953318][ T30] ? __asan_memset+0x23/0x50 [ 654.986687][ T30] ? skb_queue_purge_reason+0x2de/0x500 [ 654.992344][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 655.027686][ T30] unregister_netdevice_queue+0x303/0x370 [ 655.033543][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 655.084851][ T30] __tun_detach+0x6b9/0x1600 [ 655.102077][ T30] tun_chr_close+0x105/0x1b0 [ 655.108005][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 655.113182][ T30] __fput+0x23f/0x880 [ 655.133661][ T30] task_work_run+0x24f/0x310 [ 655.144676][ T30] ? __pfx_task_work_run+0x10/0x10 [ 655.162147][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 655.183571][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 655.202944][ T30] __do_fast_syscall_32+0xc4/0x110 [ 655.216230][ T30] ? exc_page_fault+0x590/0x8c0 [ 655.221175][ T30] do_fast_syscall_32+0x34/0x80 [ 655.250991][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 655.264372][ T30] RIP: 0023:0xf7f63579 [ 655.280465][ T30] RSP: 002b:00000000f754fb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 655.305511][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 655.332442][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.352698][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 655.372665][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 655.394148][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 655.421024][ T30] [ 655.426159][ T30] INFO: task syz.4.2118:10251 blocked for more than 144 seconds. [ 655.433940][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 655.464355][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 655.492683][ T30] task:syz.4.2118 state:D stack:26432 pid:10251 tgid:10250 ppid:8765 flags:0x20000004 [ 655.523671][ T30] Call Trace: [ 655.536125][ T30] [ 655.539145][ T30] __schedule+0x1895/0x4b30 [ 655.543722][ T30] ? __pfx___schedule+0x10/0x10 [ 655.566238][ T30] ? __pfx_lock_release+0x10/0x10 [ 655.571358][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 655.602057][ T30] ? schedule+0x90/0x320 [ 655.610217][ T30] schedule+0x14b/0x320 [ 655.614536][ T30] schedule_preempt_disabled+0x13/0x30 [ 655.634911][ T30] __mutex_lock+0x6a7/0xd70 [ 655.656470][ T30] ? __mutex_lock+0x52a/0xd70 [ 655.661226][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 655.676649][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 655.696907][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 655.701935][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 655.744481][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 655.750314][ T30] ? ref_tracker_free+0x643/0x7e0 [ 655.755407][ T30] netlink_rcv_skb+0x1e3/0x430 [ 655.769907][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 655.775447][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.787167][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 655.792450][ T30] netlink_unicast+0x7f6/0x990 [ 655.808067][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 655.813469][ T30] ? __virt_addr_valid+0x183/0x530 [ 655.824981][ T30] ? __check_object_size+0x48e/0x900 [ 655.830693][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 655.835534][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.846115][ T30] ? __pfx_lock_release+0x10/0x10 [ 655.851211][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 655.863265][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.871261][ T30] __sock_sendmsg+0x221/0x270 [ 655.876009][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 655.884012][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.894012][ T30] __sys_sendmmsg+0x4a8/0x730 [ 655.900644][ T30] ? __pfx___sys_sendmmsg+0x10/0x10 [ 655.906911][ T30] ? futex_unqueue+0xcb/0xf0 [ 655.911555][ T30] ? __futex_wait+0x287/0x320 [ 655.924577][ T30] ? __pfx___futex_wait+0x10/0x10 [ 655.929963][ T30] ? get_futex_key+0xaeb/0x1050 [ 655.934869][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 655.946639][ T30] ? __lock_acquire+0x1384/0x2050 [ 655.951757][ T30] ? __pfx_futex_wait+0x10/0x10 [ 655.962557][ T30] ? __pfx_do_futex+0x10/0x10 [ 655.970139][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 655.982497][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 655.991829][ T30] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 656.002541][ T30] __do_fast_syscall_32+0xb4/0x110 [ 656.009385][ T30] ? exc_page_fault+0x590/0x8c0 [ 656.014352][ T30] do_fast_syscall_32+0x34/0x80 [ 656.025208][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 656.033879][ T30] RIP: 0023:0xf741d579 [ 656.044994][ T30] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 656.055069][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 656.068411][ T30] RDX: 0000000092492627 RSI: 0000000000000000 RDI: 0000000000000000 [ 656.080759][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 656.092905][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 656.106441][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 656.114556][ T30] [ 656.124699][ T30] INFO: task syz.1.2124:10263 blocked for more than 145 seconds. [ 656.134319][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 656.147265][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.155988][ T30] task:syz.1.2124 state:D stack:25696 pid:10263 tgid:10261 ppid:7675 flags:0x20000004 [ 656.172845][ T30] Call Trace: [ 656.182445][ T30] [ 656.185546][ T30] __schedule+0x1895/0x4b30 [ 656.193896][ T30] ? __pfx___schedule+0x10/0x10 [ 656.203698][ T30] ? __pfx_lock_release+0x10/0x10 [ 656.210948][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 656.221357][ T30] ? schedule+0x90/0x320 [ 656.225661][ T30] schedule+0x14b/0x320 [ 656.233128][ T30] schedule_preempt_disabled+0x13/0x30 [ 656.243505][ T30] __mutex_lock+0x6a7/0xd70 [ 656.249960][ T30] ? netdev_get_by_name+0x7c/0xb0 [ 656.255042][ T30] ? __mutex_lock+0x52a/0xd70 [ 656.265020][ T30] ? ethnl_default_set_doit+0x394/0x910 [ 656.273079][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 656.285634][ T30] ? ethnl_set_coalesce_validate+0x211/0x340 [ 656.294496][ T30] ethnl_default_set_doit+0x394/0x910 [ 656.305174][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 656.312742][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 656.324948][ T30] genl_rcv_msg+0xb14/0xec0 [ 656.331049][ T30] ? mark_lock+0x9a/0x360 [ 656.335456][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.346910][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 656.352023][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 656.373231][ T30] ? __pfx___might_resched+0x10/0x10 [ 656.378981][ T30] netlink_rcv_skb+0x1e3/0x430 [ 656.383896][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.395462][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.403802][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 656.414533][ T30] genl_rcv+0x28/0x40 [ 656.420747][ T30] netlink_unicast+0x7f6/0x990 [ 656.425605][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 656.436543][ T30] ? __virt_addr_valid+0x183/0x530 [ 656.441720][ T30] ? __check_object_size+0x48e/0x900 [ 656.452744][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 656.460035][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.465408][ T30] ? __pfx_lock_release+0x10/0x10 [ 656.476950][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 656.481953][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.490379][ T30] __sock_sendmsg+0x221/0x270 [ 656.495126][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 656.505080][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.512108][ T30] __sys_sendmsg+0x292/0x380 [ 656.523206][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 656.530925][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 656.541658][ T30] ? call_rcu+0x731/0xa70 [ 656.546377][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 656.553029][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 656.564558][ T30] __do_fast_syscall_32+0xb4/0x110 [ 656.570064][ T30] ? exc_page_fault+0x590/0x8c0 [ 656.574974][ T30] do_fast_syscall_32+0x34/0x80 [ 656.586345][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 656.592758][ T30] RIP: 0023:0xf73fd579 [ 656.603777][ T30] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 656.612654][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000540 [ 656.627028][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 656.635121][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 656.650564][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 656.661414][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 656.673385][ T30] [ 656.679317][ T30] INFO: task syz.2.2133:10283 blocked for more than 146 seconds. [ 656.690834][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 656.704319][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.717610][ T30] task:syz.2.2133 state:D stack:26816 pid:10283 tgid:10282 ppid:8545 flags:0x20000004 [ 656.732601][ T30] Call Trace: [ 656.735934][ T30] [ 656.741840][ T30] __schedule+0x1895/0x4b30 [ 656.750344][ T30] ? __pfx___schedule+0x10/0x10 [ 656.755262][ T30] ? __pfx_lock_release+0x10/0x10 [ 656.764840][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 656.774320][ T30] ? schedule+0x90/0x320 [ 656.781232][ T30] schedule+0x14b/0x320 [ 656.785447][ T30] schedule_preempt_disabled+0x13/0x30 [ 656.794944][ T30] __mutex_lock+0x6a7/0xd70 [ 656.802039][ T30] ? __mutex_lock+0x52a/0xd70 [ 656.811729][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 656.822125][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 656.835036][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 656.842698][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 656.851761][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 656.859856][ T30] ? ref_tracker_free+0x643/0x7e0 [ 656.864952][ T30] netlink_rcv_skb+0x1e3/0x430 [ 656.875029][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 656.883293][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.892535][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.900536][ T30] netlink_unicast+0x7f6/0x990 [ 656.905383][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 656.916129][ T30] ? __virt_addr_valid+0x183/0x530 [ 656.921400][ T30] ? __check_object_size+0x48e/0x900 [ 656.935405][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 656.940623][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.945973][ T30] ? __pfx_lock_release+0x10/0x10 [ 656.957771][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 656.962784][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.972267][ T30] __sock_sendmsg+0x221/0x270 [ 656.979634][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 656.984482][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.995100][ T30] __sys_sendmsg+0x292/0x380 [ 657.002424][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 657.012650][ T30] ? fput+0x1a8/0x230 [ 657.019417][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 657.026424][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 657.031720][ T30] __do_fast_syscall_32+0xb4/0x110 [ 657.044341][ T30] ? exc_page_fault+0x590/0x8c0 [ 657.051040][ T30] do_fast_syscall_32+0x34/0x80 [ 657.055947][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 657.068621][ T30] RIP: 0023:0xf7fe2579 [ 657.072746][ T30] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 657.085739][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 657.096539][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 657.104569][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 657.120326][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 657.129916][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 657.143747][ T30] [ 657.150313][ T30] INFO: task syz.3.2140:10299 blocked for more than 146 seconds. [ 657.162753][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 657.173098][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 657.186573][ T30] task:syz.3.2140 state:D stack:25696 pid:10299 tgid:10298 ppid:8750 flags:0x20000004 [ 657.202216][ T30] Call Trace: [ 657.205553][ T30] [ 657.215148][ T30] __schedule+0x1895/0x4b30 [ 657.227952][ T30] ? __pfx___schedule+0x10/0x10 [ 657.232882][ T30] ? __pfx_lock_release+0x10/0x10 [ 657.246320][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 657.252037][ T30] ? schedule+0x90/0x320 [ 657.262023][ T30] schedule+0x14b/0x320 [ 657.267794][ T30] schedule_preempt_disabled+0x13/0x30 [ 657.273337][ T30] __mutex_lock+0x6a7/0xd70 [ 657.284539][ T30] ? __mutex_lock+0x52a/0xd70 [ 657.290788][ T30] ? nl80211_dump_wiphy+0x50/0x790 [ 657.295955][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 657.306543][ T30] ? trace_kmalloc+0x1f/0xd0 [ 657.311208][ T30] ? __build_skb_around+0x245/0x3d0 [ 657.323549][ T30] nl80211_dump_wiphy+0x50/0x790 [ 657.328883][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 657.333897][ T30] genl_dumpit+0x107/0x1a0 [ 657.345919][ T30] netlink_dump+0x647/0xd80 [ 657.351604][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 657.362919][ T30] ? __asan_memset+0x23/0x50 [ 657.368348][ T30] ? genl_start+0x4a8/0x6d0 [ 657.372951][ T30] __netlink_dump_start+0x5a2/0x790 [ 657.384551][ T30] genl_rcv_msg+0x88c/0xec0 [ 657.397662][ T30] ? mark_lock+0x9a/0x360 [ 657.402063][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 657.415983][ T30] ? __pfx_genl_start+0x10/0x10 [ 657.422517][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 657.433750][ T30] ? __pfx_genl_done+0x10/0x10 [ 657.439064][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 657.444784][ T30] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 657.456612][ T30] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 657.462668][ T30] ? __pfx___might_resched+0x10/0x10 [ 657.482253][ T30] netlink_rcv_skb+0x1e3/0x430 [ 657.491005][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 657.496420][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.501786][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 657.513842][ T30] genl_rcv+0x28/0x40 [ 657.517937][ T30] netlink_unicast+0x7f6/0x990 [ 657.526300][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 657.531672][ T30] ? __virt_addr_valid+0x183/0x530 [ 657.543680][ T30] ? __check_object_size+0x48e/0x900 [ 657.552263][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 657.563252][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.568983][ T30] ? __pfx_lock_release+0x10/0x10 [ 657.574073][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 657.586210][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.591575][ T30] __sock_sendmsg+0x221/0x270 [ 657.602875][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 657.608098][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.613461][ T30] __sys_sendmsg+0x292/0x380 [ 657.624441][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 657.633657][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 657.643631][ T30] ? call_rcu+0x731/0xa70 [ 657.651355][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 657.661929][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 657.669964][ T30] __do_fast_syscall_32+0xb4/0x110 [ 657.675133][ T30] ? exc_page_fault+0x590/0x8c0 [ 657.684018][ T30] do_fast_syscall_32+0x34/0x80 [ 657.693094][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 657.703691][ T30] RIP: 0023:0xf7fc6579 [ 657.710997][ T30] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 657.723748][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 657.735667][ T30] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 657.750380][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 657.761094][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 657.772868][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 657.783603][ T30] [ 657.790494][ T30] INFO: task syz-executor:10304 blocked for more than 147 seconds. [ 657.802344][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 657.813569][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 657.825575][ T30] task:syz-executor state:D stack:26816 pid:10304 tgid:10304 ppid:1 flags:0x20004006 [ 657.841048][ T30] Call Trace: [ 657.844377][ T30] [ 657.850171][ T30] __schedule+0x1895/0x4b30 [ 657.855463][ T30] ? __pfx___schedule+0x10/0x10 [ 657.866775][ T30] ? __pfx_lock_release+0x10/0x10 [ 657.876400][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 657.881933][ T30] ? schedule+0x90/0x320 [ 657.891648][ T30] schedule+0x14b/0x320 [ 657.895869][ T30] schedule_preempt_disabled+0x13/0x30 [ 657.901881][ T30] __mutex_lock+0x6a7/0xd70 [ 657.912273][ T30] ? __mutex_lock+0x52a/0xd70 [ 657.918737][ T30] ? register_nexthop_notifier+0x84/0x290 [ 657.924509][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 657.940196][ T30] ? __asan_memset+0x23/0x50 [ 657.944874][ T30] register_nexthop_notifier+0x84/0x290 [ 657.959775][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 657.965668][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 657.976287][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 657.982527][ T30] ? __asan_memset+0x23/0x50 [ 657.992317][ T30] ops_init+0x31e/0x590 [ 657.998054][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 658.003499][ T30] setup_net+0x287/0x9e0 [ 658.013080][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 658.020177][ T30] ? __pfx_setup_net+0x10/0x10 [ 658.025037][ T30] copy_net_ns+0x33f/0x570 [ 658.035879][ T30] create_new_namespaces+0x425/0x7b0 [ 658.045996][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 658.052117][ T30] ksys_unshare+0x619/0xc10 [ 658.063586][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 658.069060][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 658.075123][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 658.086568][ T30] __ia32_sys_unshare+0x37/0x40 [ 658.091495][ T30] __do_fast_syscall_32+0xb4/0x110 [ 658.103435][ T30] ? exc_page_fault+0x590/0x8c0 [ 658.109107][ T30] do_fast_syscall_32+0x34/0x80 [ 658.114021][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 658.126545][ T30] RIP: 0023:0xf746d579 [ 658.130669][ T30] RSP: 002b:00000000f75bff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 658.146139][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 658.154171][ T30] RDX: 00000000f745bff4 RSI: 00000000f733215e RDI: 0000000030000000 [ 658.170043][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 658.180842][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 658.193740][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 658.206122][ T30] [ 658.209681][ T30] INFO: task syz-executor:10307 blocked for more than 147 seconds. [ 658.223033][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 658.232287][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 658.246500][ T30] task:syz-executor state:D stack:26704 pid:10307 tgid:10307 ppid:1 flags:0x20004004 [ 658.264061][ T30] Call Trace: [ 658.269503][ T30] [ 658.272492][ T30] __schedule+0x1895/0x4b30 [ 658.283525][ T30] ? __pfx___schedule+0x10/0x10 [ 658.288852][ T30] ? __pfx_lock_release+0x10/0x10 [ 658.293947][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 658.305806][ T30] ? schedule+0x90/0x320 [ 658.310535][ T30] schedule+0x14b/0x320 [ 658.314752][ T30] schedule_preempt_disabled+0x13/0x30 [ 658.326238][ T30] __mutex_lock+0x6a7/0xd70 [ 658.330804][ T30] ? __mutex_lock+0x52a/0xd70 [ 658.335514][ T30] ? register_nexthop_notifier+0x84/0x290 [ 658.348406][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 658.353652][ T30] ? __asan_memset+0x23/0x50 [ 658.363990][ T30] register_nexthop_notifier+0x84/0x290 [ 658.372337][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 658.384301][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 658.393391][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 658.403377][ T30] ? __asan_memset+0x23/0x50 [ 658.410881][ T30] ops_init+0x31e/0x590 [ 658.415114][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 658.424470][ T30] setup_net+0x287/0x9e0 [ 658.438860][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 658.452613][ T30] ? __pfx_setup_net+0x10/0x10 [ 658.460291][ T30] copy_net_ns+0x33f/0x570 [ 658.464783][ T30] create_new_namespaces+0x425/0x7b0 [ 658.476350][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 658.482236][ T30] ksys_unshare+0x619/0xc10 [ 658.493516][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 658.500211][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 658.515478][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 658.522544][ T30] __ia32_sys_unshare+0x37/0x40 [ 658.533784][ T30] __do_fast_syscall_32+0xb4/0x110 [ 658.539314][ T30] ? exc_page_fault+0x590/0x8c0 [ 658.544237][ T30] do_fast_syscall_32+0x34/0x80 [ 658.556152][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 658.562556][ T30] RIP: 0023:0xf7fc7579 [ 658.574965][ T30] RSP: 002b:00000000f75aff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 658.583894][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 658.596128][ T30] RDX: 00000000f744bff4 RSI: 00000000f732215e RDI: 0000000030000000 [ 658.604473][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 658.620896][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 658.631607][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 658.643420][ T30] [ 658.650583][ T30] INFO: task syz-executor:10310 blocked for more than 147 seconds. [ 658.662575][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 658.681251][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 658.692684][ T30] task:syz-executor state:D stack:26488 pid:10310 tgid:10310 ppid:1 flags:0x20004004 [ 658.706112][ T30] Call Trace: [ 658.709457][ T30] [ 658.712432][ T30] __schedule+0x1895/0x4b30 [ 658.723709][ T30] ? __pfx___schedule+0x10/0x10 [ 658.729002][ T30] ? __pfx_lock_release+0x10/0x10 [ 658.734090][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 658.747603][ T30] ? schedule+0x90/0x320 [ 658.753197][ T30] schedule+0x14b/0x320 [ 658.763641][ T30] schedule_preempt_disabled+0x13/0x30 [ 658.769618][ T30] __mutex_lock+0x6a7/0xd70 [ 658.774913][ T30] ? __mutex_lock+0x52a/0xd70 [ 658.785820][ T30] ? register_nexthop_notifier+0x84/0x290 [ 658.792007][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 658.805016][ T30] ? __asan_memset+0x23/0x50 [ 658.810106][ T30] register_nexthop_notifier+0x84/0x290 [ 658.815717][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 658.826129][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 658.832445][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 658.847997][ T30] ? __asan_memset+0x23/0x50 [ 658.854002][ T30] ops_init+0x31e/0x590 [ 658.863635][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 658.871935][ T30] setup_net+0x287/0x9e0 [ 658.880904][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 658.889271][ T30] ? __pfx_setup_net+0x10/0x10 [ 658.894124][ T30] copy_net_ns+0x33f/0x570 [ 658.902946][ T30] create_new_namespaces+0x425/0x7b0 [ 658.914482][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 658.924164][ T30] ksys_unshare+0x619/0xc10 [ 658.931413][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 658.940357][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 658.949574][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 658.961274][ T30] __ia32_sys_unshare+0x37/0x40 [ 658.970380][ T30] __do_fast_syscall_32+0xb4/0x110 [ 658.976578][ T30] ? exc_page_fault+0x590/0x8c0 [ 658.981501][ T30] do_fast_syscall_32+0x34/0x80 [ 658.995154][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 659.001934][ T30] RIP: 0023:0xf7f84579 [ 659.006050][ T30] RSP: 002b:00000000f756ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 659.022920][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 659.036379][ T30] RDX: 00000000f740bff4 RSI: 00000000f72e215e RDI: 0000000030000000 [ 659.044413][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.059839][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 659.077439][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.085490][ T30] [ 659.095057][ T30] INFO: task syz-executor:10313 blocked for more than 148 seconds. [ 659.103380][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 659.117086][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 659.125810][ T30] task:syz-executor state:D stack:26816 pid:10313 tgid:10313 ppid:1 flags:0x20004004 [ 659.143965][ T30] Call Trace: [ 659.148504][ T30] [ 659.151485][ T30] __schedule+0x1895/0x4b30 [ 659.156535][ T30] ? __pfx___schedule+0x10/0x10 [ 659.162714][ T30] ? __pfx_lock_release+0x10/0x10 [ 659.174032][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 659.180157][ T30] ? schedule+0x90/0x320 [ 659.184707][ T30] schedule+0x14b/0x320 [ 659.196018][ T30] schedule_preempt_disabled+0x13/0x30 [ 659.201694][ T30] __mutex_lock+0x6a7/0xd70 [ 659.213902][ T30] ? __mutex_lock+0x52a/0xd70 [ 659.219078][ T30] ? register_nexthop_notifier+0x84/0x290 [ 659.224865][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 659.237686][ T30] ? __asan_memset+0x23/0x50 [ 659.242361][ T30] register_nexthop_notifier+0x84/0x290 [ 659.254132][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 659.263916][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 659.274227][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 659.283307][ T30] ? __asan_memset+0x23/0x50 [ 659.292909][ T30] ops_init+0x31e/0x590 [ 659.299869][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 659.305318][ T30] setup_net+0x287/0x9e0 [ 659.315494][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 659.325971][ T30] ? __pfx_setup_net+0x10/0x10 [ 659.334840][ T30] copy_net_ns+0x33f/0x570 [ 659.341919][ T30] create_new_namespaces+0x425/0x7b0 [ 659.351366][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 659.359747][ T30] ksys_unshare+0x619/0xc10 [ 659.365659][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 659.376351][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 659.382411][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 659.397416][ T30] __ia32_sys_unshare+0x37/0x40 [ 659.402345][ T30] __do_fast_syscall_32+0xb4/0x110 [ 659.412557][ T30] ? exc_page_fault+0x590/0x8c0 [ 659.418994][ T30] do_fast_syscall_32+0x34/0x80 [ 659.423910][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 659.436118][ T30] RIP: 0023:0xf7fc7579 [ 659.440243][ T30] RSP: 002b:00000000f75aff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 659.454423][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 659.462760][ T30] RDX: 00000000f744bff4 RSI: 00000000f732215e RDI: 0000000030000000 [ 659.488386][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.501854][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 659.510746][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.525156][ T30] [ 659.528704][ T30] INFO: task syz-executor:10321 blocked for more than 148 seconds. [ 659.544271][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 659.554562][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 659.570024][ T30] task:syz-executor state:D stack:26560 pid:10321 tgid:10321 ppid:1 flags:0x20004004 [ 659.583960][ T30] Call Trace: [ 659.590015][ T30] [ 659.592999][ T30] __schedule+0x1895/0x4b30 [ 659.604648][ T30] ? __pfx___schedule+0x10/0x10 [ 659.612242][ T30] ? __pfx_lock_release+0x10/0x10 [ 659.621612][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 659.629959][ T30] ? schedule+0x90/0x320 [ 659.634267][ T30] schedule+0x14b/0x320 [ 659.642632][ T30] schedule_preempt_disabled+0x13/0x30 [ 659.650848][ T30] __mutex_lock+0x6a7/0xd70 [ 659.655414][ T30] ? __mutex_lock+0x52a/0xd70 [ 659.666017][ T30] ? register_nexthop_notifier+0x84/0x290 [ 659.675812][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 659.684776][ T30] ? __asan_memset+0x23/0x50 [ 659.692078][ T30] register_nexthop_notifier+0x84/0x290 [ 659.702428][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 659.711000][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 659.722372][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 659.731633][ T30] ? __asan_memset+0x23/0x50 [ 659.740416][ T30] ops_init+0x31e/0x590 [ 659.744637][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 659.753095][ T30] setup_net+0x287/0x9e0 [ 659.761607][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 659.769761][ T30] ? __pfx_setup_net+0x10/0x10 [ 659.775896][ T30] copy_net_ns+0x33f/0x570 [ 659.785506][ T30] create_new_namespaces+0x425/0x7b0 [ 659.794905][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 659.804756][ T30] ksys_unshare+0x619/0xc10 [ 659.811987][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 659.820994][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 659.831510][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 659.842105][ T30] __ia32_sys_unshare+0x37/0x40 [ 659.850244][ T30] __do_fast_syscall_32+0xb4/0x110 [ 659.855428][ T30] ? exc_page_fault+0x590/0x8c0 [ 659.864496][ T30] do_fast_syscall_32+0x34/0x80 [ 659.872348][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 659.883927][ T30] RIP: 0023:0xf7f63579 [ 659.892352][ T30] RSP: 002b:00000000f754ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 659.905591][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 659.916568][ T30] RDX: 00000000f73ebff4 RSI: 00000000f72c215e RDI: 0000000030000000 [ 659.924607][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.936654][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 659.944692][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.962354][ T30] [ 659.965434][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 659.980360][ T30] [ 659.980360][ T30] Showing all locks held in the system: [ 659.991067][ T30] 1 lock held by khungtaskd/30: [ 659.995974][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 660.015677][ T30] 3 locks held by kworker/1:2/936: [ 660.021156][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 660.036127][ T30] #1: ffffc90003dc7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 660.053866][ T30] #2: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 660.065495][ T30] 3 locks held by kworker/u8:8/2567: [ 660.076389][ T30] #0: ffff88814b4de948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 660.095605][ T30] #1: ffffc90009547d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 660.116847][ T30] #2: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 660.132625][ T30] 2 locks held by getty/4987: [ 660.138939][ T30] #0: ffff88802e2bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 660.154076][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 660.165815][ T30] 4 locks held by kworker/0:8/5284: [ 660.176396][ T30] 2 locks held by syz.0.2113/10238: [ 660.181642][ T30] #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 660.203227][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 660.223041][ T30] 1 lock held by syz.4.2118/10251: [ 660.229210][ T30] #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 660.246875][ T30] 2 locks held by syz.1.2124/10263: [ 660.252126][ T30] #0: ffffffff8fd36a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 660.266783][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_default_set_doit+0x394/0x910 [ 660.283700][ T30] 1 lock held by syz.2.2133/10283: [ 660.293053][ T30] #0: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 660.308467][ T30] 3 locks held by syz.3.2140/10299: [ 660.313741][ T30] #0: ffffffff8fd36a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 660.329074][ T30] #1: ffff8880212b16c8 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 660.342543][ T30] #2: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_dump_wiphy+0x50/0x790 [ 660.358218][ T30] 2 locks held by syz-executor/10304: [ 660.363647][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.376544][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.394022][ T30] 2 locks held by syz-executor/10307: [ 660.399806][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.417535][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.434595][ T30] 2 locks held by syz-executor/10310: [ 660.440376][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.456235][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.474450][ T30] 2 locks held by syz-executor/10313: [ 660.480222][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.496130][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.523016][ T30] 2 locks held by syz-executor/10321: [ 660.529023][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.545356][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.555977][ T30] 2 locks held by syz-executor/10329: [ 660.567561][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.581998][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.601956][ T30] 2 locks held by syz-executor/10334: [ 660.607731][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.626213][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.642589][ T30] 2 locks held by syz-executor/10335: [ 660.648963][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.665015][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.675527][ T30] 2 locks held by syz-executor/10338: [ 660.686106][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.702588][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.713315][ T30] 2 locks held by syz-executor/10341: [ 660.725526][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.736767][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.753220][ T30] 2 locks held by syz-executor/10350: [ 660.759421][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.775251][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.785735][ T30] 2 locks held by syz-executor/10355: [ 660.796154][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.813354][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.824536][ T30] 2 locks held by syz-executor/10356: [ 660.836396][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.845910][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.863557][ T30] 2 locks held by syz-executor/10358: [ 660.869841][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.885445][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.895936][ T30] 2 locks held by syz-executor/10361: [ 660.910542][ T30] #0: ffffffff8fcc41d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 660.923726][ T30] #1: ffffffff8fcd0cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 660.937953][ T30] [ 660.940330][ T30] ============================================= [ 660.940330][ T30] [ 660.953069][ T30] NMI backtrace for cpu 1 [ 660.957466][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 660.967677][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 660.977785][ T30] Call Trace: [ 660.981108][ T30] [ 660.984060][ T30] dump_stack_lvl+0x241/0x360 [ 660.988790][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.994041][ T30] ? __pfx__printk+0x10/0x10 [ 660.998690][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 661.003677][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 661.009172][ T30] ? _printk+0xd5/0x120 [ 661.013369][ T30] ? __pfx__printk+0x10/0x10 [ 661.018002][ T30] ? __wake_up_klogd+0xcc/0x110 [ 661.022890][ T30] ? __pfx__printk+0x10/0x10 [ 661.027530][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 661.032610][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 661.038646][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 661.044685][ T30] watchdog+0xff4/0x1040 [ 661.048997][ T30] ? watchdog+0x1ea/0x1040 [ 661.053468][ T30] ? __pfx_watchdog+0x10/0x10 [ 661.058196][ T30] kthread+0x2f0/0x390 [ 661.062293][ T30] ? __pfx_watchdog+0x10/0x10 [ 661.067002][ T30] ? __pfx_kthread+0x10/0x10 [ 661.071631][ T30] ret_from_fork+0x4b/0x80 [ 661.076110][ T30] ? __pfx_kthread+0x10/0x10 [ 661.080731][ T30] ret_from_fork_asm+0x1a/0x30 [ 661.085569][ T30] [ 661.089753][ T30] Sending NMI from CPU 1 to CPUs 0: [ 661.095011][ C0] NMI backtrace for cpu 0 [ 661.095025][ C0] CPU: 0 UID: 0 PID: 5284 Comm: kworker/0:8 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 661.095046][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 661.095059][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 661.095086][ C0] RIP: 0010:unwind_get_return_address+0x45/0x90 [ 661.095117][ C0] Code: e8 03 42 0f b6 04 30 84 c0 75 4b 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 2b 41 bd 00 <48> 8b 3b e8 23 72 1e 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df [ 661.095133][ C0] RSP: 0018:ffffc900000065e0 EFLAGS: 00000246 [ 661.095148][ C0] RAX: 0000000000000000 RBX: ffffc90000006648 RCX: 0000000080000101 [ 661.095160][ C0] RDX: dffffc0000000000 RSI: ffffc90000000000 RDI: ffffc90000006600 [ 661.095174][ C0] RBP: ffffc90000006690 R08: ffffc90000006df0 R09: 0000000000000000 [ 661.095187][ C0] R10: ffffc90000006650 R11: fffff52000000ccc R12: ffff88805f6bbc00 [ 661.095207][ C0] R13: ffffffff818067a0 R14: dffffc0000000000 R15: 1ffff92000000cc9 [ 661.095221][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 661.095236][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.095249][ C0] CR2: 00000000f744c230 CR3: 000000000e734000 CR4: 00000000003506f0 [ 661.095265][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 661.095275][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 661.095287][ C0] Call Trace: [ 661.095293][ C0] [ 661.095301][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 661.095322][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 661.095350][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 661.095369][ C0] ? nmi_handle+0x2a/0x5a0 [ 661.095394][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 661.095416][ C0] ? nmi_handle+0x14f/0x5a0 [ 661.095433][ C0] ? nmi_handle+0x2a/0x5a0 [ 661.095451][ C0] ? unwind_get_return_address+0x45/0x90 [ 661.095477][ C0] ? default_do_nmi+0x63/0x160 [ 661.095499][ C0] ? exc_nmi+0x123/0x1f0 [ 661.095519][ C0] ? end_repeat_nmi+0xf/0x53 [ 661.095553][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 661.095579][ C0] ? unwind_get_return_address+0x45/0x90 [ 661.095607][ C0] ? unwind_get_return_address+0x45/0x90 [ 661.095636][ C0] ? unwind_get_return_address+0x45/0x90 [ 661.095664][ C0] [ 661.095670][ C0] [ 661.095677][ C0] arch_stack_walk+0xfd/0x150 [ 661.095697][ C0] ? ip_route_me_harder+0x80d/0x1300 [ 661.095723][ C0] stack_trace_save+0x118/0x1d0 [ 661.095742][ C0] ? __asan_memset+0x23/0x50 [ 661.095769][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 661.095793][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 661.095821][ C0] kasan_save_track+0x3f/0x80 [ 661.095837][ C0] ? kasan_save_track+0x3f/0x80 [ 661.095852][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 661.095870][ C0] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 661.095893][ C0] ? ref_tracker_alloc+0x14b/0x490 [ 661.095920][ C0] ? dst_init+0xee/0x490 [ 661.095945][ C0] ? dst_alloc+0x14f/0x190 [ 661.095971][ C0] ? ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 661.095997][ C0] ? ip_route_output_key_hash+0x193/0x2b0 [ 661.096023][ C0] ? ip_route_output_flow+0x29/0x140 [ 661.096069][ C0] __kasan_kmalloc+0x98/0xb0 [ 661.096092][ C0] ? ref_tracker_alloc+0x14b/0x490 [ 661.096121][ C0] __kmalloc_cache_noprof+0x19c/0x2c0 [ 661.096149][ C0] ref_tracker_alloc+0x14b/0x490 [ 661.096180][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 661.096227][ C0] dst_init+0xee/0x490 [ 661.096255][ C0] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 661.096285][ C0] dst_alloc+0x14f/0x190 [ 661.096318][ C0] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 661.096357][ C0] ip_route_output_key_hash+0x193/0x2b0 [ 661.096387][ C0] ? ip_route_output_key_hash+0xdf/0x2b0 [ 661.096417][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 661.096449][ C0] ? __pfx_lock_release+0x10/0x10 [ 661.096478][ C0] ? kthread+0x2f0/0x390 [ 661.096500][ C0] ip_route_output_flow+0x29/0x140 [ 661.096525][ C0] ip_route_me_harder+0x80d/0x1300 [ 661.096553][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 661.096577][ C0] ? trace_kmalloc+0x1f/0xd0 [ 661.096598][ C0] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 661.096634][ C0] synproxy_send_tcp+0x356/0x6c0 [ 661.096662][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 661.096693][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 661.096731][ C0] ? synproxy_pernet+0x45/0x270 [ 661.096758][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 661.096785][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 661.096812][ C0] ? nf_ip_checksum+0x13a/0x500 [ 661.096841][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 661.096868][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 661.096896][ C0] ? __pfx_validate_chain+0x10/0x10 [ 661.096919][ C0] nft_do_chain+0x4ad/0x1da0 [ 661.096952][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 661.096976][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 661.097011][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 661.097041][ C0] nft_do_chain_inet+0x418/0x6b0 [ 661.097068][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 661.097091][ C0] ? ipt_do_table+0x312/0x1860 [ 661.097123][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 661.097147][ C0] nf_hook_slow+0xc3/0x220 [ 661.097169][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 661.097189][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 661.097214][ C0] NF_HOOK+0x29e/0x450 [ 661.097233][ C0] ? NF_HOOK+0x9a/0x450 [ 661.097251][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 661.097270][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 661.097292][ C0] ? ip_rcv_finish+0x406/0x560 [ 661.097312][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 661.097331][ C0] NF_HOOK+0x3a4/0x450 [ 661.097348][ C0] ? __lock_acquire+0x1384/0x2050 [ 661.097374][ C0] ? NF_HOOK+0x9a/0x450 [ 661.097392][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 661.097409][ C0] ? ip_rcv_core+0x801/0xd10 [ 661.097428][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 661.097451][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 661.097469][ C0] __netif_receive_skb+0x2bf/0x650 [ 661.097491][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 661.097516][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 661.097536][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 661.097561][ C0] ? __pfx_lock_release+0x10/0x10 [ 661.097586][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 661.097616][ C0] process_backlog+0x662/0x15b0 [ 661.097640][ C0] ? process_backlog+0x33b/0x15b0 [ 661.097666][ C0] ? __pfx_process_backlog+0x10/0x10 [ 661.097688][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 661.097714][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 661.097759][ C0] __napi_poll+0xcb/0x490 [ 661.097782][ C0] net_rx_action+0x89b/0x1240 [ 661.097815][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 661.097840][ C0] ? sched_clock+0x4a/0x70 [ 661.097869][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 661.097901][ C0] handle_softirqs+0x2c5/0x980 [ 661.097926][ C0] ? do_softirq+0x11b/0x1e0 [ 661.097950][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 661.097978][ C0] do_softirq+0x11b/0x1e0 [ 661.098000][ C0] [ 661.098006][ C0] [ 661.098012][ C0] ? __pfx_do_softirq+0x10/0x10 [ 661.098035][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 661.098074][ C0] ? rcu_is_watching+0x15/0xb0 [ 661.098094][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 661.098117][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 661.098137][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 661.098160][ C0] ? neigh_destroy+0x423/0x580 [ 661.098183][ C0] neigh_periodic_work+0xb35/0xd50 [ 661.098212][ C0] ? process_scheduled_works+0x976/0x1850 [ 661.098235][ C0] process_scheduled_works+0xa63/0x1850 [ 661.098271][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 661.098299][ C0] ? assign_work+0x364/0x3d0 [ 661.098323][ C0] worker_thread+0x870/0xd30 [ 661.098351][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 661.098377][ C0] ? __kthread_parkme+0x169/0x1d0 [ 661.098403][ C0] ? __pfx_worker_thread+0x10/0x10 [ 661.098427][ C0] kthread+0x2f0/0x390 [ 661.098442][ C0] ? __pfx_worker_thread+0x10/0x10 [ 661.098465][ C0] ? __pfx_kthread+0x10/0x10 [ 661.098481][ C0] ret_from_fork+0x4b/0x80 [ 661.098505][ C0] ? __pfx_kthread+0x10/0x10 [ 661.098521][ C0] ret_from_fork_asm+0x1a/0x30 [ 661.098552][ C0] [ 661.944820][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 661.951736][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 661.961933][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 661.972024][ T30] Call Trace: [ 661.975333][ T30] [ 661.978295][ T30] dump_stack_lvl+0x241/0x360 [ 661.983041][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.988291][ T30] ? __pfx__printk+0x10/0x10 [ 661.992937][ T30] ? vscnprintf+0x5d/0x90 [ 661.997310][ T30] panic+0x349/0x880 [ 662.001419][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 662.007611][ T30] ? __pfx_panic+0x10/0x10 [ 662.012158][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 662.017581][ T30] ? __irq_work_queue_local+0x137/0x410 [ 662.023169][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 662.028577][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 662.034768][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 662.040964][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 662.047267][ T30] watchdog+0x1033/0x1040 [ 662.051676][ T30] ? watchdog+0x1ea/0x1040 [ 662.056144][ T30] ? __pfx_watchdog+0x10/0x10 [ 662.060861][ T30] kthread+0x2f0/0x390 [ 662.064967][ T30] ? __pfx_watchdog+0x10/0x10 [ 662.070201][ T30] ? __pfx_kthread+0x10/0x10 [ 662.074820][ T30] ret_from_fork+0x4b/0x80 [ 662.079360][ T30] ? __pfx_kthread+0x10/0x10 [ 662.083980][ T30] ret_from_fork_asm+0x1a/0x30 [ 662.088796][ T30] [ 662.092135][ T30] Kernel Offset: disabled [ 662.096471][ T30] Rebooting in 86400 seconds..