last executing test programs: 35.692123643s ago: executing program 1 (id=1775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x15000000) 18.907979009s ago: executing program 4 (id=1863): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r0 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 18.634480783s ago: executing program 4 (id=1864): r0 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x141000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000680)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x5, 0x0, '\x00', 0xfe}, {}, {}, {}, {}, {}, {0xf9}, {}, {}, {}, {}, {0xff}]}}) 18.255674963s ago: executing program 4 (id=1865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 18.065180847s ago: executing program 4 (id=1867): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x0, 0x0, 0x1}}, 0x28) 17.037617042s ago: executing program 4 (id=1869): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f0000000cc0)={0x0, "b512a6e8c8cf8ce33774427eadef161f404a27f23ffef43501b939ee1f685e79652a6343aa2efd3a0e4ad019db6207539c0094298569d2d33ed8beab06128d0d"}, 0x48, r0) keyctl$KEYCTL_WATCH_KEY(0x4, r1, 0xffffffffffffffff, 0x0) 15.857772314s ago: executing program 4 (id=1872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}}, 0x0) 9.172072924s ago: executing program 2 (id=1899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 8.855961866s ago: executing program 2 (id=1900): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f00)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000700)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4, 0x0, &(0x7f0000000680)=[@register_looper], 0x0, 0x0, 0x0}) 8.615024739s ago: executing program 2 (id=1903): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) madvise(&(0x7f0000227000/0x1000)=nil, 0x1000, 0x19) 8.476608064s ago: executing program 2 (id=1905): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1}}, 0x28) 7.514593141s ago: executing program 2 (id=1906): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000300)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0022}) 6.841743336s ago: executing program 2 (id=1909): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x400454a4) 5.733553468s ago: executing program 1 (id=1776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010300000000000000000000000020000000000a010400000000000000000a0000000900010073797a3100000000200000000e0a03000000000000000000020000000900010073797a30"], 0x7c}}, 0x0) 5.446502186s ago: executing program 1 (id=1911): socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x92, 0x0) 5.241278555s ago: executing program 1 (id=1912): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 4.849955316s ago: executing program 1 (id=1914): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 4.695890893s ago: executing program 0 (id=1916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) 4.695534577s ago: executing program 1 (id=1917): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) 3.804318192s ago: executing program 0 (id=1918): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) 3.57254335s ago: executing program 0 (id=1920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 3.358939237s ago: executing program 0 (id=1921): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) 2.892766613s ago: executing program 0 (id=1922): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x7ff, 0xf8f}) 2.605069373s ago: executing program 0 (id=1923): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f00000003c0)=""/74, 0x4a}], 0x9}, 0x0) 1.143843328s ago: executing program 3 (id=1926): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000340)) tkill(0x0, 0x0) 994.381968ms ago: executing program 3 (id=1927): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) fstat(r1, &(0x7f0000000080)) 823.646515ms ago: executing program 3 (id=1928): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x28) read$dsp(r0, &(0x7f0000000440)=""/171, 0xab) 384.973228ms ago: executing program 3 (id=1929): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) msgsnd(0x0, &(0x7f0000001780)={0x2, "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"}, 0x87d, 0x800) 189.119027ms ago: executing program 3 (id=1930): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000005, 0x6032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xce, 0x0, &(0x7f0000000040)) 0s ago: executing program 3 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000000040000000008100000000200002000a7f0000f3000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) kernel console output (not intermixed with test programs): id=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.1.1126" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x0 [ 155.123905][ T7899] fuse: Bad value for 'group_id' [ 155.137192][ T7899] fuse: Bad value for 'group_id' [ 155.276418][ T7903] tipc: Started in network mode [ 155.281339][ T7903] tipc: Node identity 400000004c4000000000ffffe0000001, cluster identity 4711 [ 155.290578][ T7903] tipc: Enabling of bearer rejected, failed to enable media [ 155.552713][ T7917] tipc: Enabled bearer , priority 0 [ 155.985409][ T5280] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 156.093996][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.102570][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.142755][ T7940] bridge_slave_1: left allmulticast mode [ 156.161175][ T5280] usb 4-1: Using ep0 maxpacket: 16 [ 156.186194][ T5280] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 156.199128][ T5280] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 156.218240][ T7940] bridge_slave_1: left promiscuous mode [ 156.247677][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.275405][ T5280] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.291192][ T5280] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 156.301034][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.329987][ T5280] usb 4-1: Product: syz [ 156.344336][ T5280] usb 4-1: Manufacturer: syz [ 156.363044][ T5280] usb 4-1: SerialNumber: syz [ 156.387846][ T5280] usb 4-1: config 0 descriptor?? [ 156.419708][ T5280] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input49 [ 156.435564][ T7940] bridge_slave_0: left allmulticast mode [ 156.465690][ T7940] bridge_slave_0: left promiscuous mode [ 156.476733][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.834537][ T5290] tipc: Node number set to 3963682814 [ 156.865507][ T5280] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 156.885367][ T5326] usb 4-1: USB disconnect, device number 22 [ 157.035447][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 157.063209][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.075165][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.100096][ T5280] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 157.171105][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.191920][ T5280] usb 5-1: config 0 descriptor?? [ 157.323293][ T937] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 157.510557][ T937] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 157.525310][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.550970][ T937] usb 3-1: config 0 descriptor?? [ 157.579466][ T937] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 157.595569][ T5326] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 157.617697][ T5280] cypress 0003:04B4:DE61.0030: unknown main item tag 0x0 [ 157.641020][ T5280] cypress 0003:04B4:DE61.0030: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.4-1/input0 [ 157.766133][ T5326] usb 4-1: Using ep0 maxpacket: 16 [ 157.792585][ T5326] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 157.805291][ T5326] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 157.823421][ T5290] usb 5-1: USB disconnect, device number 16 [ 157.868739][ T5326] usb 4-1: config 0 interface 0 has no altsetting 0 [ 157.892388][ T5326] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 157.905888][ T5326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.914079][ T5326] usb 4-1: Manufacturer:  [ 157.919187][ T5326] usb 4-1: SerialNumber: syz [ 157.926835][ T5326] usb 4-1: config 0 descriptor?? [ 157.947355][ T5326] input:  as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input50 [ 158.090391][ T937] gspca_cpia1: usb_control_msg 03, error -32 [ 158.110844][ T937] gspca_cpia1: usb_control_msg 03, error -71 [ 158.137385][ T937] gspca_cpia1: usb_control_msg 01, error -71 [ 158.160170][ T937] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 158.189856][ T937] usb 3-1: USB disconnect, device number 15 [ 158.220514][ T5279] usb 4-1: USB disconnect, device number 23 [ 158.438132][ T7976] program syz.4.1171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.500390][ T7979] netlink: 191384 bytes leftover after parsing attributes in process `syz.1.1172'. [ 158.530676][ T7979] netlink: 8446 bytes leftover after parsing attributes in process `syz.1.1172'. [ 158.962607][ T5279] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 159.154579][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.175372][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.185213][ T5279] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 159.196700][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.227724][ T5279] usb 1-1: config 0 descriptor?? [ 159.267869][ T8014] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1190'. [ 159.455464][ T1860] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 159.647094][ T1860] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.658633][ T1860] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 159.684134][ T1860] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.704488][ T5279] pantherlord 0003:0F30:0111.0031: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.0-1/input0 [ 159.726798][ T5279] pantherlord 0003:0F30:0111.0031: no output reports found [ 159.754414][ T1860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.779887][ T8009] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 159.818084][ T1860] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.062639][ T5276] usb 1-1: USB disconnect, device number 17 [ 160.443080][ T5276] usb 5-1: USB disconnect, device number 17 [ 160.690925][ T8048] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 160.945031][ T8064] syz.1.1212 uses obsolete (PF_INET,SOCK_PACKET) [ 161.065398][ T5290] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 161.105489][ T937] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 161.186873][ T8072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1216'. [ 161.234511][ T5290] usb 1-1: Using ep0 maxpacket: 8 [ 161.251526][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.262997][ T937] usb 3-1: Using ep0 maxpacket: 16 [ 161.276876][ T937] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.309324][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.325288][ T937] usb 3-1: config 0 has no interface number 0 [ 161.342891][ T5290] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.366850][ T937] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 161.379251][ T5290] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 161.392779][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.408188][ T937] usb 3-1: Product: syz [ 161.412396][ T937] usb 3-1: Manufacturer: syz [ 161.417191][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.425496][ T5230] Bluetooth: hci4: unexpected cc 0x2003 length: 1 < 9 [ 161.433450][ T5230] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 161.435950][ T937] usb 3-1: SerialNumber: syz [ 161.440741][ T1860] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 161.453990][ T5290] usb 1-1: config 0 descriptor?? [ 161.495630][ T937] usb 3-1: config 0 descriptor?? [ 161.567508][ T937] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 161.628438][ T1860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.661512][ T1860] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 161.692917][ T1860] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 161.717505][ T1860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.747399][ T1860] usb 4-1: config 0 descriptor?? [ 161.990975][ T5290] hid-picolcd 0003:04D8:C002.0032: unknown main item tag 0x0 [ 162.015191][ T5290] hid-picolcd 0003:04D8:C002.0032: unknown main item tag 0x0 [ 162.105523][ T5290] hid-picolcd 0003:04D8:C002.0032: No report with id 0x11 found [ 162.203506][ T937] gspca_spca1528: reg_w err -71 [ 162.255568][ T937] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 162.290602][ T937] usb 3-1: USB disconnect, device number 16 [ 162.324809][ T5290] usb 1-1: USB disconnect, device number 18 [ 162.399106][ T1860] Bluetooth: Can't get version to change to load ram patch err [ 162.425400][ T1860] Bluetooth: Loading sysconfig file failed [ 162.451163][ T1860] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 162.487725][ T1860] usb 4-1: USB disconnect, device number 24 [ 162.765357][ T5279] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 162.937793][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.956886][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.998391][ T5279] usb 5-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 163.034504][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.077000][ T5279] usb 5-1: config 0 descriptor?? [ 163.236266][ T937] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 163.416790][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 163.445585][ T5326] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 163.453678][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.475619][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.494957][ T937] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 163.501263][ T5279] wacom 0003:056A:033C.0033: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 163.519883][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.520468][ T5279] wacom 0003:056A:033C.0033: hidraw0: USB HID v0.00 Device [HID 056a:033c] on usb-dummy_hcd.4-1/input0 [ 163.554642][ T937] usb 2-1: config 0 descriptor?? [ 163.561148][ T5279] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:033C.0033/input/input51 [ 163.637096][ T5326] usb 3-1: Using ep0 maxpacket: 16 [ 163.694357][ T5326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.728286][ T5326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.735867][ T5279] usb 5-1: USB disconnect, device number 18 [ 163.764520][ T5326] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 163.815456][ T5326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.893743][ T5326] usb 3-1: config 0 descriptor?? [ 164.274972][ T937] corsair-psu 0003:1B1C:1C1E.0034: item fetching failed at offset 2/5 [ 164.284040][ T937] corsair-psu 0003:1B1C:1C1E.0034: probe with driver corsair-psu failed with error -22 [ 164.399425][ T5326] kye 0003:0458:5017.0035: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 164.421048][ T5326] kye 0003:0458:5017.0035: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.2-1/input0 [ 164.442579][ T5326] kye 0003:0458:5017.0035: tablet-enabling feature report not found [ 164.465564][ T5229] usb 2-1: USB disconnect, device number 15 [ 164.488020][ T5326] kye 0003:0458:5017.0035: tablet enabling failed [ 164.662623][ T1860] usb 3-1: USB disconnect, device number 17 [ 164.906544][ T8159] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1259'. [ 164.927660][ T1860] IPVS: starting estimator thread 0... [ 164.933937][ T8159] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1259'. [ 165.035462][ T8160] IPVS: using max 20 ests per chain, 48000 per kthread [ 165.474745][ T8184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1271'. [ 166.390470][ T8227] usb usb8: usbfs: process 8227 (syz.1.1290) did not claim interface 0 before use [ 166.413000][ T5230] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 166.942331][ T8242] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1297'. [ 167.934400][ T8270] netlink: 'syz.3.1310': attribute type 1 has an invalid length. [ 167.965744][ T8270] openvswitch: netlink: Actions may not be safe on all matching packets [ 168.585395][ T1860] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 168.755413][ T1860] usb 2-1: Using ep0 maxpacket: 8 [ 168.777772][ T1860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.808221][ T1860] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 168.859510][ T1860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.916037][ T1860] usb 2-1: config 0 descriptor?? [ 169.145106][ T8292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1321'. [ 169.381628][ T1860] kye 0003:0458:5014.0036: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 169.405863][ T1860] kye 0003:0458:5014.0036: unknown main item tag 0x0 [ 169.433467][ T1860] kye 0003:0458:5014.0036: unknown main item tag 0x0 [ 169.447269][ T1860] kye 0003:0458:5014.0036: unknown main item tag 0x0 [ 169.454034][ T1860] kye 0003:0458:5014.0036: unknown main item tag 0x0 [ 169.465510][ T1860] kye 0003:0458:5014.0036: unknown main item tag 0x0 [ 169.477402][ T1860] kye 0003:0458:5014.0036: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.1-1/input0 [ 169.490308][ T1860] kye 0003:0458:5014.0036: tablet-enabling feature report not found [ 169.498887][ T1860] kye 0003:0458:5014.0036: tablet enabling failed [ 169.652761][ T1860] usb 2-1: USB disconnect, device number 16 [ 170.535661][ T8351] bridge0: port 3(bond0) entered blocking state [ 170.558072][ T8351] bridge0: port 3(bond0) entered disabled state [ 170.573472][ T8351] bond0: entered allmulticast mode [ 170.582074][ T8351] bond_slave_0: entered allmulticast mode [ 170.600477][ T8351] bond_slave_1: entered allmulticast mode [ 170.615048][ T8351] bond0: entered promiscuous mode [ 170.621830][ T8351] bond_slave_0: entered promiscuous mode [ 170.633774][ T8351] bond_slave_1: entered promiscuous mode [ 170.641731][ T8351] bridge0: port 3(bond0) entered blocking state [ 170.649091][ T8351] bridge0: port 3(bond0) entered forwarding state [ 170.696736][ T1860] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 170.796125][ T8364] Invalid logical block size (65534) [ 170.856017][ T1860] usb 5-1: Using ep0 maxpacket: 8 [ 170.867738][ T1860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.879538][ T1860] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.907342][ T1860] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 170.927796][ T1860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.947520][ T1860] usb 5-1: config 0 descriptor?? [ 171.377521][ T1860] hid (null): unknown global tag 0xe [ 171.400013][ T1860] semitek 0003:1EA7:0907.0037: unknown global tag 0xe [ 171.417146][ T1860] semitek 0003:1EA7:0907.0037: item 0 1 1 14 parsing failed [ 171.424994][ T1860] semitek 0003:1EA7:0907.0037: probe with driver semitek failed with error -22 [ 171.521090][ T8389] delete_channel: no stack [ 171.626470][ T937] usb 5-1: USB disconnect, device number 19 [ 171.675108][ T8394] netlink: 134732 bytes leftover after parsing attributes in process `syz.0.1372'. [ 171.821489][ T8400] tipc: Enabling of bearer rejected, failed to enable media [ 171.980130][ T8410] netlink: 'syz.0.1379': attribute type 2 has an invalid length. [ 172.017064][ T8410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1379'. [ 172.058693][ T8414] tipc: Enabled bearer , priority 10 [ 172.486014][ T1860] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 172.522797][ T8442] program syz.1.1392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.616138][ T8444] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 172.645436][ T1860] usb 5-1: Using ep0 maxpacket: 16 [ 172.652509][ T1860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.673544][ T1860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.697161][ T8446] IPv6: sit1: Disabled Multicast RS [ 172.703897][ T1860] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 172.713515][ T1860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.726442][ C1] sd 0:0:1:0: [sda] tag#3969 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 172.736963][ C1] sd 0:0:1:0: [sda] tag#3969 CDB: Read(6) 08 00 00 00 00 00 [ 172.744904][ T1860] usb 5-1: config 0 descriptor?? [ 172.944300][ T937] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 173.029985][ T8456] x_tables: ip_tables: udp match: only valid for protocol 17 [ 173.150989][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.164284][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.165505][ T1860] logitech 0003:046D:C293.0038: item fetching failed at offset 2/5 [ 173.184006][ T1860] logitech 0003:046D:C293.0038: parse failed [ 173.193988][ T1860] logitech 0003:046D:C293.0038: probe with driver logitech failed with error -22 [ 173.220975][ T937] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 173.248746][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.280709][ T937] usb 1-1: config 0 descriptor?? [ 173.484849][ T5276] usb 5-1: USB disconnect, device number 20 [ 173.647939][ T8480] tipc: Enabling of bearer rejected, failed to enable media [ 173.680669][ T8478] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1421'. [ 173.724212][ T937] zeroplus 0003:0C12:0030.0039: unbalanced collection at end of report description [ 173.740113][ T937] zeroplus 0003:0C12:0030.0039: parse failed [ 173.751508][ T937] zeroplus 0003:0C12:0030.0039: probe with driver zeroplus failed with error -22 [ 173.864598][ T8487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1415'. [ 173.952381][ T937] usb 1-1: USB disconnect, device number 19 [ 174.185426][ T5276] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 174.345340][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 174.347096][ T5290] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 174.363890][ T5276] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 174.382221][ T5276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.405401][ T5276] usb 2-1: config 0 has no interface number 0 [ 174.411547][ T5276] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.437711][ T5276] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.461670][ T5276] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.479522][ T5276] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.500170][ T5276] usb 2-1: config 0 interface 52 has no altsetting 0 [ 174.508297][ T5276] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 174.523096][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.525931][ T5290] usb 5-1: Using ep0 maxpacket: 16 [ 174.552345][ T5276] usb 2-1: config 0 descriptor?? [ 174.595715][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.616902][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.631676][ T5290] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 174.655461][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.680073][ T5290] usb 5-1: config 0 descriptor?? [ 174.788645][ T5276] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input55 [ 174.932047][ T8515] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 175.029254][ T5276] usb 2-1: USB disconnect, device number 17 [ 175.131867][ T5290] lenovo 0003:17EF:6009.003A: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0 [ 175.404093][ T5290] usb 5-1: USB disconnect, device number 21 [ 175.915375][ T5276] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 175.923091][ T1860] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 176.077938][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.090516][ T1860] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.100839][ T1860] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.100878][ T1860] usb 4-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 176.100902][ T1860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.107778][ T1860] usb 4-1: config 0 descriptor?? [ 176.115744][ T5276] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 176.115776][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.121803][ T5276] usb 2-1: config 0 descriptor?? [ 176.591318][ T1860] wacom 0003:056A:032B.003B: unknown main item tag 0x0 [ 176.610435][ T1860] wacom 0003:056A:032B.003B: hidraw0: USB HID v0.00 Device [HID 056a:032b] on usb-dummy_hcd.3-1/input0 [ 176.679722][ T5276] mcp2221 0003:04D8:00DD.003C: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 176.810954][ T5279] usb 4-1: USB disconnect, device number 25 [ 176.952417][ T5276] usb 2-1: USB disconnect, device number 18 [ 177.523629][ T8574] netlink: 'syz.3.1458': attribute type 10 has an invalid length. [ 177.620503][ T8574] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.650156][ T8574] team0: entered promiscuous mode [ 177.659204][ T8574] team_slave_0: entered promiscuous mode [ 177.670381][ T8574] team_slave_1: entered promiscuous mode [ 177.685819][ T8574] team0: entered allmulticast mode [ 177.705459][ T8574] team_slave_0: entered allmulticast mode [ 177.716070][ T8574] team_slave_1: entered allmulticast mode [ 177.739861][ T8574] bond0: (slave team0): Enslaving as an active interface with an up link [ 177.767054][ T8575] netlink: 'syz.3.1458': attribute type 10 has an invalid length. [ 177.786939][ T8583] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 177.808853][ T8575] bond0: (slave team0): Releasing backup interface [ 177.843772][ T8575] team0: left promiscuous mode [ 177.855786][ T8575] team_slave_0: left promiscuous mode [ 177.871607][ T8575] team_slave_1: left promiscuous mode [ 177.901973][ T8575] team0: left allmulticast mode [ 177.912269][ T8575] team_slave_0: left allmulticast mode [ 177.928911][ T8575] team_slave_1: left allmulticast mode [ 177.941098][ T8575] bridge0: port 4(team0) entered blocking state [ 177.955424][ T8575] bridge0: port 4(team0) entered disabled state [ 177.972186][ T8575] team0: entered allmulticast mode [ 177.978851][ T8575] team_slave_0: entered allmulticast mode [ 178.007339][ T8575] team_slave_1: entered allmulticast mode [ 178.014311][ T8575] team0: entered promiscuous mode [ 178.036143][ T8575] team_slave_0: entered promiscuous mode [ 178.046086][ T8575] team_slave_1: entered promiscuous mode [ 178.195064][ T8599] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.556075][ T8617] vivid-001: ================= START STATUS ================= [ 178.579279][ T8617] vivid-001: Radio HW Seek Mode: Bounded [ 178.590714][ T8619] netlink: 'syz.1.1479': attribute type 29 has an invalid length. [ 178.597048][ T8617] vivid-001: Radio Programmable HW Seek: false [ 178.605430][ T937] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 178.632136][ T8619] netlink: 'syz.1.1479': attribute type 29 has an invalid length. [ 178.636550][ T8617] vivid-001: RDS Rx I/O Mode: Block I/O [ 178.657658][ T8617] vivid-001: Generate RBDS Instead of RDS: false [ 178.664065][ T8617] vivid-001: RDS Reception: true [ 178.685379][ T8617] vivid-001: RDS Program Type: 0 inactive [ 178.708260][ T8617] vivid-001: RDS PS Name: inactive [ 178.723855][ T8617] vivid-001: RDS Radio Text: inactive [ 178.758316][ T8617] vivid-001: RDS Traffic Announcement: false inactive [ 178.785342][ T937] usb 3-1: Using ep0 maxpacket: 32 [ 178.804001][ T8617] vivid-001: RDS Traffic Program: false inactive [ 178.809620][ T937] usb 3-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 178.834622][ T8617] vivid-001: RDS Music: false inactive [ 178.837083][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.865394][ T8617] vivid-001: ================== END STATUS ================== [ 178.887687][ T937] usb 3-1: Product: syz [ 178.896787][ T937] usb 3-1: Manufacturer: syz [ 178.925298][ T937] usb 3-1: SerialNumber: syz [ 178.959106][ T937] usb 3-1: config 0 descriptor?? [ 178.959426][ T8635] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1487'. [ 178.974069][ T8635] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 179.211787][ T8637] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 179.798282][ T5276] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 179.967673][ T5276] usb 5-1: Using ep0 maxpacket: 32 [ 179.975162][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.002046][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.012195][ T5276] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 180.022040][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.042304][ T5276] usb 5-1: config 0 descriptor?? [ 180.057328][ T937] usb 3-1: reset high-speed USB device number 19 using dummy_hcd [ 180.125364][ T5229] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 180.230488][ T937] usb 3-1: device firmware changed [ 180.260456][ T937] usb 3-1: USB disconnect, device number 19 [ 180.275449][ T5229] usb 4-1: Using ep0 maxpacket: 16 [ 180.291915][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.316804][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.327327][ T5229] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 180.337432][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.349034][ T5229] usb 4-1: config 0 descriptor?? [ 180.435468][ T937] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 180.481681][ T5276] uclogic 0003:28BD:0094.003D: interface is invalid, ignoring [ 180.607041][ T937] usb 3-1: Using ep0 maxpacket: 32 [ 180.623290][ T937] usb 3-1: string descriptor 0 read error: -22 [ 180.634968][ T937] usb 3-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 180.649960][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.670054][ T937] usb 3-1: config 0 descriptor?? [ 180.697109][ T5326] usb 5-1: USB disconnect, device number 22 [ 180.774525][ T5229] uclogic 0003:28BD:0042.003E: interface is invalid, ignoring [ 180.815366][ T937] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 180.975480][ T5290] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 180.991576][ T5326] usb 4-1: USB disconnect, device number 26 [ 181.137021][ T5290] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.168463][ T5290] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.189426][ T5290] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.215413][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.244697][ T8681] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 181.257849][ T5290] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 181.582036][ T1860] usb 2-1: USB disconnect, device number 19 [ 181.765797][ T937] usb 3-1: USB disconnect, device number 20 [ 182.175381][ T5326] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 182.245472][ T1860] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 182.327417][ T5326] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 182.327460][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 182.327486][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 182.329250][ T5326] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 182.329281][ T5326] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 182.329303][ T5326] usb 1-1: Product: syz [ 182.329319][ T5326] usb 1-1: Manufacturer: syz [ 182.329334][ T5326] usb 1-1: SerialNumber: syz [ 182.331293][ T5326] usb 1-1: config 0 descriptor?? [ 182.335706][ T5326] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 182.339479][ T5326] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 182.426329][ T1860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.426365][ T1860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.426399][ T1860] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 182.426423][ T1860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.428178][ T1860] usb 4-1: config 0 descriptor?? [ 182.445512][ T937] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 182.568087][ T8712] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 182.572645][ T5326] usb 1-1: USB disconnect, device number 20 [ 182.575857][ T5326] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 182.735356][ T937] usb 3-1: Using ep0 maxpacket: 16 [ 182.736926][ T937] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 182.736953][ T937] usb 3-1: config 0 has no interface number 0 [ 182.736984][ T937] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.737010][ T937] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.737076][ T937] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 182.737100][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.739096][ T937] usb 3-1: config 0 descriptor?? [ 182.912183][ T1860] keytouch 0003:0926:3333.003F: fixing up Keytouch IEC report descriptor [ 182.917686][ T1860] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.003F/input/input59 [ 182.990521][ T1860] keytouch 0003:0926:3333.003F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 183.138628][ T1860] usb 4-1: USB disconnect, device number 27 [ 183.158791][ T6025] udevd[6025]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 183.173347][ T937] uclogic 0003:5543:0081.0040: interface is invalid, ignoring [ 183.412565][ T5229] usb 3-1: USB disconnect, device number 21 [ 183.787825][ T8757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1543'. [ 183.831387][ T8757] (unnamed net_device) (uninitialized): down delay (1986356271) is not a multiple of miimon (129), value rounded to 1986356190 ms [ 183.995602][ T5229] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 184.065688][ T1860] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 184.147098][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.161160][ T5229] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.195384][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.225872][ T5229] usb 1-1: config 0 descriptor?? [ 184.235322][ T1860] usb 5-1: Using ep0 maxpacket: 16 [ 184.274206][ T1860] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 184.284824][ T1860] usb 5-1: config 0 has no interface number 0 [ 184.324430][ T1860] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.355376][ T1860] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.365213][ T1860] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 184.391601][ T1860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.414321][ T1860] usb 5-1: config 0 descriptor?? [ 184.662754][ T5229] mcp2221 0003:04D8:00DD.0041: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 184.932016][ T5229] usb 1-1: USB disconnect, device number 21 [ 184.945912][ T1860] wacom 0003:056A:0084.0042: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.4-1/input4 [ 185.179978][ T5326] usb 5-1: USB disconnect, device number 23 [ 185.316641][ T5279] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 185.485565][ T5279] usb 3-1: Using ep0 maxpacket: 16 [ 185.492634][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.534746][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.563766][ T5279] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 185.586924][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.599647][ T5279] usb 3-1: config 0 descriptor?? [ 185.934077][ T5326] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 186.008788][ T5229] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 186.059611][ T5279] apple 0003:05AC:0246.0043: unknown main item tag 0xd [ 186.083684][ T5279] apple 0003:05AC:0246.0043: unexpected long global item [ 186.093625][ T5279] apple 0003:05AC:0246.0043: parse failed [ 186.118458][ T5279] apple 0003:05AC:0246.0043: probe with driver apple failed with error -22 [ 186.226048][ T5229] usb 2-1: Using ep0 maxpacket: 16 [ 186.231330][ T5326] usb 1-1: Using ep0 maxpacket: 16 [ 186.239094][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.253103][ T5229] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 186.261410][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.271540][ T5229] usb 2-1: config 0 has no interface number 0 [ 186.275441][ T1860] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 186.278514][ T5326] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 186.294519][ T5229] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 186.304545][ T5326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.312799][ T5229] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 186.324977][ T5326] usb 1-1: config 0 descriptor?? [ 186.338629][ T5229] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 186.356920][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.365175][ T5229] usb 2-1: Product: syz [ 186.371943][ T5229] usb 2-1: Manufacturer: syz [ 186.376874][ T5229] usb 2-1: SerialNumber: syz [ 186.394542][ T5229] usb 2-1: config 0 descriptor?? [ 186.400980][ T8830] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.408439][ T937] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 186.425487][ T8830] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.445432][ T1860] usb 4-1: Using ep0 maxpacket: 8 [ 186.464713][ T1860] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 186.503707][ T1860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.513560][ T5280] usb 3-1: USB disconnect, device number 22 [ 186.519735][ T1860] usb 4-1: Product: syz [ 186.524140][ T1860] usb 4-1: Manufacturer: syz [ 186.535629][ T1860] usb 4-1: SerialNumber: syz [ 186.552839][ T1860] usb 4-1: config 0 descriptor?? [ 186.565645][ T937] usb 5-1: Using ep0 maxpacket: 32 [ 186.572333][ T1860] gspca_main: se401-2.14.0 probing 047d:5003 [ 186.574132][ T937] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.603800][ T937] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 186.624576][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 186.647727][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 186.656246][ T8830] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.665802][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 186.677473][ T8830] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.693954][ T937] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.721258][ T937] usb 5-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 186.745344][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.754740][ T937] usb 5-1: Product: syz [ 186.766891][ T937] usb 5-1: Manufacturer: syz [ 186.782307][ T937] usb 5-1: SerialNumber: syz [ 186.787512][ T5326] megaworld 0003:07B5:0312.0044: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.0-1/input0 [ 186.807815][ T937] usb 5-1: config 0 descriptor?? [ 186.823221][ T5326] megaworld 0003:07B5:0312.0044: no inputs found [ 186.833608][ T8844] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 186.845608][ T8844] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 186.879574][ T937] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 187.032145][ T5280] usb 1-1: USB disconnect, device number 22 [ 187.092432][ T5279] usb 5-1: USB disconnect, device number 24 [ 187.107152][ T5229] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 187.133492][ T5229] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 187.155151][ T5229] asix 2-1:0.251: probe with driver asix failed with error -71 [ 187.168587][ T5229] usb 2-1: USB disconnect, device number 20 [ 187.216791][ T29] audit: type=1326 audit(1727635936.216:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 187.253730][ T29] audit: type=1326 audit(1727635936.246:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 187.296352][ T29] audit: type=1326 audit(1727635936.246:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 187.318467][ T29] audit: type=1326 audit(1727635936.246:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 187.340846][ T29] audit: type=1326 audit(1727635936.246:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 187.363458][ T29] audit: type=1326 audit(1727635936.256:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 187.386822][ T29] audit: type=1326 audit(1727635936.256:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f80579 code=0x7ffc0000 [ 187.395353][ T1860] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 187.625107][ T5279] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 187.797614][ T1860] gspca_se401: read req failed req 0x06 error -71 [ 187.834042][ T1860] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 187.851115][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.856539][ T8858] netlink: 'syz.1.1591': attribute type 32 has an invalid length. [ 187.872957][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1591'. [ 187.880966][ T1860] usb 4-1: USB disconnect, device number 28 [ 187.888980][ T8858] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 187.891015][ T5279] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 187.955518][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.984565][ T5279] usb 3-1: config 0 descriptor?? [ 188.335432][ T46] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 188.419226][ T8873] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 188.487423][ T46] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.499380][ T5279] mcp2221 0003:04D8:00DD.0045: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 188.511673][ T46] usb 5-1: config 0 has no interface number 0 [ 188.532013][ T46] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 188.551656][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.584733][ T46] usb 5-1: Product: syz [ 188.595321][ T46] usb 5-1: Manufacturer: syz [ 188.600030][ T46] usb 5-1: SerialNumber: syz [ 188.637184][ T46] usb 5-1: config 0 descriptor?? [ 188.829232][ T5279] usb 3-1: USB disconnect, device number 23 [ 188.855793][ T46] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 188.867477][ T46] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 188.885652][ T46] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 188.914258][ T46] usb 5-1: media controller created [ 188.974418][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.325672][ T5279] usb 5-1: USB disconnect, device number 25 [ 189.326364][ T5326] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 189.497179][ T5326] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 189.515334][ T5326] usb 1-1: config 0 has an invalid interface number: 229 but max is 0 [ 189.535293][ T5326] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 189.554600][ T5326] usb 1-1: config 0 has no interface number 0 [ 189.564734][ T5326] usb 1-1: config 0 has no interface number 1 [ 189.575366][ T5326] usb 1-1: config 0 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 189.601378][ T5326] usb 1-1: config 0 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.634432][ T5326] usb 1-1: too many endpoints for config 0 interface 229 altsetting 129: 54, using maximum allowed: 30 [ 189.672471][ T5326] usb 1-1: config 0 interface 229 altsetting 129 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 189.693945][ T5326] usb 1-1: config 0 interface 229 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 54 [ 189.731934][ T5326] usb 1-1: config 0 interface 229 has no altsetting 0 [ 189.744940][ T5326] usb 1-1: New USB device found, idVendor=0565, idProduct=0005, bcdDevice= 9.0b [ 189.759254][ T5326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.775306][ T5326] usb 1-1: Product: syz [ 189.785416][ T5326] usb 1-1: Manufacturer: syz [ 189.800273][ T5326] usb 1-1: SerialNumber: syz [ 189.802312][ T5326] usb 1-1: config 0 descriptor?? [ 190.022801][ T5326] kaweth 1-1:0.213: Firmware present in device. [ 190.088282][ T8922] dccp_invalid_packet: P.Data Offset(4) too small [ 190.273018][ T5326] kaweth 1-1:0.213: Error reading configuration (-71), no net device created [ 190.273224][ T5326] kaweth 1-1:0.213: probe with driver kaweth failed with error -5 [ 190.309079][ T5326] kaweth 1-1:0.229: Firmware present in device. [ 190.315688][ T5326] kaweth 1-1:0.229: Error reading configuration (-71), no net device created [ 190.315802][ T5326] kaweth 1-1:0.229: probe with driver kaweth failed with error -5 [ 190.334112][ T5326] usb 1-1: USB disconnect, device number 23 [ 190.785378][ T5326] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 190.835390][ T5279] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 190.946960][ T5326] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.957515][ T5326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.977313][ T5326] usb 5-1: config 0 descriptor?? [ 190.989568][ T5326] cp210x 5-1:0.0: cp210x converter detected [ 190.989923][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.023380][ T5279] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 191.050246][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.064494][ T5279] usb 4-1: config 0 descriptor?? [ 191.400951][ T5326] usb 5-1: cp210x converter now attached to ttyUSB0 [ 191.455769][ T937] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 191.506422][ T5279] mcp2221 0003:04D8:00DD.0046: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 191.614371][ T5326] usb 5-1: USB disconnect, device number 26 [ 191.628035][ T5326] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 191.640513][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 191.654224][ T937] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.670970][ T937] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 191.685880][ T5326] cp210x 5-1:0.0: device disconnected [ 191.713523][ T8964] loop4: detected capacity change from 0 to 524287999 [ 191.713592][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 191.736657][ T5279] usb 4-1: USB disconnect, device number 29 [ 191.738612][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 191.759184][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.762008][ C1] blk_print_req_error: 7 callbacks suppressed [ 191.762026][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.775800][ T937] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 191.778225][ C1] buffer_io_error: 7 callbacks suppressed [ 191.778238][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 191.791790][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.830055][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.839465][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 191.873327][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.878403][ T937] usb 1-1: Product: syz [ 191.882534][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 191.893011][ T937] usb 1-1: Manufacturer: syz [ 191.904690][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.908274][ T937] usb 1-1: SerialNumber: syz [ 191.913879][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 191.929433][ T8966] x_tables: ip_tables: udp.0 match: invalid size 16 (kernel) != (user) 24 [ 191.935866][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.947142][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 191.958184][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.960492][ T937] usb 1-1: config 0 descriptor?? [ 191.967469][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 191.981777][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.990983][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 192.005550][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.014725][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 192.023047][ T8964] ldm_validate_partition_table(): Disk read failed. [ 192.040482][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.049732][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 192.058032][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.067269][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 192.081994][ T8964] Dev loop4: unable to read RDB block 0 [ 192.092668][ T8964] loop4: unable to read partition table [ 192.100849][ T8964] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 192.260746][ T937] appledisplay 1-1:0.0: Error while getting initial brightness: -110 [ 192.276697][ T937] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -110 [ 192.312986][ T937] usb 1-1: USB disconnect, device number 24 [ 192.451884][ T8976] netlink: 'syz.3.1649': attribute type 29 has an invalid length. [ 192.495679][ T5229] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 192.535636][ T8976] netlink: 'syz.3.1649': attribute type 29 has an invalid length. [ 192.582433][ T8981] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 192.589334][ T8981] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.625571][ T8981] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 192.632060][ T8981] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.665525][ T8981] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 192.672001][ T8981] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.687321][ T8981] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 192.693801][ T8981] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 192.706943][ T5229] usb 3-1: Using ep0 maxpacket: 16 [ 192.739198][ T5229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.757207][ T5229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.790130][ T5229] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.821209][ T5229] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.838855][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.859702][ T5229] usb 3-1: config 0 descriptor?? [ 193.017932][ T46] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 193.308549][ T5229] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 193.335385][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 193.337806][ T5229] microsoft 0003:045E:07DA.0047: ignoring exceeding usage max [ 193.394280][ T5229] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 193.394319][ T5229] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 193.394350][ T5229] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 193.394379][ T5229] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 193.394408][ T5229] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 193.394437][ T5229] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 193.394466][ T5229] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 193.394494][ T5229] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 193.394523][ T5229] microsoft 0003:045E:07DA.0047: unknown main item tag 0x0 [ 193.394556][ T5229] microsoft 0003:045E:07DA.0047: unsupported Resolution Multiplier 0 [ 193.416957][ T5229] microsoft 0003:045E:07DA.0047: unsupported Resolution Multiplier 0 [ 193.417243][ T5229] microsoft 0003:045E:07DA.0047: No inputs registered, leaving [ 193.424138][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.424187][ T46] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 193.424212][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.432966][ T5229] microsoft 0003:045E:07DA.0047: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 193.433000][ T5229] microsoft 0003:045E:07DA.0047: no inputs found [ 193.433015][ T5229] microsoft 0003:045E:07DA.0047: could not initialize ff, continuing anyway [ 193.446275][ T46] usb 5-1: config 0 descriptor?? [ 193.652146][ T5229] usb 3-1: USB disconnect, device number 24 [ 193.766706][ T1860] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 193.925206][ T46] sigmamicro 0003:1C4F:0059.0048: unknown main item tag 0x0 [ 193.957275][ T46] sigmamicro 0003:1C4F:0059.0048: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.4-1/input0 [ 193.960938][ T1860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.960970][ T1860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.961003][ T1860] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 193.961028][ T1860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.964367][ T1860] usb 4-1: config 0 descriptor?? [ 194.143189][ T46] usb 5-1: USB disconnect, device number 27 [ 194.385986][ T1860] elo 0003:04E7:0030.0049: item fetching failed at offset 2/5 [ 194.386480][ T1860] elo 0003:04E7:0030.0049: parse failed [ 194.386547][ T1860] elo 0003:04E7:0030.0049: probe with driver elo failed with error -22 [ 194.494008][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.494088][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.608007][ T1860] usb 4-1: USB disconnect, device number 30 [ 195.595334][ T5279] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 195.768354][ T5279] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 195.789832][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.842957][ T5279] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 195.862979][ T5279] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 195.871153][ T5279] usb 2-1: Manufacturer: syz [ 195.886525][ T5279] usb 2-1: config 0 descriptor?? [ 195.956805][ T5279] rc_core: IR keymap rc-hauppauge not found [ 195.963027][ T5279] Registered IR keymap rc-empty [ 195.969804][ T5279] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 195.981550][ T5279] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input63 [ 195.995175][ T9068] kernel read not supported for file /eth0 (pid: 9068 comm: syz.2.1692) [ 195.995443][ T5229] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 196.025862][ T29] audit: type=1800 audit(1727635945.016:113): pid=9068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1692" name="eth0" dev="mqueue" ino=22537 res=0 errno=0 [ 196.193717][ T5229] usb 4-1: Using ep0 maxpacket: 16 [ 196.217193][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.229308][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.249565][ T5229] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 196.270845][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.283763][ T9079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1696'. [ 196.300099][ T5229] usb 4-1: config 0 descriptor?? [ 196.380264][ C1] igorplugusb 2-1:0.0: receive overflow invalid: 33 [ 196.589540][ T1860] usb 2-1: USB disconnect, device number 21 [ 196.725867][ T5229] bigben 0003:146B:0902.004A: unexpected rdesc, please submit for review [ 196.744121][ T5229] bigben 0003:146B:0902.004A: unbalanced collection at end of report description [ 196.753990][ T5229] bigben 0003:146B:0902.004A: parse failed [ 196.760095][ T5229] bigben 0003:146B:0902.004A: probe with driver bigben failed with error -22 [ 196.772379][ T5277] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 196.938301][ T5277] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.946522][ T5277] usb 1-1: config 0 has no interface number 0 [ 196.962236][ T937] usb 4-1: USB disconnect, device number 31 [ 196.983928][ T5277] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 196.993400][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.001876][ T5277] usb 1-1: Product: syz [ 197.006386][ T5277] usb 1-1: Manufacturer: syz [ 197.012061][ T5277] usb 1-1: SerialNumber: syz [ 197.021848][ T5277] usb 1-1: config 0 descriptor?? [ 197.239491][ T5277] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 197.251221][ T5277] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 197.271295][ T5277] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 197.285461][ T5277] usb 1-1: media controller created [ 197.304233][ T5277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.449910][ T5277] usb 1-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 197.469213][ T5277] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 197.554912][ T5277] DVB: Unable to find symbol mxl5005s_attach() [ 197.815831][ T5277] usb 1-1: USB disconnect, device number 25 [ 198.227323][ T2584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.305405][ T46] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 198.384834][ T2584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.485443][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 198.511989][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 198.539153][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.556258][ T2584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.559327][ T46] usb 5-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 198.593570][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.652093][ T2584] tipc: Resetting bearer [ 198.656303][ T46] usb 5-1: config 0 descriptor?? [ 198.761407][ T2584] tipc: Disabling bearer [ 198.789057][ T2584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.986536][ T4623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.001526][ T4623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.010793][ T4623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.019472][ T4623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.029779][ T4623] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 199.040868][ T4623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.075322][ T46] hid-alps 0003:044E:1215.004B: unknown main item tag 0x0 [ 199.106137][ T9152] netlink: 'syz.3.1732': attribute type 15 has an invalid length. [ 199.124278][ T46] hid-alps 0003:044E:1215.004B: item fetching failed at offset 2/5 [ 199.175876][ T46] hid-alps 0003:044E:1215.004B: parse failed [ 199.181966][ T46] hid-alps 0003:044E:1215.004B: probe with driver hid-alps failed with error -22 [ 199.261424][ T9155] netlink: 'syz.3.1734': attribute type 4 has an invalid length. [ 199.271254][ T2584] bridge_slave_1: left allmulticast mode [ 199.286886][ T2584] bridge_slave_1: left promiscuous mode [ 199.298577][ T2584] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.326181][ T2584] bridge_slave_0: left allmulticast mode [ 199.335488][ T2584] bridge_slave_0: left promiscuous mode [ 199.355823][ T2584] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.366145][ T5277] usb 5-1: USB disconnect, device number 28 [ 200.619894][ T2584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.644800][ T9188] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1749'. [ 200.654872][ T2584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.671515][ T9188] net_ratelimit: 69 callbacks suppressed [ 200.671533][ T9188] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 200.699659][ T2584] bond0 (unregistering): Released all slaves [ 201.135684][ T5230] Bluetooth: hci5: command tx timeout [ 201.147153][ T9192] tipc: Invalid UDP bearer configuration [ 201.147194][ T9192] tipc: Enabling of bearer rejected, failed to enable media [ 201.305449][ T2584] tipc: Disabling bearer [ 201.311171][ T2584] tipc: Left network mode [ 201.703097][ T5230] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 203.125753][ T9153] chnl_net:caif_netlink_parms(): no params data found [ 203.205382][ T5230] Bluetooth: hci5: command tx timeout [ 203.785476][ T5279] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 203.870994][ T2584] hsr_slave_0: left promiscuous mode [ 203.901543][ T2584] hsr_slave_1: left promiscuous mode [ 203.994491][ T2584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.002579][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 204.026313][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.027422][ T2584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.066620][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.082172][ T4623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.105123][ T4623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.113550][ T4623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.117830][ T5279] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 204.134249][ T2584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.143839][ T4623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.167804][ T4623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 204.175085][ T2584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.175204][ T4623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.205750][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.227112][ T5279] usb 1-1: config 0 descriptor?? [ 204.493665][ T2584] veth1_macvtap: left promiscuous mode [ 204.555389][ T46] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 204.645951][ T5279] bigben 0003:146B:0902.004C: unexpected rdesc, please submit for review [ 204.659891][ T5279] bigben 0003:146B:0902.004C: unbalanced collection at end of report description [ 204.669296][ T2584] veth0_macvtap: left promiscuous mode [ 204.676245][ T2584] veth1_vlan: left promiscuous mode [ 204.681687][ T2584] veth0_vlan: left promiscuous mode [ 204.705480][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 204.712399][ T5279] bigben 0003:146B:0902.004C: parse failed [ 204.721796][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.745589][ T5279] bigben 0003:146B:0902.004C: probe with driver bigben failed with error -22 [ 204.754627][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.789622][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 204.809624][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.851722][ T46] usb 5-1: config 0 descriptor?? [ 204.869455][ T46] hub 5-1:0.0: USB hub found [ 205.131211][ T46] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 205.286655][ T5230] Bluetooth: hci5: command tx timeout [ 205.319548][ T5280] usb 1-1: USB disconnect, device number 26 [ 205.341706][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 205.355650][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 205.396091][ T46] usb 5-1: USB disconnect, device number 29 [ 206.246562][ T5230] Bluetooth: hci3: command tx timeout [ 206.609684][ T9313] openvswitch: netlink: Actions may not be safe on all matching packets [ 207.265574][ T46] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 207.366166][ T5230] Bluetooth: hci5: command tx timeout [ 207.406898][ T2584] team0 (unregistering): Port device team_slave_1 removed [ 207.446956][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.457507][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.486150][ T46] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.515192][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.541764][ T46] usb 5-1: SerialNumber: syz [ 207.565598][ T2584] team0 (unregistering): Port device team_slave_0 removed [ 207.771426][ T46] usb 5-1: 0:2 : does not exist [ 207.813366][ T46] usb 5-1: USB disconnect, device number 30 [ 207.899927][ T5227] udevd[5227]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.325561][ T5230] Bluetooth: hci3: command tx timeout [ 208.712689][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.732013][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.744571][ T9153] bridge_slave_0: entered allmulticast mode [ 208.775200][ T9153] bridge_slave_0: entered promiscuous mode [ 208.775479][ T46] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 208.973032][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.000958][ T46] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.017224][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.028914][ T46] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.066000][ T9153] bridge_slave_1: entered allmulticast mode [ 209.073335][ T9153] bridge_slave_1: entered promiscuous mode [ 209.085860][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.112807][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 209.155515][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 209.169738][ T46] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.179162][ T46] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.195318][ T46] usb 5-1: Product: syz [ 209.199941][ T46] usb 5-1: Manufacturer: syz [ 209.224738][ T46] cdc_wdm 5-1:1.0: skipping garbage [ 209.233092][ T46] cdc_wdm 5-1:1.0: skipping garbage [ 209.282454][ T46] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 209.290761][ T46] cdc_wdm 5-1:1.0: Unknown control protocol [ 209.347820][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.384032][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.522615][ T5280] usb 5-1: USB disconnect, device number 31 [ 209.616548][ T9153] team0: Port device team_slave_0 added [ 209.906522][ T9331] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1796'. [ 209.949944][ T9153] team0: Port device team_slave_1 added [ 209.967737][ T9331] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 210.325933][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.332920][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.425329][ T5230] Bluetooth: hci3: command tx timeout [ 210.605361][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.673007][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.733125][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.773365][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 210.845558][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 210.865490][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.938198][ T9279] chnl_net:caif_netlink_parms(): no params data found [ 211.328576][ T9153] hsr_slave_0: entered promiscuous mode [ 211.424321][ T9153] hsr_slave_1: entered promiscuous mode [ 211.535480][ T9153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.543091][ T9153] Cannot create hsr debugfs directory [ 212.066800][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.073983][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.139829][ T9279] bridge_slave_0: entered allmulticast mode [ 212.180299][ T9279] bridge_slave_0: entered promiscuous mode [ 212.290880][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.331329][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.385888][ T9279] bridge_slave_1: entered allmulticast mode [ 212.426239][ T9279] bridge_slave_1: entered promiscuous mode [ 212.485366][ T5230] Bluetooth: hci3: command tx timeout [ 212.774884][ T2584] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.875975][ T2584] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.116427][ T9279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.567532][ T2584] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.594831][ T2584] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.640160][ T9279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.869817][ T2584] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.939671][ T2584] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.072027][ T9279] team0: Port device team_slave_0 added [ 214.325831][ T2584] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.343666][ T2584] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.387810][ T9279] team0: Port device team_slave_1 added [ 214.466548][ T9419] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.472738][ T9419] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.512596][ T9419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.541993][ T9419] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.585701][ T9419] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 214.615946][ T9419] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 214.704796][ T9419] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 214.729175][ T9419] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.739584][ T9419] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.762759][ T9419] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 214.835109][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.855297][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.881227][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.945299][ T9279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.967746][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.974739][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.000711][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.045459][ T9279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.670467][ T29] audit: type=1326 audit(1727635964.666:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.0.1841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 215.807460][ T29] audit: type=1326 audit(1727635964.786:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.0.1841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 215.998692][ T9279] hsr_slave_0: entered promiscuous mode [ 216.027992][ T9279] hsr_slave_1: entered promiscuous mode [ 216.068294][ T9279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.108241][ T9279] Cannot create hsr debugfs directory [ 216.381049][ T9153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.470648][ T9153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.485465][ T5230] Bluetooth: hci1: command 0x0c1a tx timeout [ 216.492482][ T4623] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.505811][ T2584] bridge_slave_1: left allmulticast mode [ 216.525421][ T29] audit: type=1326 audit(1727635964.796:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.0.1841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 216.549446][ T29] audit: type=1326 audit(1727635964.796:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.0.1841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 216.574136][ T5230] Bluetooth: hci4: command 0x0c1a tx timeout [ 216.580315][ T4623] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.586629][ T29] audit: type=1326 audit(1727635964.806:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.0.1841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=93 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 216.609905][ T29] audit: type=1326 audit(1727635964.806:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.0.1841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f60579 code=0x7ffc0000 [ 216.645423][ T5230] Bluetooth: hci5: command 0x0c1a tx timeout [ 216.685407][ T5277] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 216.805355][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.837336][ T5277] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 216.855384][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.894549][ T5277] pwc: Logitech ViewPort AV 100 webcam detected. [ 216.995386][ T2584] bridge_slave_1: left promiscuous mode [ 217.001257][ T2584] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.042226][ T2584] bridge_slave_0: left allmulticast mode [ 217.089026][ T2584] bridge_slave_0: left promiscuous mode [ 217.094858][ T2584] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.629228][ T5277] pwc: recv_control_msg error -71 req 02 val 2b00 [ 217.648870][ T5277] pwc: recv_control_msg error -71 req 02 val 2700 [ 217.666225][ T5277] pwc: recv_control_msg error -71 req 04 val 1600 [ 217.689266][ T5277] pwc: recv_control_msg error -71 req 02 val 2c00 [ 217.703742][ T5277] pwc: recv_control_msg error -71 req 04 val 1000 [ 217.724682][ T5277] pwc: recv_control_msg error -71 req 04 val 1300 [ 217.786822][ T5277] pwc: recv_control_msg error -71 req 04 val 1400 [ 217.798718][ T5277] pwc: recv_control_msg error -71 req 02 val 2000 [ 217.813449][ T5277] pwc: recv_control_msg error -71 req 02 val 2100 [ 217.845395][ T5277] pwc: recv_control_msg error -71 req 06 val 0600 [ 217.867655][ T5277] pwc: recv_control_msg error -71 req 04 val 1500 [ 217.892333][ T5277] pwc: recv_control_msg error -71 req 02 val 2500 [ 217.923712][ T5277] pwc: recv_control_msg error -71 req 02 val 2400 [ 217.954481][ T5277] pwc: recv_control_msg error -71 req 02 val 2600 [ 217.997538][ T5277] pwc: recv_control_msg error -71 req 02 val 2900 [ 218.035848][ T5277] pwc: recv_control_msg error -71 req 02 val 2800 [ 218.059003][ T5277] pwc: recv_control_msg error -71 req 04 val 1100 [ 218.083323][ T5277] pwc: recv_control_msg error -71 req 04 val 1200 [ 218.122386][ T5277] pwc: Registered as video71. [ 218.193080][ T5277] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input64 [ 218.232857][ T5277] usb 1-1: USB disconnect, device number 27 [ 218.732750][ T5230] Bluetooth: hci5: command 0x0c1a tx timeout [ 218.819148][ T2584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.841275][ T2584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.875104][ T2584] bond0 (unregistering): Released all slaves [ 218.897411][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.930248][ T9153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.979776][ T9500] netlink: 'syz.4.1851': attribute type 50 has an invalid length. [ 219.086650][ T9153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.173685][ T2584] tipc: Disabling bearer [ 219.189485][ T2584] tipc: Left network mode [ 219.306239][ T9512] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 219.313012][ T9512] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 219.395560][ T5326] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 219.408838][ T9512] vhci_hcd vhci_hcd.0: Device attached [ 219.452967][ T9513] vhci_hcd: connection closed [ 219.456931][ T62] vhci_hcd: stop threads [ 219.493783][ T62] vhci_hcd: release socket [ 219.532413][ T62] vhci_hcd: disconnect device [ 219.575532][ T5326] usb 1-1: Using ep0 maxpacket: 32 [ 219.595665][ T5229] vhci_hcd: vhci_device speed not set [ 219.615295][ T5326] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 219.656121][ T5326] usb 1-1: config 0 has no interface number 0 [ 219.686643][ T5326] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 219.725348][ T5326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.757329][ T5326] usb 1-1: Product: syz [ 219.761541][ T5326] usb 1-1: Manufacturer: syz [ 219.799654][ T5326] usb 1-1: SerialNumber: syz [ 219.837435][ T5326] usb 1-1: config 0 descriptor?? [ 219.876973][ T5326] smsc95xx v2.0.0 [ 219.932384][ T2584] hsr_slave_0: left promiscuous mode [ 219.952953][ T2584] hsr_slave_1: left promiscuous mode [ 219.986695][ T2584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.044020][ T2584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.099730][ T2584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.157909][ T2584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.271541][ T2584] veth1_macvtap: left promiscuous mode [ 220.315447][ T2584] veth0_macvtap: left promiscuous mode [ 220.332266][ T2584] veth1_vlan: left promiscuous mode [ 220.366632][ T2584] veth0_vlan: left promiscuous mode [ 220.527934][ T5326] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 220.576322][ T5326] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 220.622334][ T5326] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 220.700997][ T5326] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 220.756011][ T5326] usb 1-1: USB disconnect, device number 28 [ 220.805766][ T5230] Bluetooth: hci5: command 0x0c1a tx timeout [ 220.972802][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 221.384759][ T9538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1866'. [ 221.997807][ T2584] team0 (unregistering): Port device team_slave_1 removed [ 222.087487][ T2584] team0 (unregistering): Port device team_slave_0 removed [ 223.343708][ T9552] openvswitch: netlink: Actions may not be safe on all matching packets [ 223.681552][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.898523][ T9153] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.995388][ T5277] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 224.079436][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.086625][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.144689][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.151876][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.196504][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 224.231025][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.286840][ T9279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.308626][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.377813][ T9279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.397722][ T5277] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 224.435288][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.483276][ T5277] usb 1-1: config 0 descriptor?? [ 224.504233][ T9279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.730250][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.841581][ T9279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.044900][ T5277] hid-picolcd 0003:04D8:F002.004D: No report with id 0xf3 found [ 225.079633][ T5277] hid-picolcd 0003:04D8:F002.004D: No report with id 0xf4 found [ 225.119322][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.243820][ T5277] usb 1-1: USB disconnect, device number 29 [ 225.301355][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.312281][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.322009][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.333154][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.342264][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.390843][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.617800][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.713977][ T9153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.747751][ T9153] veth0_vlan: entered promiscuous mode [ 225.760746][ T9153] veth1_vlan: entered promiscuous mode [ 225.782693][ T9153] veth0_macvtap: entered promiscuous mode [ 225.791904][ T9153] veth1_macvtap: entered promiscuous mode [ 225.807804][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.818508][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.828698][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.839385][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.849564][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.860682][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.871215][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.881973][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.897115][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.943604][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.034536][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.045796][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.085367][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.108319][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.129797][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.155331][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.182036][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.220076][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.244122][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.299820][ T9153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.324092][ T9153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.349674][ T9153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.373433][ T9153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.456360][ T29] audit: type=1326 audit(1727635975.446:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7fc00000 [ 226.552736][ T9279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.573325][ T9279] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.593372][ T1834] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.600534][ T1834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.644967][ T1834] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.652149][ T1834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.869617][ T9624] fuse: Unknown parameter 'nol' [ 227.001709][ T9279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.029151][ T9279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.061922][ T9279] veth0_vlan: entered promiscuous mode [ 227.073667][ T9279] veth1_vlan: entered promiscuous mode [ 227.201570][ T2584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.209884][ T2584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.217711][ T2584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.225614][ T2584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.348436][ T35] bridge_slave_1: left allmulticast mode [ 227.362205][ T35] bridge_slave_1: left promiscuous mode [ 227.381907][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.432688][ T35] bridge_slave_0: left allmulticast mode [ 227.445811][ T5230] Bluetooth: hci4: command tx timeout [ 227.465114][ T35] bridge_slave_0: left promiscuous mode [ 227.496096][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.055341][ T5279] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 228.490461][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.512740][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.542108][ T5279] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 228.561826][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.578695][ T5279] usb 4-1: config 0 descriptor?? [ 228.670590][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.712834][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.737537][ T35] bond0 (unregistering): Released all slaves [ 228.818861][ T9578] chnl_net:caif_netlink_parms(): no params data found [ 228.878424][ T9279] veth0_macvtap: entered promiscuous mode [ 228.885499][ T35] tipc: Disabling bearer [ 228.909660][ T35] tipc: Left network mode [ 229.002226][ T5279] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 229.021377][ T5279] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 229.029423][ T5279] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 229.037004][ T5279] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 229.045705][ T5279] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 229.053512][ T5279] gembird 0003:11FF:3331.004E: unknown main item tag 0x0 [ 229.075607][ T5279] gembird 0003:11FF:3331.004E: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.3-1/input0 [ 229.143832][ T9279] veth1_macvtap: entered promiscuous mode [ 229.253170][ T5279] usb 4-1: USB disconnect, device number 32 [ 229.440796][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.485324][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.495182][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.526384][ T5230] Bluetooth: hci4: command tx timeout [ 229.531901][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.570637][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.618228][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.646929][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.683749][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.723536][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.734713][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.751145][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.872923][ T35] hsr_slave_0: left promiscuous mode [ 229.887593][ T35] hsr_slave_1: left promiscuous mode [ 229.903758][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.911888][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.950018][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.965370][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.011150][ T35] veth1_macvtap: left promiscuous mode [ 230.021591][ T35] veth0_macvtap: left promiscuous mode [ 230.036653][ T35] veth1_vlan: left promiscuous mode [ 230.047010][ T35] veth0_vlan: left promiscuous mode [ 230.963720][ T35] team0 (unregistering): Port device team_slave_1 removed [ 231.016251][ T35] team0 (unregistering): Port device team_slave_0 removed [ 231.615911][ T5230] Bluetooth: hci4: command tx timeout [ 231.629774][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.637243][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.644445][ T9578] bridge_slave_0: entered allmulticast mode [ 231.651949][ T9578] bridge_slave_0: entered promiscuous mode [ 231.660194][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.667512][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.674702][ T9578] bridge_slave_1: entered allmulticast mode [ 231.681945][ T9578] bridge_slave_1: entered promiscuous mode [ 231.703952][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.742176][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.760190][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.773073][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.791023][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.804170][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.822251][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.833092][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.860346][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.979672][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.005020][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.131872][ T9578] team0: Port device team_slave_0 added [ 232.149751][ T9279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.167597][ T9279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.176613][ T9279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.185450][ T9279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.209760][ T46] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 232.267599][ T9578] team0: Port device team_slave_1 added [ 232.285788][ T5229] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 232.408331][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.415707][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.442299][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.455890][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.464353][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.474040][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.505429][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.506720][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.571637][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.610413][ T46] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 232.636605][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.674644][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.701874][ T35] IPVS: stop unused estimator thread 0... [ 232.709579][ T5229] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 232.756477][ T5229] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.765824][ T5229] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.777030][ T5229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 232.790221][ T46] usb 4-1: config 0 descriptor?? [ 232.797237][ T5229] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.806430][ T5229] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.828300][ T5229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 232.845958][ T5229] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.859243][ T5229] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.905332][ T5229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 232.922243][ T9578] hsr_slave_0: entered promiscuous mode [ 232.931515][ T5229] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 232.942789][ T9578] hsr_slave_1: entered promiscuous mode [ 232.955338][ T5229] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 232.986599][ T5229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.005447][ T9578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.013070][ T9578] Cannot create hsr debugfs directory [ 233.019823][ T5229] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.033049][ T5229] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.070688][ T5229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.112437][ T5229] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.138737][ T5229] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.158862][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.175808][ T5229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.204949][ T5229] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.222091][ T5229] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.262872][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.263711][ T5229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.274984][ T46] magicmouse 0003:05AC:0269.004F: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 233.296873][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.321170][ T5229] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 233.355085][ T5229] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 233.378598][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.392013][ T4623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.401410][ T5229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.411601][ T4623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.432248][ T5229] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 233.443788][ T5229] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 233.453493][ T5229] usb 1-1: Product: syz [ 233.457792][ T5229] usb 1-1: Manufacturer: syz [ 233.463309][ T5229] usb 1-1: SerialNumber: syz [ 233.474156][ T5229] usb 1-1: config 0 descriptor?? [ 233.479805][ T4623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.490608][ T4623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.502696][ T5229] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 233.515108][ T4623] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 233.542531][ T4623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.560333][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.645985][ T5229] usb 4-1: USB disconnect, device number 33 [ 233.682386][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.695630][ T4623] Bluetooth: hci4: command tx timeout [ 233.984365][ T1860] usb 1-1: USB disconnect, device number 30 [ 234.000450][ T1860] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 234.237744][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 234.323525][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 234.391887][ T35] bridge_slave_1: left allmulticast mode [ 234.413709][ T35] bridge_slave_1: left promiscuous mode [ 234.420832][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.440220][ T35] bridge_slave_0: left allmulticast mode [ 234.455520][ T35] bridge_slave_0: left promiscuous mode [ 234.463948][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.609019][ T4623] Bluetooth: hci5: command tx timeout [ 235.996762][ T46] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 236.175375][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 236.203720][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.244654][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.298900][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.362892][ T46] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 236.399913][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.522139][ T46] usb 4-1: config 0 descriptor?? [ 236.531488][ T9792] program syz.0.1922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.977253][ T46] ryos 0003:1E7D:31CE.0050: invalid report_count -1631636458 [ 236.999649][ T46] ryos 0003:1E7D:31CE.0050: item 0 4 1 9 parsing failed [ 237.034866][ T46] ryos 0003:1E7D:31CE.0050: parse failed [ 237.066953][ T46] ryos 0003:1E7D:31CE.0050: probe with driver ryos failed with error -22 [ 237.235111][ T46] usb 4-1: USB disconnect, device number 34 [ 237.686307][ T4623] Bluetooth: hci5: command tx timeout [ 239.125687][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.179886][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.233434][ T35] bond0 (unregistering): Released all slaves [ 239.765634][ T4623] Bluetooth: hci5: command tx timeout [ 241.845988][ T4623] Bluetooth: hci5: command tx timeout [ 244.620377][ T5326] sched: DL replenish lagged too much [ 245.789633][ T5230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.801014][ T5230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.815533][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.824744][ T5230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.832824][ T5230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 245.842802][ T5230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 247.795873][ T4623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 247.806517][ T4623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 247.822501][ T4623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 247.833216][ T4623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 247.841716][ T4623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 247.849492][ T4623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.925509][ T4623] Bluetooth: hci6: command tx timeout [ 249.925838][ T4623] Bluetooth: hci7: command tx timeout [ 250.005366][ T4623] Bluetooth: hci6: command tx timeout [ 250.297472][ T5230] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 250.309371][ T5230] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 250.317419][ T5230] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 250.327301][ T5230] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 250.335125][ T5230] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 250.343089][ T5230] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 252.005463][ T4623] Bluetooth: hci7: command tx timeout [ 252.085841][ T4623] Bluetooth: hci6: command tx timeout [ 252.412172][ T4623] Bluetooth: hci8: command tx timeout [ 254.085665][ T4623] Bluetooth: hci7: command tx timeout [ 254.165427][ T4623] Bluetooth: hci6: command tx timeout [ 254.492049][ T4623] Bluetooth: hci8: command tx timeout [ 255.931432][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.937929][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.165310][ T4623] Bluetooth: hci7: command tx timeout [ 256.565645][ T4623] Bluetooth: hci8: command tx timeout [ 258.645630][ T4623] Bluetooth: hci8: command tx timeout [ 287.760969][ T5230] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 287.771337][ T5230] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 287.779715][ T5230] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 287.789760][ T5230] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 287.797675][ T5230] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 287.808237][ T5230] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 289.845870][ T5230] Bluetooth: hci9: command tx timeout [ 291.932255][ T5230] Bluetooth: hci9: command tx timeout [ 293.686438][ T4623] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 293.699207][ T4623] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 293.708278][ T4623] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 293.716917][ T4623] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 293.724831][ T4623] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 293.732884][ T4623] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 294.005731][ T4623] Bluetooth: hci9: command tx timeout [ 295.765457][ T4623] Bluetooth: hci10: command tx timeout [ 296.085702][ T4623] Bluetooth: hci9: command tx timeout [ 297.845426][ T4623] Bluetooth: hci10: command tx timeout [ 299.925418][ T4623] Bluetooth: hci10: command tx timeout [ 302.007142][ T4623] Bluetooth: hci10: command tx timeout [ 307.362919][ T5230] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 307.374296][ T5230] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 307.382644][ T5230] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 307.395712][ T5230] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 307.406708][ T5230] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 307.414172][ T5230] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 308.172702][ T4623] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 308.183477][ T4623] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 308.195527][ T4623] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 308.204229][ T4623] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 308.214490][ T4623] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 308.222353][ T4623] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 309.445407][ T4623] Bluetooth: hci11: command tx timeout [ 310.250847][ T4623] Bluetooth: hci12: command tx timeout [ 311.324278][ T5230] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 311.334106][ T5230] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 311.342931][ T5230] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 311.351290][ T5230] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 311.359965][ T5230] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 311.371036][ T5230] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 311.525776][ T5230] Bluetooth: hci11: command tx timeout [ 312.329240][ T5230] Bluetooth: hci12: command tx timeout [ 312.632255][ T9794] netlink: 'syz.0.1923': attribute type 29 has an invalid length. [ 312.685328][ T9811] tipc: Enabling of bearer rejected, failed to enable media [ 313.450382][ T5230] Bluetooth: hci13: command tx timeout [ 313.605403][ T5230] Bluetooth: hci11: command tx timeout [ 314.405740][ T5230] Bluetooth: hci12: command tx timeout [ 315.525355][ T5230] Bluetooth: hci13: command tx timeout [ 315.685382][ T5230] Bluetooth: hci11: command tx timeout [ 316.485373][ T5230] Bluetooth: hci12: command tx timeout [ 317.379702][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.386433][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.609892][ T5230] Bluetooth: hci13: command tx timeout [ 319.685470][ T5230] Bluetooth: hci13: command tx timeout [ 349.073481][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.083255][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.091350][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.099230][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.109674][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 349.135287][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.172816][ T4623] Bluetooth: hci4: command 0x0406 tx timeout [ 351.205463][ T5230] Bluetooth: hci0: command tx timeout [ 353.285553][ T5230] Bluetooth: hci0: command tx timeout [ 353.905856][ T4623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.917293][ T4623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.925446][ T4623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.933401][ T4623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.941243][ T4623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.948650][ T4623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.365503][ T4623] Bluetooth: hci0: command tx timeout [ 356.005458][ T4623] Bluetooth: hci1: command tx timeout [ 357.445549][ T4623] Bluetooth: hci0: command tx timeout [ 358.085474][ T4623] Bluetooth: hci1: command tx timeout [ 360.165445][ T4623] Bluetooth: hci1: command tx timeout [ 362.253678][ T4623] Bluetooth: hci1: command tx timeout [ 367.689374][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.705438][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.714027][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.723065][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.735751][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 367.744797][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.698820][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.708954][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.717336][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.726210][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.738730][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 368.746194][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.845875][ T5236] Bluetooth: hci3: command tx timeout [ 370.725502][ T5230] Bluetooth: hci6: command 0x0406 tx timeout [ 370.731653][ T4623] Bluetooth: hci7: command 0x0406 tx timeout [ 370.805395][ T5230] Bluetooth: hci5: command tx timeout [ 371.740874][ T4623] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 371.750619][ T4623] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 371.759721][ T4623] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 371.779741][ T4623] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 371.789029][ T4623] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 371.797330][ T4623] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 371.925549][ T4623] Bluetooth: hci3: command tx timeout [ 372.885518][ T4623] Bluetooth: hci5: command tx timeout [ 373.851306][ T5230] Bluetooth: hci14: command tx timeout [ 374.005440][ T5230] Bluetooth: hci3: command tx timeout [ 374.965694][ T5230] Bluetooth: hci5: command tx timeout [ 375.772456][ T5230] Bluetooth: hci8: command 0x0406 tx timeout [ 375.925630][ T4623] Bluetooth: hci14: command tx timeout [ 376.085580][ T4623] Bluetooth: hci3: command tx timeout [ 377.045434][ T4623] Bluetooth: hci5: command tx timeout [ 378.005665][ T4623] Bluetooth: hci14: command tx timeout [ 378.820448][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.827005][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.085991][ T4623] Bluetooth: hci14: command tx timeout [ 408.785991][ T5230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 408.798392][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 408.806451][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 408.814433][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 408.822891][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 408.830792][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 409.166772][ T9879] chnl_net:caif_netlink_parms(): no params data found [ 409.535676][ T9879] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.546440][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.553690][ T9879] bridge_slave_0: entered allmulticast mode [ 409.595541][ T9879] bridge_slave_0: entered promiscuous mode [ 409.615509][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.622638][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.662065][ T9879] bridge_slave_1: entered allmulticast mode [ 409.685404][ T9879] bridge_slave_1: entered promiscuous mode [ 409.824962][ T9879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.868356][ T9879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.056815][ T9879] team0: Port device team_slave_0 added [ 410.104183][ T9879] team0: Port device team_slave_1 added [ 410.241749][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.272789][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.345426][ T9879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.396041][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.403027][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.486689][ T9879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.713076][ T9879] hsr_slave_0: entered promiscuous mode [ 410.740484][ T9879] hsr_slave_1: entered promiscuous mode [ 410.763947][ T9879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.794096][ T9879] Cannot create hsr debugfs directory [ 410.894305][ T5230] Bluetooth: hci7: command tx timeout [ 411.605712][ T5230] Bluetooth: hci9: command 0x0406 tx timeout [ 412.965440][ T4623] Bluetooth: hci7: command tx timeout [ 414.491161][ T5230] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 414.503245][ T5230] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 414.511957][ T5230] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 414.520955][ T5230] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 414.528755][ T5230] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 414.538048][ T5230] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 415.045532][ T5230] Bluetooth: hci7: command tx timeout [ 415.098831][ T9890] chnl_net:caif_netlink_parms(): no params data found [ 415.614553][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.645473][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.652758][ T9890] bridge_slave_0: entered allmulticast mode [ 415.696715][ T9890] bridge_slave_0: entered promiscuous mode [ 415.716102][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.737137][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.744546][ T9890] bridge_slave_1: entered allmulticast mode [ 415.776498][ T9890] bridge_slave_1: entered promiscuous mode [ 415.978294][ T9890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.026580][ T9890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.188752][ T9890] team0: Port device team_slave_0 added [ 416.211384][ T9890] team0: Port device team_slave_1 added [ 416.331269][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.358630][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.445083][ T9890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.477406][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.484383][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.576385][ T9890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.655307][ T5230] Bluetooth: hci15: command tx timeout [ 416.725703][ T5230] Bluetooth: hci10: command 0x0406 tx timeout [ 416.897140][ T9890] hsr_slave_0: entered promiscuous mode [ 416.927994][ T9890] hsr_slave_1: entered promiscuous mode [ 416.954472][ T9890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.982667][ T9890] Cannot create hsr debugfs directory [ 417.125388][ T4623] Bluetooth: hci7: command tx timeout [ 418.725462][ T4623] Bluetooth: hci15: command tx timeout [ 420.805615][ T4623] Bluetooth: hci15: command tx timeout [ 422.885458][ T4623] Bluetooth: hci15: command tx timeout [ 428.362850][ T5230] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 428.375296][ T5230] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 428.383364][ T5230] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 428.391567][ T5230] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 428.399351][ T5230] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 428.436065][ T5230] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 429.017420][ T5230] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 429.036693][ T5230] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 429.046856][ T5230] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 429.054943][ T5230] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 429.063090][ T5230] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 429.070884][ T5230] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 429.744521][ T9907] chnl_net:caif_netlink_parms(): no params data found [ 430.111126][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.135224][ T9907] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.155401][ T9907] bridge_slave_0: entered allmulticast mode [ 430.162517][ T9907] bridge_slave_0: entered promiscuous mode [ 430.199806][ T9907] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.235497][ T9907] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.242789][ T9907] bridge_slave_1: entered allmulticast mode [ 430.285515][ T9907] bridge_slave_1: entered promiscuous mode [ 430.397666][ T9907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.439244][ T9907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.485552][ T9865] Bluetooth: hci16: command tx timeout [ 430.571336][ T9907] team0: Port device team_slave_0 added [ 430.609688][ T9907] team0: Port device team_slave_1 added [ 430.785356][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.792344][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.895719][ T9907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.947490][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.954541][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.055267][ T9907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.205614][ T9865] Bluetooth: hci17: command tx timeout [ 431.231500][ T9907] hsr_slave_0: entered promiscuous mode [ 431.265075][ T9907] hsr_slave_1: entered promiscuous mode [ 431.306721][ T9907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.334594][ T9907] Cannot create hsr debugfs directory [ 432.093150][ T9865] Bluetooth: hci11: command 0x0406 tx timeout [ 432.099630][ T5236] Bluetooth: hci12: command 0x0406 tx timeout [ 432.349663][ T4623] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 432.359377][ T4623] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 432.368356][ T4623] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 432.386576][ T4623] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 432.395611][ T4623] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 432.403561][ T4623] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 432.575488][ T4623] Bluetooth: hci16: command tx timeout [ 432.929069][ T9916] chnl_net:caif_netlink_parms(): no params data found [ 433.257399][ T9916] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.285630][ T4623] Bluetooth: hci17: command tx timeout [ 433.291389][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.305914][ T9916] bridge_slave_0: entered allmulticast mode [ 433.335490][ T9916] bridge_slave_0: entered promiscuous mode [ 433.344267][ T9916] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.369301][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.395615][ T9916] bridge_slave_1: entered allmulticast mode [ 433.426468][ T9916] bridge_slave_1: entered promiscuous mode [ 433.536396][ T9916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.579513][ T9916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.766342][ T9916] team0: Port device team_slave_0 added [ 433.796459][ T9916] team0: Port device team_slave_1 added [ 433.885723][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.892714][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.995472][ T9916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.036923][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.043923][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.135779][ T9916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.370136][ T9916] hsr_slave_0: entered promiscuous mode [ 434.417228][ T9916] hsr_slave_1: entered promiscuous mode [ 434.466733][ T9916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.486816][ T4623] Bluetooth: hci18: command tx timeout [ 434.506178][ T9916] Cannot create hsr debugfs directory [ 434.645616][ T4623] Bluetooth: hci16: command tx timeout [ 435.365415][ T4623] Bluetooth: hci17: command tx timeout [ 436.565447][ T4623] Bluetooth: hci18: command tx timeout [ 436.725587][ T4623] Bluetooth: hci16: command tx timeout [ 437.211554][ T4623] Bluetooth: hci13: command 0x0406 tx timeout [ 437.449867][ T5230] Bluetooth: hci17: command tx timeout [ 438.645292][ T5230] Bluetooth: hci18: command tx timeout [ 440.265671][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.272069][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.725367][ T5230] Bluetooth: hci18: command tx timeout [ 460.725848][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 460.733542][ T30] Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 460.785737][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.794469][ T30] task:kworker/u8:1 state:D stack:22320 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 460.969207][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 461.025221][ T30] Call Trace: [ 461.028557][ T30] [ 461.031508][ T30] __schedule+0x1895/0x4b30 [ 461.095304][ T30] ? __pfx___schedule+0x10/0x10 [ 461.100235][ T30] ? __pfx_lock_release+0x10/0x10 [ 461.155334][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 461.160859][ T30] ? kthread_data+0x52/0xd0 [ 461.225226][ T30] ? schedule+0x90/0x320 [ 461.229539][ T30] ? wq_worker_sleeping+0x66/0x240 [ 461.234735][ T30] ? schedule+0x90/0x320 [ 461.310729][ T30] schedule+0x14b/0x320 [ 461.314963][ T30] schedule_preempt_disabled+0x13/0x30 [ 461.355415][ T30] __mutex_lock+0x6a7/0xd70 [ 461.359996][ T30] ? __mutex_lock+0x52a/0xd70 [ 461.364695][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 461.439980][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 461.445081][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 461.471506][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 461.535373][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 461.542313][ T30] ? process_scheduled_works+0x976/0x1850 [ 461.600494][ T30] process_scheduled_works+0xa63/0x1850 [ 461.640286][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 461.655242][ T30] ? assign_work+0x364/0x3d0 [ 461.659896][ T30] worker_thread+0x870/0xd30 [ 461.664525][ T30] ? __kthread_parkme+0x169/0x1d0 [ 461.735723][ T30] ? __pfx_worker_thread+0x10/0x10 [ 461.740907][ T30] kthread+0x2f0/0x390 [ 461.744996][ T30] ? __pfx_worker_thread+0x10/0x10 [ 461.815296][ T30] ? __pfx_kthread+0x10/0x10 [ 461.819954][ T30] ret_from_fork+0x4b/0x80 [ 461.824395][ T30] ? __pfx_kthread+0x10/0x10 [ 461.865507][ T30] ret_from_fork_asm+0x1a/0x30 [ 461.870359][ T30] [ 461.903070][ T30] INFO: task kworker/u8:6:1834 blocked for more than 144 seconds. [ 461.935286][ T30] Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 461.942613][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.015215][ T30] task:kworker/u8:6 state:D stack:21264 pid:1834 tgid:1834 ppid:2 flags:0x00004000 [ 462.065756][ T30] Workqueue: events_unbound linkwatch_event [ 462.071733][ T30] Call Trace: [ 462.075031][ T30] [ 462.123372][ T30] __schedule+0x1895/0x4b30 [ 462.135226][ T30] ? __pfx___schedule+0x10/0x10 [ 462.140139][ T30] ? __pfx_lock_release+0x10/0x10 [ 462.175560][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 462.181356][ T30] ? kthread_data+0x52/0xd0 [ 462.213845][ T30] ? schedule+0x90/0x320 [ 462.225360][ T30] ? wq_worker_sleeping+0x66/0x240 [ 462.230534][ T30] ? schedule+0x90/0x320 [ 462.234807][ T30] schedule+0x14b/0x320 [ 462.290632][ T30] schedule_preempt_disabled+0x13/0x30 [ 462.310314][ T30] __mutex_lock+0x6a7/0xd70 [ 462.315476][ T30] ? __mutex_lock+0x52a/0xd70 [ 462.320197][ T30] ? linkwatch_event+0xe/0x60 [ 462.324902][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 462.375431][ T30] ? process_scheduled_works+0x976/0x1850 [ 462.381237][ T30] linkwatch_event+0xe/0x60 [ 462.425728][ T30] process_scheduled_works+0xa63/0x1850 [ 462.431382][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 462.465393][ T30] ? assign_work+0x364/0x3d0 [ 462.470065][ T30] worker_thread+0x870/0xd30 [ 462.474693][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 462.532297][ T30] ? __kthread_parkme+0x169/0x1d0 [ 462.555269][ T30] ? __pfx_worker_thread+0x10/0x10 [ 462.560529][ T30] kthread+0x2f0/0x390 [ 462.564621][ T30] ? __pfx_worker_thread+0x10/0x10 [ 462.610788][ T30] ? __pfx_kthread+0x10/0x10 [ 462.637973][ T30] ret_from_fork+0x4b/0x80 [ 462.642463][ T30] ? __pfx_kthread+0x10/0x10 [ 462.715380][ T30] ret_from_fork_asm+0x1a/0x30 [ 462.722510][ T30] [ 462.737061][ T30] INFO: task kworker/u8:7:2584 blocked for more than 145 seconds. [ 462.744906][ T30] Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 462.842539][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.885515][ T30] task:kworker/u8:7 state:D stack:20152 pid:2584 tgid:2584 ppid:2 flags:0x00004000 [ 462.935268][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 462.941322][ T30] Call Trace: [ 462.944613][ T30] [ 462.975182][ T30] __schedule+0x1895/0x4b30 [ 462.979773][ T30] ? __pfx___schedule+0x10/0x10 [ 462.984661][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.015322][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 463.020851][ T30] ? kthread_data+0x52/0xd0 [ 463.055618][ T30] ? schedule+0x90/0x320 [ 463.059939][ T30] ? wq_worker_sleeping+0x66/0x240 [ 463.085320][ T30] ? schedule+0x90/0x320 [ 463.089631][ T30] schedule+0x14b/0x320 [ 463.093819][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.132079][ T30] __mutex_lock+0x6a7/0xd70 [ 463.145351][ T30] ? mark_lock+0x9a/0x360 [ 463.149744][ T30] ? __mutex_lock+0x52a/0xd70 [ 463.154446][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 463.192262][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.215254][ T30] addrconf_dad_work+0xd0/0x16f0 [ 463.221522][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 463.245332][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.251738][ T30] ? process_scheduled_works+0x976/0x1850 [ 463.286348][ T30] process_scheduled_works+0xa63/0x1850 [ 463.291990][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 463.325332][ T30] ? assign_work+0x364/0x3d0 [ 463.330009][ T30] worker_thread+0x870/0xd30 [ 463.355222][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 463.361188][ T30] ? __kthread_parkme+0x169/0x1d0 [ 463.385711][ T30] ? __pfx_worker_thread+0x10/0x10 [ 463.390899][ T30] kthread+0x2f0/0x390 [ 463.394989][ T30] ? __pfx_worker_thread+0x10/0x10 [ 463.435462][ T30] ? __pfx_kthread+0x10/0x10 [ 463.440122][ T30] ret_from_fork+0x4b/0x80 [ 463.444566][ T30] ? __pfx_kthread+0x10/0x10 [ 463.485363][ T30] ret_from_fork_asm+0x1a/0x30 [ 463.490220][ T30] [ 463.505332][ T30] INFO: task syz-executor:9578 blocked for more than 146 seconds. [ 463.513187][ T30] Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 463.575263][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.583988][ T30] task:syz-executor state:D stack:18832 pid:9578 tgid:9578 ppid:1 flags:0x20004004 [ 463.651345][ T30] Call Trace: [ 463.654688][ T30] [ 463.675313][ T30] __schedule+0x1895/0x4b30 [ 463.679905][ T30] ? __pfx___schedule+0x10/0x10 [ 463.685055][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.715414][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 463.721175][ T30] ? schedule+0x90/0x320 [ 463.737149][ T30] schedule+0x14b/0x320 [ 463.741374][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.775316][ T30] __mutex_lock+0x6a7/0xd70 [ 463.779878][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 463.805477][ T30] ? __mutex_lock+0x52a/0xd70 [ 463.810227][ T30] ? nsim_destroy+0x71/0x5c0 [ 463.814851][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.855375][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 463.860825][ T30] ? _raw_spin_unlock+0x28/0x50 [ 463.885437][ T30] ? simple_release_fs+0x9c/0xd0 [ 463.890444][ T30] nsim_destroy+0x71/0x5c0 [ 463.894888][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 463.926410][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 463.931594][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 463.962976][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 463.985373][ T30] nsim_drv_remove+0x58/0x160 [ 463.990118][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 464.025395][ T30] bus_remove_device+0x34f/0x420 [ 464.030411][ T30] device_del+0x57a/0x9b0 [ 464.034772][ T30] ? __pfx_device_del+0x10/0x10 [ 464.075196][ T30] device_unregister+0x20/0xc0 [ 464.080034][ T30] del_device_store+0x363/0x480 [ 464.084916][ T30] ? __pfx_del_device_store+0x10/0x10 [ 464.115315][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 464.120237][ T30] ? bus_attr_store+0x4f/0xb0 [ 464.124941][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 464.166039][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 464.171411][ T30] vfs_write+0xa6d/0xc90 [ 464.195246][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 464.201131][ T30] ? __pfx_vfs_write+0x10/0x10 [ 464.235203][ T30] ? fdget_pos+0x265/0x320 [ 464.239689][ T30] ksys_write+0x183/0x2b0 [ 464.259239][ T30] ? __pfx_ksys_write+0x10/0x10 [ 464.264163][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 464.305299][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 464.310582][ T30] __do_fast_syscall_32+0xb4/0x110 [ 464.335456][ T30] ? exc_page_fault+0x590/0x8c0 [ 464.340400][ T30] do_fast_syscall_32+0x34/0x80 [ 464.375733][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 464.382138][ T30] RIP: 0023:0xf73cd579 [ 464.405763][ T30] RSP: 002b:00000000f751f490 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 464.414242][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f751f4d0 [ 464.465853][ T30] RDX: 0000000000000001 RSI: 00000000f73bbff4 RDI: 0000000000000000 [ 464.473891][ T30] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 464.505442][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 464.513565][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.563792][ T30] [ 464.570029][ T30] INFO: task syz-executor:9750 blocked for more than 147 seconds. [ 464.615251][ T30] Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 464.622593][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.672832][ T30] task:syz-executor state:D stack:21440 pid:9750 tgid:9750 ppid:1 flags:0x20004006 [ 464.705320][ T30] Call Trace: [ 464.708660][ T30] [ 464.711612][ T30] __schedule+0x1895/0x4b30 [ 464.745447][ T30] ? __pfx___schedule+0x10/0x10 [ 464.750369][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.775322][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 464.780870][ T30] ? schedule+0x90/0x320 [ 464.815261][ T30] schedule+0x14b/0x320 [ 464.819493][ T30] schedule_preempt_disabled+0x13/0x30 [ 464.824979][ T30] __mutex_lock+0x6a7/0xd70 [ 464.855746][ T30] ? __mutex_lock+0x52a/0xd70 [ 464.860496][ T30] ? tun_chr_close+0x3b/0x1b0 [ 464.881452][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 464.905266][ T30] ? __pfx_call_rcu+0x10/0x10 [ 464.910011][ T30] tun_chr_close+0x3b/0x1b0 [ 464.914537][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 464.945405][ T30] __fput+0x23f/0x880 [ 464.949461][ T30] task_work_run+0x24f/0x310 [ 464.954087][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 464.995331][ T30] ? __pfx_task_work_run+0x10/0x10 [ 465.000518][ T30] ? do_exit+0xa2a/0x28e0 [ 465.004871][ T30] ? kmem_cache_free+0x1a2/0x420 [ 465.045916][ T30] ? do_exit+0xa2a/0x28e0 [ 465.050314][ T30] do_exit+0xa2f/0x28e0 [ 465.054498][ T30] ? __pfx_do_exit+0x10/0x10 [ 465.080771][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 465.105436][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.111504][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.145271][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 465.150557][ T30] do_group_exit+0x207/0x2c0 [ 465.180709][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.195313][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 465.200582][ T30] get_signal+0x16a3/0x1740 [ 465.225455][ T30] ? __pfx_get_signal+0x10/0x10 [ 465.230389][ T30] arch_do_signal_or_restart+0x96/0x860 [ 465.265058][ T30] ? __se_compat_sys_socketcall+0xb18/0x1430 [ 465.271272][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 465.305377][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 465.311259][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 465.335386][ T30] __do_fast_syscall_32+0xc4/0x110 [ 465.340553][ T30] ? exc_page_fault+0x590/0x8c0 [ 465.365628][ T30] do_fast_syscall_32+0x34/0x80 [ 465.385253][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.391645][ T30] RIP: 0023:0xf749d579 [ 465.415339][ T30] RSP: 002b:00000000f75ef850 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 465.423818][ T30] RAX: 000000000000003c RBX: 000000000000000b RCX: 00000000f75ef864 [ 465.469820][ T30] RDX: 0000000000000000 RSI: 00000000f7ff4568 RDI: 00000000f748bff4 [ 465.505201][ T30] RBP: 00000000f7ff4568 R08: 0000000000000000 R09: 0000000000000000 [ 465.513496][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 465.545274][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.553321][ T30] [ 465.585398][ T30] INFO: task syz.0.1923:9794 blocked for more than 148 seconds. [ 465.593072][ T30] Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 465.674661][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.708103][ T30] task:syz.0.1923 state:D stack:24400 pid:9794 tgid:9793 ppid:5231 flags:0x20004002 [ 465.738155][ T30] Call Trace: [ 465.741477][ T30] [ 465.744425][ T30] __schedule+0x1895/0x4b30 [ 465.775294][ T30] ? __pfx___schedule+0x10/0x10 [ 465.799435][ T30] ? __pfx_lock_release+0x10/0x10 [ 465.804520][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 465.835286][ T30] ? schedule+0x90/0x320 [ 465.839606][ T30] schedule+0x14b/0x320 [ 465.843794][ T30] schedule_preempt_disabled+0x13/0x30 [ 465.875299][ T30] __mutex_lock+0x6a7/0xd70 [ 465.909575][ T30] ? __mutex_lock+0x52a/0xd70 [ 465.914399][ T30] ? tun_chr_close+0x3b/0x1b0 [ 465.945410][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 465.950510][ T30] ? __pfx_call_rcu+0x10/0x10 [ 465.967195][ T30] tun_chr_close+0x3b/0x1b0 [ 465.971760][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 466.000548][ T30] __fput+0x23f/0x880 [ 466.004619][ T30] task_work_run+0x24f/0x310 [ 466.035376][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 466.040730][ T30] ? __pfx_task_work_run+0x10/0x10 [ 466.065560][ T30] ? do_exit+0xa2a/0x28e0 [ 466.069964][ T30] ? kmem_cache_free+0x1a2/0x420 [ 466.074969][ T30] ? do_exit+0xa2a/0x28e0 [ 466.115308][ T30] do_exit+0xa2f/0x28e0 [ 466.119542][ T30] ? __pfx_do_exit+0x10/0x10 [ 466.124155][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.155414][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 466.161475][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 466.195287][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 466.200479][ T30] do_group_exit+0x207/0x2c0 [ 466.205093][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.230642][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 466.265344][ T30] get_signal+0x16a3/0x1740 [ 466.269937][ T30] ? __pfx_get_signal+0x10/0x10 [ 466.274925][ T30] arch_do_signal_or_restart+0x96/0x860 [ 466.315270][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 466.321512][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 466.355408][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 466.361124][ T30] __do_fast_syscall_32+0xc4/0x110 [ 466.385362][ T30] ? exc_page_fault+0x590/0x8c0 [ 466.390283][ T30] do_fast_syscall_32+0x34/0x80 [ 466.415677][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 466.422058][ T30] RIP: 0023:0xf7f60579 [ 466.455363][ T30] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 466.463843][ T30] RAX: 0000000000033fe0 RBX: 0000000000000003 RCX: 0000000020000080 [ 466.515391][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 466.523518][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.555565][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 466.563594][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.605325][ T30] [ 466.625319][ T30] INFO: task syz.3.1931:9811 blocked for more than 149 seconds. [ 466.633014][ T30] Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 466.685381][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.694165][ T30] task:syz.3.1931 state:D stack:25024 pid:9811 tgid:9810 ppid:5245 flags:0x20004002 [ 466.735272][ T30] Call Trace: [ 466.738605][ T30] [ 466.741558][ T30] __schedule+0x1895/0x4b30 [ 466.765454][ T30] ? __pfx___schedule+0x10/0x10 [ 466.770371][ T30] ? __pfx_lock_release+0x10/0x10 [ 466.795533][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 466.825440][ T30] ? schedule+0x90/0x320 [ 466.830291][ T30] schedule+0x14b/0x320 [ 466.834491][ T30] schedule_preempt_disabled+0x13/0x30 [ 466.861629][ T30] __mutex_lock+0x6a7/0xd70 [ 466.875258][ T30] ? __mutex_lock+0x52a/0xd70 [ 466.879982][ T30] ? tun_chr_close+0x3b/0x1b0 [ 466.884685][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 466.925082][ T30] ? __pfx_call_rcu+0x10/0x10 [ 466.930055][ T30] tun_chr_close+0x3b/0x1b0 [ 466.934584][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 466.965853][ T30] __fput+0x23f/0x880 [ 466.976816][ T30] task_work_run+0x24f/0x310 [ 466.981460][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 467.015366][ T30] ? __pfx_task_work_run+0x10/0x10 [ 467.020540][ T30] ? do_exit+0xa2a/0x28e0 [ 467.024891][ T30] ? kmem_cache_free+0x1a2/0x420 [ 467.055211][ T30] ? do_exit+0xa2a/0x28e0 [ 467.059618][ T30] do_exit+0xa2f/0x28e0 [ 467.063804][ T30] ? __pfx_do_exit+0x10/0x10 [ 467.105299][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 467.126092][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.132140][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 467.165312][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 467.170507][ T30] do_group_exit+0x207/0x2c0 [ 467.195387][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.200650][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 467.235253][ T30] get_signal+0x16a3/0x1740 [ 467.239848][ T30] ? __pfx_get_signal+0x10/0x10 [ 467.244736][ T30] arch_do_signal_or_restart+0x96/0x860 [ 467.275201][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 467.281446][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 467.313086][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 467.333534][ T30] __do_fast_syscall_32+0xc4/0x110 [ 467.355235][ T30] ? exc_page_fault+0x590/0x8c0 [ 467.360246][ T30] do_fast_syscall_32+0x34/0x80 [ 467.385305][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.391688][ T30] RIP: 0023:0xf7f42579 [ 467.415724][ T30] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 467.424194][ T30] RAX: 000000000000006c RBX: 0000000000000003 RCX: 00000000200001c0 [ 467.475386][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.483415][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.525484][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 467.533517][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.585314][ T30] [ 467.588479][ T30] [ 467.588479][ T30] Showing all locks held in the system: [ 467.609304][ T30] 1 lock held by khungtaskd/30: [ 467.614194][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 467.675180][ T30] 4 locks held by kworker/u8:2/35: [ 467.680342][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 467.715539][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 467.755333][ T30] #2: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 467.764832][ T30] #3: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 467.819024][ T30] 3 locks held by kworker/1:1/46: [ 467.834559][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 467.875266][ T30] #1: ffffc90000b67d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 467.905433][ T30] #2: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 467.945344][ T30] 3 locks held by kworker/u8:6/1834: [ 467.950679][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 468.005437][ T30] #1: ffffc9000497fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 468.029847][ T30] #2: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 468.063190][ T30] 3 locks held by kworker/u8:7/2584: [ 468.076839][ T30] #0: ffff88814b580948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 468.115365][ T30] #1: ffffc900092d7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 468.155345][ T30] #2: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 468.164856][ T30] 2 locks held by dhcpcd/4899: [ 468.205835][ T30] #0: ffff88802d1cf6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 468.244677][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 468.266497][ T30] 2 locks held by getty/4987: [ 468.271215][ T30] #0: ffff88802e1b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 468.315579][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 468.355357][ T30] 3 locks held by kworker/0:6/5290: [ 468.361229][ T30] 7 locks held by syz-executor/9578: [ 468.375387][ T30] #0: ffff88802d402420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 468.384368][ T30] #1: ffff88803262dc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 468.439447][ T30] #2: ffff8881447fef08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 468.475172][ T30] #3: ffffffff8f56f788 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 468.508492][ T30] #4: ffff88805555b0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 468.541885][ T30] #5: ffff888055559250 (&devlink->lock_key#7){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 468.575250][ T30] #6: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 468.584223][ T30] 2 locks held by syz-executor/9750: [ 468.615528][ T30] #0: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 468.624580][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 468.685179][ T30] 1 lock held by syz.1.1917/9780: [ 468.690254][ T30] #0: ffffffff8e93d240 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 468.735296][ T30] 1 lock held by syz.0.1923/9794: [ 468.740366][ T30] #0: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 468.775303][ T30] 1 lock held by syz.3.1931/9811: [ 468.780371][ T30] #0: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 468.835515][ T30] 2 locks held by syz-executor/9815: [ 468.840861][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 468.875482][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 468.884279][ T30] 2 locks held by syz-executor/9822: [ 468.925340][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 468.934842][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 468.985497][ T30] 2 locks held by syz-executor/9826: [ 468.990837][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 469.035195][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 469.044002][ T30] 2 locks held by syz-executor/9833: [ 469.075382][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 469.084877][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 469.145280][ T30] 2 locks held by syz-executor/9839: [ 469.150622][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 469.195210][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit_batch+0x20/0x90 [ 469.205061][ T30] 2 locks held by syz-executor/9842: [ 469.235580][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 469.245088][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 469.274205][ T30] 2 locks held by syz-executor/9845: [ 469.315361][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 469.324951][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 469.385378][ T30] 2 locks held by syz-executor/9852: [ 469.390715][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 469.425022][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 469.455239][ T30] 2 locks held by syz-executor/9857: [ 469.460579][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 469.505291][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 469.535227][ T30] 2 locks held by syz-executor/9863: [ 469.540557][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 469.591524][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 469.625427][ T30] 2 locks held by syz-executor/9868: [ 469.630761][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 469.665743][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 469.705373][ T30] 2 locks held by syz-executor/9871: [ 469.710708][ T30] #0: ffffffff8fcc4c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 469.755231][ T30] #1: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 469.789085][ T30] 4 locks held by syz-executor/9879: [ 469.794421][ T30] #0: ffff88802d402420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 469.835384][ T30] #1: ffff888030942888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 469.865324][ T30] #2: ffff8881447fef08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 469.904536][ T30] #3: ffffffff8f56f788 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 469.935408][ T30] 4 locks held by syz-executor/9890: [ 469.940738][ T30] #0: ffff88802d402420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 469.975905][ T30] #1: ffff88802dd5b488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 470.015298][ T30] #2: ffff8881447fef08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 470.047019][ T30] #3: ffffffff8f56f788 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 470.075294][ T30] 1 lock held by syz-executor/9902: [ 470.105785][ T30] #0: ffffffff8fcd1708 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 470.114930][ T30] 4 locks held by syz-executor/9907: [ 470.145332][ T30] #0: ffff88802d402420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 470.154312][ T30] #1: ffff888055f11888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 470.195413][ T30] #2: ffff8881447fef08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 470.246332][ T30] #3: ffffffff8f56f788 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 470.275299][ T30] 4 locks held by syz-executor/9916: [ 470.280646][ T30] #0: ffff88802d402420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 470.315359][ T30] #1: ffff88802ecb5888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 470.345328][ T30] #2: ffff8881447fef08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 470.376937][ T30] #3: ffffffff8f56f788 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 470.415484][ T30] [ 470.417856][ T30] ============================================= [ 470.417856][ T30] [ 470.465285][ T30] NMI backtrace for cpu 1 [ 470.469667][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 470.479847][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 470.489926][ T30] Call Trace: [ 470.493222][ T30] [ 470.496164][ T30] dump_stack_lvl+0x241/0x360 [ 470.500864][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.506080][ T30] ? __pfx__printk+0x10/0x10 [ 470.510709][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 470.515850][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 470.521327][ T30] ? _printk+0xd5/0x120 [ 470.525502][ T30] ? __pfx__printk+0x10/0x10 [ 470.530199][ T30] ? __wake_up_klogd+0xcc/0x110 [ 470.535070][ T30] ? __pfx__printk+0x10/0x10 [ 470.539681][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 470.544726][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 470.550732][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 470.556740][ T30] watchdog+0xff4/0x1040 [ 470.561010][ T30] ? watchdog+0x1ea/0x1040 [ 470.565447][ T30] ? __pfx_watchdog+0x10/0x10 [ 470.570142][ T30] kthread+0x2f0/0x390 [ 470.574220][ T30] ? __pfx_watchdog+0x10/0x10 [ 470.578913][ T30] ? __pfx_kthread+0x10/0x10 [ 470.583516][ T30] ret_from_fork+0x4b/0x80 [ 470.587954][ T30] ? __pfx_kthread+0x10/0x10 [ 470.592555][ T30] ret_from_fork_asm+0x1a/0x30 [ 470.597353][ T30] [ 470.601446][ T30] Sending NMI from CPU 1 to CPUs 0: [ 470.607133][ C0] NMI backtrace for cpu 0 [ 470.607146][ C0] CPU: 0 UID: 0 PID: 5290 Comm: kworker/0:6 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 470.607167][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 470.607177][ C0] Workqueue: events_long defense_work_handler [ 470.607202][ C0] RIP: 0010:lock_release+0x315/0xa30 [ 470.607227][ C0] Code: e0 ff 42 0f b6 04 3b 84 c0 0f 85 63 05 00 00 45 89 2c 24 41 81 fd ff ff 1f 00 0f 87 c0 02 00 00 48 8b 44 24 48 42 0f b6 04 38 <84> c0 0f 85 18 05 00 00 89 16 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 [ 470.607242][ C0] RSP: 0018:ffffc90000007880 EFLAGS: 00000083 [ 470.607255][ C0] RAX: 0000000000000000 RBX: 1ffff11003d7b52f RCX: ffffc90000007903 [ 470.607267][ C0] RDX: 0000000000000003 RSI: ffff88801ebda8d8 RDI: ffff88801ebda958 [ 470.607279][ C0] RBP: ffffc900000079c0 R08: ffffffff901ce62f R09: 1ffffffff2039cc5 [ 470.607292][ C0] R10: dffffc0000000000 R11: fffffbfff2039cc6 R12: ffff88801ebda978 [ 470.607304][ C0] R13: 00000000000c2386 R14: ffff88801ebda958 R15: dffffc0000000000 [ 470.607316][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 470.607330][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.607342][ C0] CR2: 00000000f72218e0 CR3: 000000000e734000 CR4: 00000000003526f0 [ 470.607356][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 470.607366][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 470.607376][ C0] Call Trace: [ 470.607382][ C0]