last executing test programs: 7.126305089s ago: executing program 0 (id=13399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x3d, 0x79, 0x40, 0x1ac7, 0x1, 0xcc19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0x2c, 0xf4, 0x0, [], [{{0x9, 0x5, 0x88}}]}}]}}]}}, 0x0) 5.641737812s ago: executing program 2 (id=13429): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000001c0)) 5.466727461s ago: executing program 2 (id=13432): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) 5.106143168s ago: executing program 3 (id=13438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000001100000008000e00000800000500180001000000080008000600000008000f000000000005000b"], 0x54}}, 0x0) 4.952835977s ago: executing program 1 (id=13440): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6e8d, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) link(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0\x00') 4.882599299s ago: executing program 2 (id=13441): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 4.819615453s ago: executing program 3 (id=13442): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="4c000000140097f87059ae08060c040002ff0f0300000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 4.738011912s ago: executing program 1 (id=13443): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 4.634417723s ago: executing program 3 (id=13444): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 4.63419341s ago: executing program 1 (id=13445): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb6}]}) r0 = socket(0x2, 0x80805, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 4.502051524s ago: executing program 3 (id=13446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100007f9014bc0000000000000a60000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800014000000011050002007f00000005000200830000000900010073797a30000000000900020073797a3200000000050007"], 0x88}}, 0x0) 4.493115837s ago: executing program 1 (id=13447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB="5fb74ee191"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 4.233521569s ago: executing program 1 (id=13448): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @loopback, 0xfffffffc}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote, 0x40}}}}]}]}, 0x5c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002100010000000000000000000a001400000000000000000014000200fe8000000000000000000000000000aa0c0014"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8054) 4.20601799s ago: executing program 3 (id=13449): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) 3.979224619s ago: executing program 1 (id=13450): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80241, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x281, 0x1}) 3.913939596s ago: executing program 0 (id=13451): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000003060500000018ede73b85b85a87000005000100071000000900020073797a31"], 0x28}}, 0x0) 3.771524551s ago: executing program 3 (id=13452): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c00000000af0000"], 0x1c}}, 0x0) 3.614630765s ago: executing program 0 (id=13453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) 3.344366555s ago: executing program 0 (id=13454): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 3.220193825s ago: executing program 0 (id=13455): unshare(0x24020400) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) 3.139288096s ago: executing program 0 (id=13456): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x8044) 3.023345754s ago: executing program 4 (id=13457): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.978101942s ago: executing program 4 (id=13458): r0 = syz_open_dev$media(&(0x7f00000010c0), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)=[{}, {}, {0x0, 0x80000000}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{}, {r1}, 0x2}) 2.941894564s ago: executing program 2 (id=13459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000280)={0xc4}) 2.788290095s ago: executing program 4 (id=13460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x20, r1, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}}, 0x0) 2.724512181s ago: executing program 4 (id=13461): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1}) 2.633686574s ago: executing program 4 (id=13462): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(r0, 0xfffffffffffffffe, 0x1) 2.515893589s ago: executing program 4 (id=13463): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) bind$can_raw(r0, &(0x7f0000000000), 0x10) 1.755170285s ago: executing program 2 (id=13464): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x18, &(0x7f0000000380)={0x20, 0x27, 0x3, {0x3, 0x22, "f2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=13465): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0xb}, @empty, 0x0, "66c5aff8a7eb3af1f6cec2e7420000000800", 0x4, 0x0, 0x2}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) kernel console output (not intermixed with test programs): x 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 540.712830][ T8] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 540.721810][ T8] [drm] Initialized udl on minor 2 [ 540.730262][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 540.739840][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 540.749414][ T5282] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 540.759313][ T8] usb 3-1: USB disconnect, device number 58 [ 540.766393][ T5282] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 540.866607][ T5281] holtek_mouse 0003:04D9:A072.0022: unknown main item tag 0x0 [ 540.875358][ T5281] holtek_mouse 0003:04D9:A072.0022: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.3-1/input0 [ 540.925620][ T5281] usb 2-1: USB disconnect, device number 69 [ 541.080801][ T5284] usb 4-1: USB disconnect, device number 61 [ 541.274104][ T29] audit: type=1326 audit(1727878972.626:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31801 comm="syz.0.12751" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 541.299153][ T29] audit: type=1326 audit(1727878972.626:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31801 comm="syz.0.12751" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 541.332496][ T29] audit: type=1326 audit(1727878972.656:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31801 comm="syz.0.12751" exe="/root/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 541.367274][ T29] audit: type=1326 audit(1727878972.656:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31801 comm="syz.0.12751" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 541.389831][ T29] audit: type=1326 audit(1727878972.656:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31801 comm="syz.0.12751" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 541.412541][ T29] audit: type=1326 audit(1727878972.656:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31801 comm="syz.0.12751" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 541.447987][ T29] audit: type=1326 audit(1727878972.656:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31801 comm="syz.0.12751" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 541.564864][ T5284] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 541.599744][T31817] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.629334][T31817] bridge_slave_0: left allmulticast mode [ 541.641611][T31817] bridge_slave_0: left promiscuous mode [ 541.667212][T31817] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.703877][T31823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12753'. [ 541.735099][T31817] bond0: (slave bridge0): Releasing backup interface [ 541.754134][T31817] bridge0 (unregistering): left promiscuous mode [ 541.759536][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.761059][T31817] bridge0 (unregistering): left allmulticast mode [ 541.790443][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.822662][ T5284] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 541.849535][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.882528][ T5284] usb 3-1: config 0 descriptor?? [ 542.177785][T31846] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 542.296202][T31852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12765'. [ 542.329958][ T5284] steelseries 0003:1038:12B6.0023: unbalanced delimiter at end of report description [ 542.366085][ T5284] steelseries 0003:1038:12B6.0023: probe with driver steelseries failed with error -22 [ 542.399505][T31858] batadv0: left allmulticast mode [ 542.404651][T31858] batadv0: left promiscuous mode [ 542.410064][T31858] bridge0: port 3(batadv0) entered disabled state [ 542.432336][T31858] bridge_slave_1: left allmulticast mode [ 542.440349][T31858] bridge_slave_1: left promiscuous mode [ 542.453343][T31858] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.464538][T31858] bridge_slave_0: left allmulticast mode [ 542.479756][T31858] bridge_slave_0: left promiscuous mode [ 542.490536][T31858] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.534107][T31858] bond0: (slave bridge0): Releasing backup interface [ 542.571325][ T5284] usb 3-1: USB disconnect, device number 59 [ 542.986189][T31888] netlink: 'syz.3.12783': attribute type 1 has an invalid length. [ 543.062782][T31892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12784'. [ 543.225616][T31902] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.255418][T31907] netlink: 364 bytes leftover after parsing attributes in process `syz.1.12789'. [ 543.274112][T31909] bridge0: port 3(hsr0) entered disabled state [ 543.280467][T31909] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.287908][T31909] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.340546][T31915] hsr0: left allmulticast mode [ 543.347449][T31915] hsr_slave_0: left allmulticast mode [ 543.352933][T31915] hsr_slave_1: left allmulticast mode [ 543.364877][T31915] hsr0: left promiscuous mode [ 543.370104][T31915] bridge0: port 3(hsr0) entered disabled state [ 543.419550][T31915] bridge_slave_1: left allmulticast mode [ 543.437430][T31915] bridge_slave_1: left promiscuous mode [ 543.444829][T31915] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.458447][T31915] bridge_slave_0: left allmulticast mode [ 543.464187][T31915] bridge_slave_0: left promiscuous mode [ 543.478368][T31915] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.537670][T31915] bond0: (slave bridge0): Releasing backup interface [ 543.580421][T31915] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 543.628855][T31929] usb usb7: usbfs: interface 0 claimed by hub while 'syz.2.12795' resets device [ 543.826056][T31942] netlink: 88 bytes leftover after parsing attributes in process `syz.3.12802'. [ 544.032050][T31950] vivid-007: ================= START STATUS ================= [ 544.032072][T31950] vivid-007: Enable Output Cropping: true grabbed [ 544.032131][T31950] vivid-007: Enable Output Composing: true grabbed [ 544.032162][T31950] vivid-007: Enable Output Scaler: true grabbed [ 544.032193][T31950] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 544.032224][T31950] vivid-007: Transmit Mode: HDMI grabbed [ 544.032254][T31950] vivid-007: Hotplug Present: 0x00000000 [ 544.032279][T31950] vivid-007: RxSense Present: 0x00000000 [ 544.032303][T31950] vivid-007: EDID Present: 0x00000000 [ 544.032327][T31950] vivid-007: ================== END STATUS ================== [ 544.248424][T31959] usb usb7: usbfs: interface 0 claimed by hub while 'syz.1.12810' resets device [ 544.376857][ T29] audit: type=1326 audit(1727878975.716:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31965 comm="syz.3.12814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 544.401018][ T29] audit: type=1326 audit(1727878975.716:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31965 comm="syz.3.12814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 544.408371][T31972] program syz.1.12813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.440520][ T29] audit: type=1326 audit(1727878975.726:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31965 comm="syz.3.12814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 544.473903][ T29] audit: type=1326 audit(1727878975.726:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31965 comm="syz.3.12814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 544.496535][ T29] audit: type=1326 audit(1727878975.726:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31965 comm="syz.3.12814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 544.518672][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.524914][ T29] audit: type=1326 audit(1727878975.726:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31965 comm="syz.3.12814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 544.547218][ T29] audit: type=1326 audit(1727878975.726:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31965 comm="syz.3.12814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 544.569347][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.575738][ T29] audit: type=1326 audit(1727878975.726:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31965 comm="syz.3.12814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 544.599877][T31979] program syz.1.12813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.605482][ T5286] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 544.666919][ C1] sd 0:0:1:0: [sda] tag#6526 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 544.677388][ C1] sd 0:0:1:0: [sda] tag#6526 CDB: Write(6) 0a 00 00 00 00 00 [ 544.779547][ T5286] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 544.788857][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.807461][ T5286] usb 5-1: config 0 descriptor?? [ 544.875017][T31993] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 545.025431][T31999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12826'. [ 545.039000][T31999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12826'. [ 545.199295][T32011] bridge0: port 4(@) entered disabled state [ 545.205666][T32011] bridge0: port 3(hsr0) entered disabled state [ 545.211988][T32011] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.219382][T32011] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.244371][T32011] bridge0: port 4(@) entered disabled state [ 545.255398][T32011] hsr0: left allmulticast mode [ 545.260188][T32011] hsr_slave_0: left allmulticast mode [ 545.264135][ T5286] [drm:udl_init] *ERROR* Selecting channel failed [ 545.266046][T32011] hsr_slave_1: left allmulticast mode [ 545.283467][T32011] hsr0: left promiscuous mode [ 545.293866][T32011] bridge0: port 3(hsr0) entered disabled state [ 545.310762][ T5286] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 545.315238][T32011] bridge_slave_1: left allmulticast mode [ 545.318016][ T5286] [drm] Initialized udl on minor 2 [ 545.325215][T32011] bridge_slave_1: left promiscuous mode [ 545.329331][ T5286] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 545.334095][T32011] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.343167][ T5286] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 545.360101][T32011] bridge_slave_0: left allmulticast mode [ 545.360887][ T5284] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 545.366044][ T5282] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 545.376551][ T5286] usb 5-1: USB disconnect, device number 60 [ 545.386857][T32011] bridge_slave_0: left promiscuous mode [ 545.400856][T32011] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.406124][ T5284] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 545.536399][ T5282] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 545.548465][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 545.560542][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 545.574866][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 545.603467][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 545.628747][ T5282] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 545.636487][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 545.646686][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 545.659923][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 545.673911][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 545.687175][ T5282] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 545.709029][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 545.733905][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 545.752019][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 545.764082][ T5282] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 545.778167][ T5282] usb 1-1: string descriptor 0 read error: -22 [ 545.784421][ T5282] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 545.793726][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.821856][ T5282] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 546.029316][T32030] vimc link validate: Sensor A:src:16x16 (0x33424752, 3, 1, 6, 0) Raw Capture 0:snk:16x16 (0x32314142, 8, 0, 0, 0) [ 546.162064][ T5282] usb 1-1: USB disconnect, device number 66 [ 546.422287][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.447176][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.541315][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.560725][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.697009][T32053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.733022][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.747318][T32054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 546.756566][T32054] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 546.765056][T32054] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 546.776979][T32054] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 546.785003][T32054] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 546.792365][T32054] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 546.808365][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.823255][T32057] vimc link validate: Sensor A:src:16x16 (0x33424752, 3, 1, 6, 0) Raw Capture 0:snk:16x16 (0x32314142, 8, 0, 0, 0) [ 546.947308][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.957950][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 547.165003][ T5281] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 547.236946][ T5282] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 547.328161][ T5281] usb 1-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=f5.0f [ 547.347114][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.369807][ T5281] usb 1-1: Product: syz [ 547.374133][ T5281] usb 1-1: Manufacturer: syz [ 547.379153][ T5281] usb 1-1: SerialNumber: syz [ 547.399024][ T5281] usb 1-1: config 0 descriptor?? [ 547.405851][ T5282] usb 3-1: config 0 interface 0 altsetting 253 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 547.430728][ T5282] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 547.453622][ T5282] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x88 has invalid wMaxPacketSize 0 [ 547.477862][ T5282] usb 3-1: config 0 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 547.491082][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 547.509828][ T5282] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 547.530328][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.571664][ T5282] usb 3-1: config 0 descriptor?? [ 547.614048][ T11] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 547.624233][ T5281] dvb-usb: found a 'PCTV 2002e SE' in warm state. [ 547.641587][ T5281] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 547.659037][ T5281] dvbdev: DVB: registering new adapter (PCTV 2002e SE) [ 547.672149][ T5281] usb 1-1: media controller created [ 547.686764][ T5281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 547.779638][ T5281] DVB: Unable to find symbol dib7000p_attach() [ 547.802038][ T5281] dvb-usb: no frontend was attached by 'PCTV 2002e SE' [ 547.824809][ T5281] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 547.835986][ T5281] dvbdev: DVB: registering new adapter (PCTV 2002e SE) [ 547.842892][ T5281] usb 1-1: media controller created [ 547.851563][ T5281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 547.891386][ T5281] DVB: Unable to find symbol dib7000p_attach() [ 547.897673][ T5281] dvb-usb: no frontend was attached by 'PCTV 2002e SE' [ 547.964823][ T5281] rc_core: IR keymap rc-dib0700-rc5 not found [ 547.970968][ T5281] Registered IR keymap rc-empty [ 547.976274][ T5281] dvb-usb: could not initialize remote control. [ 547.982540][ T5281] dvb-usb: PCTV 2002e SE successfully initialized and connected. [ 547.994685][ T5281] usb 1-1: USB disconnect, device number 67 [ 548.021729][ T5282] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 548.052293][ T5282] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0024/input/input81 [ 548.075716][ T5281] dvb-usb: PCTV 2002e SE successfully deinitialized and disconnected. [ 548.166273][ T5282] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 548.266163][ T5286] usb 3-1: USB disconnect, device number 60 [ 548.592384][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.603824][ T11] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 548.612915][ T11] bond0 (unregistering): Released all slaves [ 548.730984][ T11] bond1 (unregistering): Released all slaves [ 548.741076][ T11] bond2 (unregistering): Released all slaves [ 548.755938][ T11] bond3 (unregistering): Released all slaves [ 548.768643][ T11] bond4 (unregistering): Released all slaves [ 548.781264][ T11] bond5 (unregistering): Released all slaves [ 548.885473][T32054] Bluetooth: hci4: command tx timeout [ 548.952590][ T11] bond6 (unregistering): Released all slaves [ 548.962683][ T11] bond7 (unregistering): Released all slaves [ 548.975676][ T11] bond8 (unregistering): Released all slaves [ 548.999169][T32080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12861'. [ 549.018636][T32080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12861'. [ 549.260519][ T11] IPVS: stopping backup sync thread 28067 ... [ 549.475383][T32107] CUSE: zero length info key specified [ 549.527892][T32059] chnl_net:caif_netlink_parms(): no params data found [ 549.888795][T32059] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.904958][T32059] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.915365][T32059] bridge_slave_0: entered allmulticast mode [ 549.922610][T32059] bridge_slave_0: entered promiscuous mode [ 549.924904][ T5284] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 549.974207][T32059] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.983646][T32059] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.991538][T32059] bridge_slave_1: entered allmulticast mode [ 549.998850][T32059] bridge_slave_1: entered promiscuous mode [ 550.014864][ T5281] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 550.075473][T32059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.097780][T32059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.098028][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.118826][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.128823][ T5284] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 550.171321][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.185167][ T5281] usb 5-1: Using ep0 maxpacket: 16 [ 550.189700][ T5284] usb 1-1: config 0 descriptor?? [ 550.208394][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.228403][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.238669][ T5281] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 550.256062][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.267832][ T5281] usb 5-1: config 0 descriptor?? [ 550.297528][ T11] hsr_slave_0: left promiscuous mode [ 550.303603][ T11] hsr_slave_1: left promiscuous mode [ 550.311508][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.319305][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.333558][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.341771][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.365337][ T11] veth1_macvtap: left promiscuous mode [ 550.371136][ T11] veth0_macvtap: left promiscuous mode [ 550.612037][ T5284] steelseries 0003:1038:1410.0025: not enough fields in HID_OUTPUT_REPORT 0 [ 550.703586][ T5281] nzxt-kraken2 0003:1E71:170E.0026: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.4-1/input0 [ 550.822426][ T5281] usb 1-1: USB disconnect, device number 68 [ 550.846201][ T11] team0 (unregistering): Port device team_slave_1 removed [ 550.930802][ T8] usb 5-1: USB disconnect, device number 61 [ 550.965039][T32054] Bluetooth: hci4: command tx timeout [ 551.161138][ T11] team0 (unregistering): Port device dummy0 removed [ 551.293791][T32059] team0: Port device team_slave_0 added [ 551.311693][T32059] team0: Port device team_slave_1 added [ 551.370708][T32059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.390333][T32059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.465715][T32059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.493033][T32059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.510972][T32059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.592924][T32059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.722441][T32059] hsr_slave_0: entered promiscuous mode [ 551.748594][T32059] hsr_slave_1: entered promiscuous mode [ 551.832222][ T5286] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 552.015152][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 552.031906][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 552.063074][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 552.107841][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 552.139941][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 552.189210][ T5286] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 552.208442][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.242743][ T5286] usb 5-1: Product: syz [ 552.254564][ T5286] usb 5-1: Manufacturer: syz [ 552.262750][ T5286] usb 5-1: SerialNumber: syz [ 552.281986][ T5286] usb 5-1: config 0 descriptor?? [ 552.304718][ T5286] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input82 [ 552.360196][T32184] sctp: [Deprecated]: syz.0.12897 (pid 32184) Use of int in max_burst socket option. [ 552.360196][T32184] Use struct sctp_assoc_value instead [ 552.393570][T32186] tc_dump_action: action bad kind [ 552.494178][ T11] IPVS: stop unused estimator thread 0... [ 552.571962][ T8] usb 5-1: USB disconnect, device number 62 [ 552.577993][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 552.979388][T32059] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 553.019554][T32059] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 553.043976][T32059] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 553.050641][T32054] Bluetooth: hci4: command tx timeout [ 553.071079][T32059] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 553.254003][T32059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.359708][T32059] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.404540][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.411698][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.456139][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.463289][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.558834][T32233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12910'. [ 553.584667][T32059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.617276][T32059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.665054][ T5284] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 553.682425][T32059] veth0_vlan: entered promiscuous mode [ 553.710551][T32059] veth1_vlan: entered promiscuous mode [ 553.757111][T32059] veth0_macvtap: entered promiscuous mode [ 553.766593][T32059] veth1_macvtap: entered promiscuous mode [ 553.785566][ T5275] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 553.804547][T32059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.819361][T32059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.838715][T32059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.850620][ T5284] usb 5-1: config 0 interface 0 altsetting 253 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 553.877455][ T5284] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 553.888872][T32059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.904810][ T5284] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x88 has invalid wMaxPacketSize 0 [ 553.914734][ T5284] usb 5-1: config 0 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 553.920093][T32059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.948343][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 553.958571][T32059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.971485][ T5275] usb 2-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=f5.0f [ 553.974547][T32059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.982290][ T5284] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 553.997518][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.005739][ T5275] usb 2-1: Product: syz [ 554.009916][ T5275] usb 2-1: Manufacturer: syz [ 554.014525][ T5275] usb 2-1: SerialNumber: syz [ 554.019221][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.069667][ T5275] usb 2-1: config 0 descriptor?? [ 554.075692][ T5284] usb 5-1: config 0 descriptor?? [ 554.098649][T32059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.120166][T32059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.130538][T32059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.159605][T32059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.185802][T32059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.207027][T32059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.228247][T32059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.251084][T32059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.266321][T32059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.286944][T32059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.296160][T32059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.322089][ T5275] dvb-usb: found a 'PCTV 2002e SE' in warm state. [ 554.330916][ T5275] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 554.347193][ T5275] dvbdev: DVB: registering new adapter (PCTV 2002e SE) [ 554.361203][T32059] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.374477][ T5275] usb 2-1: media controller created [ 554.389852][ T5275] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.402050][T32059] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.426312][T32262] tipc: Invalid UDP bearer configuration [ 554.426351][T32262] tipc: Enabling of bearer rejected, failed to enable media [ 554.527622][ T5275] DVB: Unable to find symbol dib7000p_attach() [ 554.534186][ T5275] dvb-usb: no frontend was attached by 'PCTV 2002e SE' [ 554.545033][ T5275] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 554.572414][ T5275] dvbdev: DVB: registering new adapter (PCTV 2002e SE) [ 554.586907][ T5275] usb 2-1: media controller created [ 554.593846][ T5275] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.619549][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.636091][ T5284] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 554.646702][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.692858][ T5284] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0027/input/input83 [ 554.704654][ T5275] DVB: Unable to find symbol dib7000p_attach() [ 554.710940][ T5275] dvb-usb: no frontend was attached by 'PCTV 2002e SE' [ 554.722648][T32078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.752738][T32078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.774892][ T5275] rc_core: IR keymap rc-dib0700-rc5 not found [ 554.782091][ T5275] Registered IR keymap rc-empty [ 554.790792][ T5275] dvb-usb: could not initialize remote control. [ 554.799820][ T5275] dvb-usb: PCTV 2002e SE successfully initialized and connected. [ 554.809511][ T5284] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 554.830035][ T5284] usb 5-1: USB disconnect, device number 63 [ 554.877771][ T5275] usb 2-1: USB disconnect, device number 70 [ 554.899007][ T5275] dvb-usb: PCTV 2002e SE successfully deinitialized and disconnected. [ 555.124892][T32054] Bluetooth: hci4: command tx timeout [ 555.464366][T32281] tipc: Enabling of bearer rejected, failed to enable media [ 555.503043][T32279] netlink: 'syz.1.12932': attribute type 153 has an invalid length. [ 555.806811][ T29] audit: type=1326 audit(1727878987.166:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32298 comm="syz.4.12934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 555.837999][ T29] audit: type=1326 audit(1727878987.176:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32298 comm="syz.4.12934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 555.865034][ T29] audit: type=1326 audit(1727878987.176:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32298 comm="syz.4.12934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 555.887924][ T29] audit: type=1326 audit(1727878987.176:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32298 comm="syz.4.12934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 555.911684][ T29] audit: type=1326 audit(1727878987.176:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32298 comm="syz.4.12934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 555.961116][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.963341][ T29] audit: type=1326 audit(1727878987.176:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32298 comm="syz.4.12934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 556.001242][ T29] audit: type=1326 audit(1727878987.176:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32298 comm="syz.4.12934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 556.033010][ T29] audit: type=1326 audit(1727878987.176:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32298 comm="syz.4.12934" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 556.043755][ T5284] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 556.055743][ T1166] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 556.242684][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.270423][ T1166] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 556.285623][ T1166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.287591][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 556.321916][ T1166] usb 2-1: config 0 descriptor?? [ 556.340086][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 556.349828][ T5226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 556.356973][ T5284] usb 3-1: Using ep0 maxpacket: 32 [ 556.363901][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.377690][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.387891][ T5226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 556.387981][ T5284] usb 3-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 556.388006][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.389009][ T5226] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 556.389415][ T5226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 556.395092][ T5284] usb 3-1: config 0 descriptor?? [ 556.504564][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.654544][T32319] netlink: 'syz.4.12942': attribute type 153 has an invalid length. [ 556.767950][ T1166] [drm:udl_init] *ERROR* Selecting channel failed [ 556.796320][ T1166] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 556.803032][ T1166] [drm] Initialized udl on minor 2 [ 556.812563][ T5284] wacom 0003:056A:00F0.0028: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.2-1/input0 [ 556.854430][ T1166] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 556.880609][ T1166] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 556.894051][T32314] chnl_net:caif_netlink_parms(): no params data found [ 556.896220][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 556.909276][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 556.917584][ T1166] usb 2-1: USB disconnect, device number 71 [ 557.019969][ T5284] usb 3-1: USB disconnect, device number 61 [ 557.185386][ T8] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 557.346032][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 557.362040][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.394837][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.413351][ T8] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 557.424321][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.471691][ T8] usb 5-1: config 0 descriptor?? [ 557.553140][ T67] dvmrp0 (unregistering): left allmulticast mode [ 557.845034][ T5281] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 557.897811][ T8] megaworld 0003:07B5:0312.0029: item fetching failed at offset 2/5 [ 557.906547][ T8] megaworld 0003:07B5:0312.0029: parse failed [ 557.912684][ T8] megaworld 0003:07B5:0312.0029: probe with driver megaworld failed with error -22 [ 557.969809][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.978525][ T5286] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 557.988118][ T67] bond_slave_0: left promiscuous mode [ 557.993590][ T67] bond_slave_0: left allmulticast mode [ 558.001319][ T67] bond0 (unregistering): Released all slaves [ 558.007569][ T5281] usb 2-1: Using ep0 maxpacket: 16 [ 558.015275][ T5281] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.025461][ T5281] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 558.034416][ T5281] usb 2-1: config 1 has no interface number 1 [ 558.038869][ T67] bond1 (unregistering): Released all slaves [ 558.041062][ T5281] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 558.056312][ T5281] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 558.064029][ T67] bond2 (unregistering): Released all slaves [ 558.067208][ T5281] usb 2-1: config 1 interface 2 has no altsetting 0 [ 558.069020][ T5281] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 558.089329][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.098132][ T5281] usb 2-1: Product: syz [ 558.102309][ T5281] usb 2-1: Manufacturer: syz [ 558.112977][ T5281] usb 2-1: SerialNumber: syz [ 558.118517][ T8] usb 5-1: USB disconnect, device number 64 [ 558.139061][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 558.150307][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.169511][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 558.191481][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 558.205916][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 558.221405][ T5286] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 558.230708][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.239097][ T5286] usb 3-1: Product: syz [ 558.243406][ T5286] usb 3-1: Manufacturer: syz [ 558.248971][ T5286] usb 3-1: SerialNumber: syz [ 558.267970][ T5286] usb 3-1: config 0 descriptor?? [ 558.290663][ T5286] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input88 [ 558.376179][ T5281] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 558.389641][ T5281] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 558.401489][ T67] bond3 (unregistering): Released all slaves [ 558.408757][ T5281] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 558.417035][ T5281] usb 2-1: selecting invalid altsetting 0 [ 558.447113][ T67] bond4 (unregistering): Released all slaves [ 558.458405][ T5281] usb 2-1: USB disconnect, device number 72 [ 558.472571][ T67] bond5 (unregistering): Released all slaves [ 558.485061][T32054] Bluetooth: hci2: command tx timeout [ 558.502524][T29931] udevd[29931]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.561810][ T5284] usb 3-1: USB disconnect, device number 62 [ 558.567852][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 558.693618][T32314] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.705518][T32314] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.717886][T32314] bridge_slave_0: entered allmulticast mode [ 558.735279][T32314] bridge_slave_0: entered promiscuous mode [ 558.751618][ T67] : left promiscuous mode [ 558.780026][T32314] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.795642][T32314] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.802813][T32314] bridge_slave_1: entered allmulticast mode [ 558.810032][T32314] bridge_slave_1: entered promiscuous mode [ 558.843362][ T67] ɶƣ0GC¦!: left promiscuous mode [ 558.862185][T32314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.900055][T32314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.022532][T32314] team0: Port device team_slave_0 added [ 559.048873][T32314] team0: Port device team_slave_1 added [ 559.104285][T32314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.122013][T32314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.159854][T32314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.185559][T32314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.198734][T32314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.236443][T32314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.342429][T32314] hsr_slave_0: entered promiscuous mode [ 559.352343][T32314] hsr_slave_1: entered promiscuous mode [ 559.359410][T32314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.367363][T32314] Cannot create hsr debugfs directory [ 559.750725][ T67] hsr_slave_0: left promiscuous mode [ 559.761284][ T67] hsr_slave_1: left promiscuous mode [ 559.770433][ T67] batman_adv: batadv0: Removing interface: team0 [ 559.781899][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.789938][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.802370][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.810345][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.818923][ T67] batman_adv: batadv0: Removing interface: virt_wifi0 [ 560.130119][ T67] team0 (unregistering): Port device team_slave_1 removed [ 560.575243][T32054] Bluetooth: hci2: command tx timeout [ 560.802252][T32314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 560.823508][T32314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 560.833170][T32314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 560.851413][T32314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 560.937120][T32314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.955925][T32314] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.969613][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.976753][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.997347][T32078] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.004461][T32078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.093859][T32314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.154614][T32314] veth0_vlan: entered promiscuous mode [ 561.179476][T32314] veth1_vlan: entered promiscuous mode [ 561.233300][T32314] veth0_macvtap: entered promiscuous mode [ 561.243656][T32314] veth1_macvtap: entered promiscuous mode [ 561.269161][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.279856][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.290490][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.301818][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.311866][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.322571][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.337421][T32314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.359851][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.371937][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.382089][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.393683][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.403775][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.418232][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.429392][T32314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.440179][T32314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.451391][T32314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.474150][T32314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.493936][T32314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.503007][T32314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.519710][T32314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.625761][T32077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.634333][T32077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.680107][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.697142][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.047689][T32449] netlink: 'syz.3.12956': attribute type 153 has an invalid length. [ 562.191489][T32458] hub 6-0:1.0: USB hub found [ 562.206010][ T5281] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 562.206086][T32458] hub 6-0:1.0: 1 port detected [ 562.213673][ T8] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 562.378236][ T5281] usb 5-1: Using ep0 maxpacket: 16 [ 562.386537][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.403785][ T67] IPVS: stop unused estimator thread 0... [ 562.416388][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.434827][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.452425][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.454391][T32469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12962'. [ 562.464806][ T8] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 562.492717][ T5281] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 562.503242][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.505436][T32469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12962'. [ 562.511407][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.552788][ T8] usb 3-1: config 0 descriptor?? [ 562.589207][ T5281] usb 5-1: config 0 descriptor?? [ 562.644989][T32054] Bluetooth: hci2: command tx timeout [ 562.990316][ T8] steelseries 0003:1038:1410.002A: not enough fields in HID_OUTPUT_REPORT 0 [ 562.999408][T32325] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 563.054707][ T5281] bigben 0003:146B:0902.002B: unexpected rdesc, please submit for review [ 563.066282][ T5281] bigben 0003:146B:0902.002B: unbalanced collection at end of report description [ 563.080264][ T5281] bigben 0003:146B:0902.002B: parse failed [ 563.087547][ T5281] bigben 0003:146B:0902.002B: probe with driver bigben failed with error -22 [ 563.127495][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.133798][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.155446][T32482] usb usb7: usbfs: process 32482 (syz.1.12980) did not claim interface 0 before use [ 563.387171][ T5286] usb 3-1: USB disconnect, device number 63 [ 563.423426][ T5275] usb 5-1: USB disconnect, device number 65 [ 563.424843][T32325] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 563.448623][T32325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.468368][T32325] usb 1-1: config 0 descriptor?? [ 563.897081][T32325] [drm:udl_init] *ERROR* Selecting channel failed [ 563.904887][ T5275] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 563.917041][T32325] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 563.923880][T32325] [drm] Initialized udl on minor 2 [ 563.930258][T32325] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 563.938633][T32325] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 563.945963][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 563.953900][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 563.963000][T32325] usb 1-1: USB disconnect, device number 69 [ 564.072430][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 564.096404][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.120277][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.120597][T32503] hub 6-0:1.0: USB hub found [ 564.133479][ T5275] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 564.153153][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.164032][ T5275] usb 2-1: config 0 descriptor?? [ 564.169212][T32503] hub 6-0:1.0: 1 port detected [ 564.574980][ T5284] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 564.622403][ T5275] elecom 0003:056E:00E6.002C: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0 [ 564.684874][ T29] audit: type=1326 audit(1727878996.036:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32514 comm="syz.0.12983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 564.725963][T32054] Bluetooth: hci2: command tx timeout [ 564.740592][ T29] audit: type=1326 audit(1727878996.036:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32514 comm="syz.0.12983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 564.764173][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 564.786062][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.797286][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.808805][ T5284] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 564.818789][ T29] audit: type=1326 audit(1727878996.036:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32514 comm="syz.0.12983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 564.842216][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.852667][ T5284] usb 4-1: config 0 descriptor?? [ 564.857921][ T29] audit: type=1326 audit(1727878996.036:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32514 comm="syz.0.12983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 564.880481][ T29] audit: type=1326 audit(1727878996.036:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32514 comm="syz.0.12983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 564.883258][ T8] usb 2-1: USB disconnect, device number 73 [ 564.926195][ T29] audit: type=1326 audit(1727878996.036:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32514 comm="syz.0.12983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 564.949372][ T29] audit: type=1326 audit(1727878996.036:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32514 comm="syz.0.12983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 564.974661][ T29] audit: type=1326 audit(1727878996.036:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32514 comm="syz.0.12983" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 565.329125][ T5284] waltop 0003:172F:0501.002D: item fetching failed at offset 2/5 [ 565.338056][ T5284] waltop 0003:172F:0501.002D: probe with driver waltop failed with error -22 [ 565.455765][ T1109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.545178][ T8] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 565.620386][ T5281] usb 4-1: USB disconnect, device number 62 [ 565.705155][ T1109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.708293][T32532] hub 6-0:1.0: USB hub found [ 565.732105][T32532] hub 6-0:1.0: 1 port detected [ 565.738455][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.770056][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.807640][ T8] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 565.807715][ T1109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.853346][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.913750][ T8] usb 5-1: config 0 descriptor?? [ 565.958315][ T1109] tipc: Resetting bearer [ 566.027667][ T1109] tipc: Disabling bearer [ 566.062401][ T29] audit: type=1326 audit(1727878997.416:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32539 comm="syz.1.12997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 566.086343][ T1109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.110117][ T5226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 566.113634][ T29] audit: type=1326 audit(1727878997.416:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32539 comm="syz.1.12997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 566.143273][ T5226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 566.156513][ T5226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 566.200702][ T5226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 566.214928][ T5226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 566.226402][ T5226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 566.419295][ T8] steelseries 0003:1038:1410.002E: not enough fields in HID_OUTPUT_REPORT 0 [ 566.651191][ T5284] usb 5-1: USB disconnect, device number 66 [ 566.904571][ T1109] dvmrp0 (unregistering): left allmulticast mode [ 567.603293][ T1109] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.619269][ T1109] bond_slave_0: left promiscuous mode [ 567.651512][ T1109] bond_slave_0: left allmulticast mode [ 567.679663][ T1109] @ (unregistering): Released all slaves [ 567.699143][ T1109] bond1 (unregistering): Released all slaves [ 567.738374][T32583] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.13018'. [ 567.739387][ T1109] bond2 (unregistering): Released all slaves [ 567.764528][T32583] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 567.774286][ T1109] bond0 (unregistering): Released all slaves [ 567.812326][T32562] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13009'. [ 567.822821][T32562] (unnamed net_device) (uninitialized): down delay (1986356271) is not a multiple of miimon (129), value rounded to 1986356190 ms [ 567.843758][T32562] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 567.923778][ T1109] : left promiscuous mode [ 567.995535][ T5284] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 568.067495][ T1109] : left promiscuous mode [ 568.224490][ T1109] tipc: Left network mode [ 568.295653][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 568.317263][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.335046][ T5226] Bluetooth: hci3: command tx timeout [ 568.355782][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.394093][T32547] chnl_net:caif_netlink_parms(): no params data found [ 568.436578][ T5284] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 568.466480][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.483859][ T5284] usb 1-1: config 0 descriptor?? [ 568.705321][ T8] IPVS: starting estimator thread 0... [ 568.746582][T32054] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.756750][T32054] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.771462][T32054] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.780689][T32054] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.807274][T32054] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 568.815225][T32054] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 568.878779][T32625] IPVS: using max 19 ests per chain, 45600 per kthread [ 568.940727][ T5284] megaworld 0003:07B5:0312.002F: item fetching failed at offset 2/5 [ 568.974948][ T5284] megaworld 0003:07B5:0312.002F: parse failed [ 568.981112][ T5284] megaworld 0003:07B5:0312.002F: probe with driver megaworld failed with error -22 [ 569.007716][T32547] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.017299][T32547] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.024548][T32547] bridge_slave_0: entered allmulticast mode [ 569.041849][T32547] bridge_slave_0: entered promiscuous mode [ 569.052500][T32636] syz.4.13030 (32636) used greatest stack depth: 17904 bytes left [ 569.063823][T32547] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.071322][T32547] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.079048][T32547] bridge_slave_1: entered allmulticast mode [ 569.086663][T32547] bridge_slave_1: entered promiscuous mode [ 569.135261][ T1109] hsr_slave_0: left promiscuous mode [ 569.160901][ T1109] hsr_slave_1: left promiscuous mode [ 569.162721][ T5284] usb 1-1: USB disconnect, device number 70 [ 569.186392][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.194373][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.202146][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.211749][ T1109] batman_adv: batadv0: Removing interface: virt_wifi0 [ 569.231978][ T1109] veth1_vlan: left promiscuous mode [ 569.238356][ T1109] veth0_vlan: left promiscuous mode [ 569.608537][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 570.194204][ T5284] IPVS: starting estimator thread 0... [ 570.294878][T32659] IPVS: using max 22 ests per chain, 52800 per kthread [ 570.365982][T32640] netlink: 'syz.4.13032': attribute type 3 has an invalid length. [ 570.374236][T32640] netlink: 766 bytes leftover after parsing attributes in process `syz.4.13032'. [ 570.407035][T32054] Bluetooth: hci3: command tx timeout [ 570.459149][T32547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.515128][T32547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.583401][T32547] team0: Port device team_slave_0 added [ 570.607462][T32547] team0: Port device team_slave_1 added [ 570.694623][T32547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.703027][T32547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.737625][T32547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.779502][T32547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.790633][T32547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.821663][T32547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.885543][T32054] Bluetooth: hci1: command tx timeout [ 570.906457][T32547] hsr_slave_0: entered promiscuous mode [ 570.925322][T32547] hsr_slave_1: entered promiscuous mode [ 570.932127][T32547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.940199][T32547] Cannot create hsr debugfs directory [ 570.949410][T32631] chnl_net:caif_netlink_parms(): no params data found [ 571.120797][T32631] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.132368][T32631] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.140838][T32631] bridge_slave_0: entered allmulticast mode [ 571.150460][T32631] bridge_slave_0: entered promiscuous mode [ 571.185450][T32631] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.192523][T32631] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.199885][T32631] bridge_slave_1: entered allmulticast mode [ 571.207276][T32631] bridge_slave_1: entered promiscuous mode [ 571.268083][T32631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.279965][T32631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.375845][T32631] team0: Port device team_slave_0 added [ 571.383665][T32631] team0: Port device team_slave_1 added [ 571.416694][T32631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.424206][T32631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.450909][T32631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.472299][T32631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.482544][T32631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.508619][T32631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.601607][T32631] hsr_slave_0: entered promiscuous mode [ 571.608124][T32631] hsr_slave_1: entered promiscuous mode [ 571.614022][T32631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.623170][T32631] Cannot create hsr debugfs directory [ 571.700895][T32547] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 571.722176][T32547] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 571.746362][T32547] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 571.782488][T32631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.802505][T32547] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 571.886284][T32631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.937403][T32547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.970832][T32631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.004267][T32547] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.022456][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.029603][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.060688][T32631] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.089052][T14694] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.096138][T14694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.153416][T32547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 572.181546][T32547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 572.294606][T32631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 572.306401][T32631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 572.316372][T32631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 572.340967][T32547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.351970][T32631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 572.477062][T32547] veth0_vlan: entered promiscuous mode [ 572.485374][T32054] Bluetooth: hci3: command tx timeout [ 572.516367][T32547] veth1_vlan: entered promiscuous mode [ 572.965912][T32054] Bluetooth: hci1: command tx timeout [ 573.154493][ T1109] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.164952][ T1109] @ (unregistering): Released all slaves [ 573.174247][ T1109] bond1 (unregistering): Released all slaves [ 573.185779][ T1109] bond2 (unregistering): Released all slaves [ 573.196598][ T1109] bond3 (unregistering): Released all slaves [ 573.226056][T32631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.271888][T32631] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.311120][T32547] veth0_macvtap: entered promiscuous mode [ 573.318256][ T1109] : left promiscuous mode [ 573.333616][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.340734][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.351056][T32547] veth1_macvtap: entered promiscuous mode [ 573.367284][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.374379][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.392454][ T1109] ÊüðÿG: left promiscuous mode [ 573.410329][T32547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.421100][T32547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.431219][T32547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.442823][T32547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.453430][T32547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.468493][T32547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.478868][T32547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.493614][T32547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.504462][T32547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.521707][T32547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.533011][T32547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.543031][T32547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.553521][T32547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.563432][T32547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.573978][T32547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.583883][T32547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.594647][T32547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.616021][T32547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.643986][T32547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.652857][T32547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.665620][T32547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.674319][T32547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.804404][T32631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.879712][T14694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.892613][T14694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.902536][ T1109] hsr_slave_0: left promiscuous mode [ 573.910669][ T1109] hsr_slave_1: left promiscuous mode [ 573.918435][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.927159][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.935887][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.943276][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.951385][ T1109] batman_adv: batadv0: Removing interface: virt_wifi0 [ 573.972597][ T1109] veth1_macvtap: left promiscuous mode [ 573.978406][ T1109] veth0_macvtap: left promiscuous mode [ 573.983953][ T1109] veth1_vlan: left promiscuous mode [ 573.989571][ T1109] veth0_vlan: left promiscuous mode [ 574.369802][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 574.568747][T32054] Bluetooth: hci3: command tx timeout [ 574.774172][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.782477][T32631] veth0_vlan: entered promiscuous mode [ 574.796058][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.803877][T32631] veth1_vlan: entered promiscuous mode [ 574.894340][T32631] veth0_macvtap: entered promiscuous mode [ 574.974450][T32631] veth1_macvtap: entered promiscuous mode [ 574.998030][T32739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12994'. [ 575.003802][T32631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.028393][T32631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.045290][T32054] Bluetooth: hci1: command tx timeout [ 575.068259][T32631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.080509][T32631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.091101][T32631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.102749][T32631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.112743][T32631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.123686][T32631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.136375][T32631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.146552][T32631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.154105][T30586] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 575.162493][T32631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.176369][T32631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.187148][ T5275] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 575.191680][T32631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.211608][T32746] "syz.4.13051" (32746) uses obsolete ecb(arc4) skcipher [ 575.231519][T32631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.262842][T32631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.277829][T32631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.290884][T32631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.317652][T32631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.342517][T32631] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.348856][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 575.361494][T32631] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.375276][ T5275] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.385676][T30586] usb 4-1: Using ep0 maxpacket: 16 [ 575.394397][T32631] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.394897][ T5275] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 575.421493][T32631] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.425188][T30586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.469085][ T5275] usb 1-1: config 1 has no interface number 1 [ 575.476288][T30586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.495212][ T5275] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 575.509624][T30586] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 575.519191][ T5275] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 575.531775][T30586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.554912][ T5275] usb 1-1: config 1 interface 2 has no altsetting 0 [ 575.578545][T30586] usb 4-1: config 0 descriptor?? [ 575.605880][ T5275] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 575.618164][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.639690][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.640255][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.656202][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.659300][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.671762][ T5275] usb 1-1: Product: syz [ 575.681530][ T5275] usb 1-1: Manufacturer: syz [ 575.695722][ T5275] usb 1-1: SerialNumber: syz [ 575.943716][ T5275] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 575.969199][ T5275] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 575.988492][ T5275] usb 1-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 575.996458][ T5275] usb 1-1: selecting invalid altsetting 0 [ 576.016129][T30586] megaworld 0003:07B5:0312.0030: item fetching failed at offset 2/5 [ 576.025873][T30586] megaworld 0003:07B5:0312.0030: parse failed [ 576.032216][T30586] megaworld 0003:07B5:0312.0030: probe with driver megaworld failed with error -22 [ 576.055062][ T5275] usb 1-1: USB disconnect, device number 71 [ 576.155689][ T306] MPI: mpi too large (185152 bits) [ 576.261761][ T312] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13068'. [ 576.282630][ T5275] usb 4-1: USB disconnect, device number 63 [ 576.311913][ T312] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 576.537298][ T323] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13073'. [ 576.548157][ T323] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 576.645377][ T328] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 576.897389][ T5282] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 576.915885][ T5282] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 577.075250][ T357] tipc: Invalid UDP bearer configuration [ 577.075291][ T357] tipc: Enabling of bearer rejected, failed to enable media [ 577.106414][ T360] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13090'. [ 577.134858][T32054] Bluetooth: hci1: command tx timeout [ 577.136438][ T360] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 577.463104][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 577.463123][ T29] audit: type=1326 audit(1727879008.816:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=381 comm="syz.0.13101" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x0 [ 577.705129][T32325] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 577.757351][ T5282] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 577.874920][T32325] usb 3-1: Using ep0 maxpacket: 16 [ 577.881595][T32325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.892846][T32325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.903889][T32325] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 577.914377][T32325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.924175][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.937777][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.949027][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 577.962904][T32325] usb 3-1: config 0 descriptor?? [ 577.969004][ T5282] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 577.978875][ T415] usb usb8: usbfs: process 415 (syz.1.13115) did not claim interface 0 before use [ 577.982056][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.998981][ T5282] usb 5-1: config 0 descriptor?? [ 578.089692][ T5281] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 578.259262][ T5281] usb 4-1: New USB device found, idVendor=0b05, idProduct=171f, bcdDevice=9d.6b [ 578.268588][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.277807][ T5281] usb 4-1: Product: syz [ 578.282393][ T5281] usb 4-1: Manufacturer: syz [ 578.287146][ T5281] usb 4-1: SerialNumber: syz [ 578.293739][ T5281] usb 4-1: config 0 descriptor?? [ 578.393271][T32325] megaworld 0003:07B5:0312.0032: item fetching failed at offset 2/5 [ 578.407719][T32325] megaworld 0003:07B5:0312.0032: parse failed [ 578.413992][T32325] megaworld 0003:07B5:0312.0032: probe with driver megaworld failed with error -22 [ 578.435806][ T5282] redragon 0003:0C45:760B.0033: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0 [ 578.638433][T30586] usb 5-1: USB disconnect, device number 67 [ 578.682603][ T5284] usb 3-1: USB disconnect, device number 64 [ 578.730892][ T5281] dvb-usb: found a 'ASUS My Cinema U3000 Mini DVBT Tuner' in warm state. [ 578.757844][ T5281] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 578.785454][ T5281] dvbdev: DVB: registering new adapter (ASUS My Cinema U3000 Mini DVBT Tuner) [ 578.800632][ T5281] usb 4-1: media controller created [ 578.810998][ T5281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.856876][ T5281] DVB: Unable to find symbol dib7000p_attach() [ 578.863290][ T5281] dvb-usb: no frontend was attached by 'ASUS My Cinema U3000 Mini DVBT Tuner' [ 578.937794][ T5281] rc_core: IR keymap rc-dib0700-rc5 not found [ 578.951557][ T5281] Registered IR keymap rc-empty [ 578.958189][ T5281] dvb-usb: could not initialize remote control. [ 578.964451][ T5281] dvb-usb: ASUS My Cinema U3000 Mini DVBT Tuner successfully initialized and connected. [ 578.993021][ T5281] usb 4-1: USB disconnect, device number 64 [ 579.006329][ T5281] dvb-usb: ASUS My Cinema U3000 Mini DVBT Tuner successfully deinitialized and disconnected. [ 579.065077][T32325] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 579.225704][T32325] usb 2-1: Using ep0 maxpacket: 16 [ 579.232645][T32325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.246413][T32325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.256245][T32325] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 579.265583][T32325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.275061][T32325] usb 2-1: config 0 descriptor?? [ 579.664605][ T463] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 579.728689][T32325] megaworld 0003:07B5:0312.0034: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 579.740373][T32325] megaworld 0003:07B5:0312.0034: no inputs found [ 579.875366][ T474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13142'. [ 579.894593][ T474] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13142'. [ 579.928195][T30586] usb 2-1: USB disconnect, device number 74 [ 580.394900][T30586] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 580.544869][T30586] usb 3-1: Using ep0 maxpacket: 16 [ 580.562005][T30586] usb 3-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00 [ 580.583818][T30586] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.600168][T30586] usb 3-1: Product: syz [ 580.604731][T30586] usb 3-1: Manufacturer: syz [ 580.613589][T30586] usb 3-1: SerialNumber: syz [ 580.630001][T30586] usb 3-1: config 0 descriptor?? [ 580.664547][T30586] usb-storage 3-1:0.0: USB Mass Storage device detected [ 580.894096][ T8] usb 3-1: USB disconnect, device number 65 [ 580.935711][ T538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13171'. [ 581.145943][T30586] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 581.306061][T30586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.317192][T30586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.327026][T30586] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 581.336088][T30586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.345532][T30586] usb 2-1: config 0 descriptor?? [ 581.375031][ T8] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 581.444973][ T5281] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 581.453421][T32325] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 581.540125][ T8] usb 1-1: config index 0 descriptor too short (expected 37, got 36) [ 581.548676][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.565019][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.584810][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.602352][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 581.612834][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.621148][T32325] usb 4-1: Using ep0 maxpacket: 16 [ 581.630124][ T8] usb 1-1: config 0 descriptor?? [ 581.639649][ T5281] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 581.651156][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.662230][T32325] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 581.673529][T32325] usb 4-1: config 0 has no interface number 0 [ 581.680782][T32325] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 581.693993][ T5281] usb 5-1: config 0 descriptor?? [ 581.709148][T32325] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 581.723632][ T5281] cp210x 5-1:0.0: cp210x converter detected [ 581.743948][T32325] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 581.757206][T32325] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 581.765870][T32325] usb 4-1: Product: syz [ 581.770092][T32325] usb 4-1: SerialNumber: syz [ 581.776590][T30586] arvo 0003:1E7D:30D4.0035: collection stack underflow [ 581.793726][T30586] arvo 0003:1E7D:30D4.0035: item 0 4 0 12 parsing failed [ 581.794539][T32325] usb 4-1: config 0 descriptor?? [ 581.803954][T30586] arvo 0003:1E7D:30D4.0035: parse failed [ 581.820736][T30586] arvo 0003:1E7D:30D4.0035: probe with driver arvo failed with error -22 [ 581.829307][T32325] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 581.830734][T32325] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input91 [ 581.981413][T30586] usb 2-1: USB disconnect, device number 75 [ 582.085599][ T8] pyra 0003:1E7D:2C24.0036: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.0-1/input0 [ 582.131885][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 582.139477][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 582.146685][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 582.153846][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 582.161019][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 582.168475][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 582.175706][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 582.182848][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 582.190286][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 582.197654][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 582.212828][ T5281] usb 5-1: cp210x converter now attached to ttyUSB0 [ 582.220370][ T8] usb 4-1: USB disconnect, device number 65 [ 582.226910][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 582.241753][ T8] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 582.302660][T30586] usb 1-1: USB disconnect, device number 72 [ 582.346520][ T5275] usb 5-1: USB disconnect, device number 68 [ 582.365280][ T5275] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 582.385267][ T5275] cp210x 5-1:0.0: device disconnected [ 582.940892][ T614] netlink: 134732 bytes leftover after parsing attributes in process `syz.1.13206'. [ 583.214043][ T632] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 583.364063][ T641] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13219'. [ 583.774880][ T5281] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 583.822506][ T29] audit: type=1326 audit(1727879015.176:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=669 comm="syz.0.13233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 583.822698][ T29] audit: type=1326 audit(1727879015.176:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=669 comm="syz.0.13233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 583.855426][ T29] audit: type=1326 audit(1727879015.216:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=669 comm="syz.0.13233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 583.855467][ T29] audit: type=1326 audit(1727879015.216:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=669 comm="syz.0.13233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 583.855500][ T29] audit: type=1326 audit(1727879015.216:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=669 comm="syz.0.13233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 583.863473][ T29] audit: type=1326 audit(1727879015.216:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=669 comm="syz.0.13233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 583.974840][ T29] audit: type=1326 audit(1727879015.216:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=669 comm="syz.0.13233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 583.974879][ T29] audit: type=1326 audit(1727879015.216:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=669 comm="syz.0.13233" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 583.979092][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 584.014145][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.014185][ T5281] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 584.014210][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.027761][ T5281] usb 2-1: config 0 descriptor?? [ 584.154971][ T1166] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 584.255109][ T5275] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 584.335029][ T1166] usb 5-1: Using ep0 maxpacket: 8 [ 584.346968][ T1166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.372212][ T1166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.394177][ T1166] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 584.418361][ T5275] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 584.418387][ T5275] usb 3-1: config 0 has no interface number 0 [ 584.420083][ T5275] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 584.426895][ T1166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.433037][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.460718][ T5275] usb 3-1: Product: syz [ 584.460738][ T5275] usb 3-1: Manufacturer: syz [ 584.460755][ T5275] usb 3-1: SerialNumber: syz [ 584.498242][ T5275] usb 3-1: config 0 descriptor?? [ 584.498278][ T1166] usb 5-1: config 0 descriptor?? [ 584.585357][ T5281] wacom 0003:056A:032C.0037: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.1-1/input0 [ 584.722089][ T5275] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 584.739812][ T5275] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 584.759538][ T5275] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 584.784983][ T5275] usb 3-1: media controller created [ 584.831633][ T5275] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 584.844222][ T5284] usb 2-1: USB disconnect, device number 76 [ 584.950217][ T1166] hid-led 0003:04D8:F372.0038: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 584.992232][ T1166] hid-led 0003:04D8:F372.0038: Greynut Luxafor initialized [ 585.065570][ T5281] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 585.158168][ T716] tipc: Started in network mode [ 585.165232][ T1166] usb 5-1: USB disconnect, device number 69 [ 585.173845][T32325] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 585.180952][ T5275] usb 3-1: USB disconnect, device number 66 [ 585.186246][T32325] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 585.201938][ T716] tipc: Node identity ac14142a, cluster identity 4711 [ 585.205041][T32325] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 585.217549][ T716] tipc: Enabled bearer , priority 10 [ 585.227789][T32325] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 585.238966][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.239000][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.239034][ T5281] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 585.239059][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.240999][ T5281] usb 4-1: config 0 descriptor?? [ 585.253397][ T5282] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 585.259426][ T5282] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 585.260217][ T5282] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 585.261335][ T5282] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 585.262216][ T5282] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 585.263286][ T5282] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 585.264712][ T5282] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 585.265574][ T5282] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 585.266351][ T5282] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 585.267094][ T5282] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 585.268537][ T5282] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 585.269301][ T5282] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 585.282006][ T5282] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 585.283565][ T5282] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 585.462195][ T720] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 585.663563][ T5281] aquacomputer_d5next 0003:0C70:F011.0039: unknown main item tag 0x0 [ 585.674513][ T5281] aquacomputer_d5next 0003:0C70:F011.0039: unknown main item tag 0x0 [ 585.674546][ T5281] aquacomputer_d5next 0003:0C70:F011.0039: unknown main item tag 0x0 [ 585.674574][ T5281] aquacomputer_d5next 0003:0C70:F011.0039: unknown main item tag 0x0 [ 585.674600][ T5281] aquacomputer_d5next 0003:0C70:F011.0039: unknown main item tag 0x0 [ 585.679773][ T5281] aquacomputer_d5next 0003:0C70:F011.0039: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.3-1/input0 [ 585.760571][ T731] tipc: MTU too low for tipc bearer [ 585.889839][ T5281] usb 4-1: USB disconnect, device number 66 [ 586.112115][ T748] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 586.263470][ T752] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 586.334872][T30586] tipc: Node number set to 2886997034 [ 586.740540][ T29] audit: type=1326 audit(1727879018.096:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=783 comm="syz.1.13286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 586.757788][ T785] netlink: 'syz.3.13287': attribute type 29 has an invalid length. [ 586.763690][ T29] audit: type=1326 audit(1727879018.126:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=783 comm="syz.1.13286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 586.815229][ T785] netlink: 'syz.3.13287': attribute type 29 has an invalid length. [ 586.964686][ T797] sg_write: data in/out 588840944/1 bytes for SCSI command 0x94-- guessing data in; [ 586.964686][ T797] program syz.4.13293 not setting count and/or reply_len properly [ 587.260218][ T816] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.13302'. [ 587.321501][ T819] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.13302'. [ 587.443044][ T825] tipc: Enabling of bearer rejected, already enabled [ 587.635490][ T5284] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 587.801258][ T5284] usb 4-1: Using ep0 maxpacket: 16 [ 587.814884][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.843174][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.853583][ T5284] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 587.863002][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.873657][ T5284] usb 4-1: config 0 descriptor?? [ 588.145080][ T5281] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 588.311540][ T5284] kye 0003:0458:500F.003A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 588.335596][ T5284] kye 0003:0458:500F.003A: unknown main item tag 0x0 [ 588.342336][ T5284] kye 0003:0458:500F.003A: unknown main item tag 0x0 [ 588.359049][ T5284] kye 0003:0458:500F.003A: hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.3-1/input0 [ 588.395573][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 588.395927][ T5284] kye 0003:0458:500F.003A: tablet-enabling feature report not found [ 588.403985][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.424138][ T5284] kye 0003:0458:500F.003A: tablet enabling failed [ 588.434789][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.465019][ T5281] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 588.490029][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.519020][ T5281] usb 1-1: config 0 descriptor?? [ 588.522670][ T5284] usb 4-1: USB disconnect, device number 67 [ 588.951318][ T5281] hid-multitouch 0003:1FD2:6007.003B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 589.129339][ T924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13342'. [ 589.155647][ T5281] usb 1-1: USB disconnect, device number 73 [ 589.338625][T32325] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 589.496333][T32325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.507887][T32325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.521820][T32325] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 589.540637][T32325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.559729][T32325] usb 4-1: config 0 descriptor?? [ 589.729378][ T5284] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 589.779269][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 589.779285][ T29] audit: type=1326 audit(1727879021.126:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=960 comm="syz.1.13358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 589.809602][ T29] audit: type=1326 audit(1727879021.136:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=960 comm="syz.1.13358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 589.831813][ T29] audit: type=1326 audit(1727879021.136:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=960 comm="syz.1.13358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 589.854116][ T29] audit: type=1326 audit(1727879021.136:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=960 comm="syz.1.13358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 589.876533][ T29] audit: type=1326 audit(1727879021.136:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=960 comm="syz.1.13358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 589.974882][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 589.982081][ T5284] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.986670][T32325] lg-g15 0003:046D:C222.003C: ignoring exceeding usage max [ 590.000540][ T5284] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 590.000568][ T5284] usb 3-1: config 1 has no interface number 1 [ 590.000602][ T5284] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 590.000625][ T5284] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 590.000658][ T5284] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 590.000685][ T5284] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x8C has invalid maxpacket 34197, setting to 1024 [ 590.002472][ T5284] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.017995][T32325] lg-g15 0003:046D:C222.003C: ignoring exceeding usage max [ 590.028166][ T5275] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 590.053275][T32325] lg-g15 0003:046D:C222.003C: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 590.101499][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.142210][ T5284] usb 3-1: Product: syz [ 590.146845][ T5284] usb 3-1: Manufacturer: syz [ 590.151457][ T5284] usb 3-1: SerialNumber: syz [ 590.164967][ T5281] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 590.209680][T32325] usb 4-1: USB disconnect, device number 68 [ 590.284827][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 590.296149][ T5275] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 590.313743][ T5275] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 590.323698][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.324952][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 590.332416][ T5275] usb 1-1: Product: syz [ 590.341439][ T5275] usb 1-1: Manufacturer: syz [ 590.346660][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.347753][ T5275] usb 1-1: SerialNumber: syz [ 590.364858][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.376438][ T5281] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 590.377340][ T5275] usb 1-1: config 0 descriptor?? [ 590.402681][ T5284] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 590.405037][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.419637][ T5275] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 590.419792][ T5284] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 590.442610][ T5284] usb 3-1: 2:1 : sample bitwidth 106 in over sample bytes 3 [ 590.450753][ T5284] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 590.456874][ T5281] usb 2-1: config 0 descriptor?? [ 590.505580][ T5284] usb 3-1: USB disconnect, device number 67 [ 590.845527][ T5275] gspca_zc3xx: reg_w_i err -71 [ 590.871833][ T5281] koneplus 0003:1E7D:2D51.003D: unknown main item tag 0x0 [ 590.884622][ T5281] koneplus 0003:1E7D:2D51.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 591.047629][ T1011] netlink: 'syz.2.13378': attribute type 3 has an invalid length. [ 591.056221][ T1011] netlink: 'syz.2.13378': attribute type 3 has an invalid length. [ 591.064041][ T1011] netlink: 197020 bytes leftover after parsing attributes in process `syz.2.13378'. [ 591.075380][ T1166] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 591.113171][ T5281] usb 2-1: USB disconnect, device number 77 [ 591.227328][ T1166] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 591.242424][ T1166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.255608][ T1166] usb 4-1: config 0 descriptor?? [ 591.266331][ T1166] cp210x 4-1:0.0: cp210x converter detected [ 591.434999][ T5275] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 591.441359][ T5275] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 591.458189][ T5275] usb 1-1: USB disconnect, device number 74 [ 591.624957][ T5284] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 591.690425][ T1166] usb 4-1: cp210x converter now attached to ttyUSB0 [ 591.784904][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 591.791621][ T5284] usb 3-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.810944][ T5284] usb 3-1: config 0 interface 0 has no altsetting 0 [ 591.817853][ T5284] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 591.827091][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.863712][ T5284] usb 3-1: config 0 descriptor?? [ 591.887523][ T5281] usb 4-1: USB disconnect, device number 69 [ 591.902519][ T5281] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 591.922026][ T5281] cp210x 4-1:0.0: device disconnected [ 592.274939][ T1166] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 592.319932][ T5284] logitech 0003:046D:C24F.003E: unknown main item tag 0x0 [ 592.327354][T30586] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 592.335805][ T5284] logitech 0003:046D:C24F.003E: unknown main item tag 0x0 [ 592.343181][ T5284] logitech 0003:046D:C24F.003E: unknown main item tag 0x0 [ 592.353184][ T5284] logitech 0003:046D:C24F.003E: unknown main item tag 0x0 [ 592.360602][ T5284] logitech 0003:046D:C24F.003E: unknown main item tag 0x0 [ 592.368274][ T5284] logitech 0003:046D:C24F.003E: unknown main item tag 0x0 [ 592.382852][ T5284] logitech 0003:046D:C24F.003E: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.2-1/input0 [ 592.394621][ T5284] logitech 0003:046D:C24F.003E: no inputs found [ 592.443129][ T1166] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 592.465807][ T1166] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 592.487838][ T1166] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 592.497137][T30586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.512736][ T1166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.521022][T30586] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 592.521051][T30586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.525643][T30586] usb 1-1: config 0 descriptor?? [ 592.563718][ T1056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 592.573325][ T5284] usb 3-1: USB disconnect, device number 68 [ 592.598816][ T1166] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 592.709652][ T1080] team0: Port device team_slave_1 removed [ 592.732812][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.754877][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.765990][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.773462][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.804720][ T1080] tipc: Resetting bearer [ 592.807981][T30586] usbhid 1-1:0.0: can't add hid device: -71 [ 592.827593][T30586] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 592.837360][ T1081] netlink: 'syz.4.13410': attribute type 10 has an invalid length. [ 592.848351][ T5284] usb 2-1: USB disconnect, device number 78 [ 592.871994][ T1081] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13410'. [ 592.891018][T30586] usb 1-1: USB disconnect, device number 75 [ 592.903371][ T1087] netlink: 13 bytes leftover after parsing attributes in process `syz.3.13413'. [ 592.907754][ T1081] team0: entered promiscuous mode [ 592.920797][ T1081] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.424951][T32054] Bluetooth: hci4: Malformed LE Event: 0x0d [ 593.673410][ T1123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13430'. [ 593.775482][ T1125] delete_channel: no stack [ 594.515536][ T1166] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 594.674914][ T5281] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 594.694996][ T1166] usb 5-1: Using ep0 maxpacket: 16 [ 594.702560][ T1166] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.747386][ T1166] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.777831][ T1166] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 594.819541][ T1166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.835717][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 594.856786][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.885142][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.916048][ T1166] usb 5-1: config 0 descriptor?? [ 594.943225][ T5281] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 594.994791][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.054846][ T5281] usb 3-1: config 0 descriptor?? [ 595.071004][ T1162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13448'. [ 595.368285][ T1166] lenovo 0003:17EF:60EE.003F: hidraw0: USB HID v0.04 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 595.484038][ T5281] cp2112 0003:10C4:EA90.0040: unknown main item tag 0x0 [ 595.523954][ T5281] cp2112 0003:10C4:EA90.0040: unknown main item tag 0x0 [ 595.545127][ T1166] lenovo 0003:17EF:60EE.003F: Failed to switch F7/9/11 mode: -71 [ 595.577387][ T5281] cp2112 0003:10C4:EA90.0040: unknown main item tag 0x0 [ 595.596313][ T1166] lenovo 0003:17EF:60EE.003F: Failed to switch middle button: -71 [ 595.607050][ T5281] cp2112 0003:10C4:EA90.0040: unknown main item tag 0x0 [ 595.614030][ T5281] cp2112 0003:10C4:EA90.0040: unknown main item tag 0x0 [ 595.629759][ T1166] lenovo 0003:17EF:60EE.003F: Fn-lock setting failed: -71 [ 595.652983][ T1166] lenovo 0003:17EF:60EE.003F: Sensitivity setting failed: -71 [ 595.675141][ T5281] cp2112 0003:10C4:EA90.0040: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 595.726368][ T1166] usb 5-1: USB disconnect, device number 70 [ 595.815408][ T5281] cp2112 0003:10C4:EA90.0040: error requesting version [ 595.842418][ T5281] cp2112 0003:10C4:EA90.0040: probe with driver cp2112 failed with error -71 [ 595.893362][ T5281] usb 3-1: USB disconnect, device number 69 [ 597.724944][ T5282] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 597.889804][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.904016][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.917927][ T5282] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 597.937159][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.956875][ T5282] usb 3-1: config 0 descriptor?? [ 598.412406][ T5282] elecom 0003:056E:011C.0041: item fetching failed at offset 0/3 [ 598.432002][ T5282] elecom 0003:056E:011C.0041: probe with driver elecom failed with error -22 [ 598.635998][ T5282] usb 3-1: USB disconnect, device number 70 [ 606.294784][ C1] sched: DL replenish lagged too much [ 606.471635][ T5226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 606.482156][ T5226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 606.491352][ T5226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 606.499614][ T5226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 606.512394][ T5226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 606.519821][ T5226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 606.577547][T32054] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 606.599617][T32054] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 606.618311][T32054] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 606.626686][T32054] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 606.647718][T32054] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 606.655389][T32054] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 606.950770][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 606.960420][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 606.968810][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 606.976928][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 606.984469][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 606.993360][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 607.421698][ T1215] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 607.436900][ T1215] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 607.448127][ T1215] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 607.456052][ T1215] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 607.463591][ T1215] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 607.471340][ T1215] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 608.572475][ T5229] Bluetooth: hci5: command tx timeout [ 608.725140][ T1215] Bluetooth: hci6: command tx timeout [ 609.045006][ T1215] Bluetooth: hci7: command tx timeout [ 609.525130][ T1215] Bluetooth: hci8: command tx timeout [ 609.945100][ T5229] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 609.954475][ T5229] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 609.966008][ T5229] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 609.974423][ T5229] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 609.982483][ T5229] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 609.989832][ T5229] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 610.645021][ T5229] Bluetooth: hci5: command tx timeout [ 610.805020][ T5229] Bluetooth: hci6: command tx timeout [ 611.127397][ T1215] Bluetooth: hci7: command tx timeout [ 611.605111][ T5229] Bluetooth: hci8: command tx timeout [ 612.085213][ T5229] Bluetooth: hci9: command tx timeout [ 612.725025][ T5229] Bluetooth: hci5: command tx timeout [ 612.888106][ T5229] Bluetooth: hci6: command tx timeout [ 613.204970][ T5229] Bluetooth: hci7: command tx timeout [ 613.685141][ T5229] Bluetooth: hci8: command tx timeout [ 614.165083][ T5229] Bluetooth: hci9: command tx timeout [ 614.805043][ T5229] Bluetooth: hci5: command tx timeout [ 614.965673][ T5229] Bluetooth: hci6: command tx timeout [ 615.284998][ T5229] Bluetooth: hci7: command tx timeout [ 615.765230][ T5229] Bluetooth: hci8: command tx timeout [ 616.245163][ T5229] Bluetooth: hci9: command tx timeout [ 618.325274][ T5229] Bluetooth: hci9: command tx timeout [ 624.573545][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.580013][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 669.784374][ T1215] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 669.800034][ T5226] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 669.810810][ T5226] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 669.821806][ T5226] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 669.829378][ T5226] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 669.843434][ T5226] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 669.853071][ T5226] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 669.862659][ T5226] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 669.875158][ T5226] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 669.906328][ T1236] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 669.936617][ T1236] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 669.949357][ T1236] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 670.032933][ T1215] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 670.057826][T32054] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 670.071246][T32054] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 670.083037][T32054] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 670.091564][ T5226] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 670.101865][ T5226] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 670.121822][ T5226] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 670.130816][ T5226] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 670.139848][ T5226] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 670.165208][ T5226] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 670.180975][ T5226] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 670.195466][ T5226] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 670.605137][ T1215] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 670.623749][ T1215] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 670.633594][ T1215] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 670.651831][ T1215] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 670.661005][ T1215] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 670.668689][ T1215] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 671.925350][ T5226] Bluetooth: hci10: command tx timeout [ 672.005146][ T1215] Bluetooth: hci11: command tx timeout [ 672.247242][ T5226] Bluetooth: hci12: command tx timeout [ 672.254965][ T1215] Bluetooth: hci13: command tx timeout [ 672.735006][ T5226] Bluetooth: hci14: command tx timeout [ 672.741770][ T1215] Bluetooth: hci4: command 0x0406 tx timeout [ 674.005099][ T1215] Bluetooth: hci10: command tx timeout [ 674.085154][ T1215] Bluetooth: hci11: command tx timeout [ 674.324975][ T5226] Bluetooth: hci13: command tx timeout [ 674.331102][ T1215] Bluetooth: hci12: command tx timeout [ 674.804985][ T1215] Bluetooth: hci14: command tx timeout [ 676.087430][ T1215] Bluetooth: hci10: command tx timeout [ 676.165056][ T1215] Bluetooth: hci11: command tx timeout [ 676.405113][ T1215] Bluetooth: hci12: command tx timeout [ 676.410628][ T1215] Bluetooth: hci13: command tx timeout [ 676.884917][ T1215] Bluetooth: hci14: command tx timeout [ 678.165074][ T1215] Bluetooth: hci10: command tx timeout [ 678.245146][ T1215] Bluetooth: hci11: command tx timeout [ 678.485010][ T5226] Bluetooth: hci12: command tx timeout [ 678.490553][ T1215] Bluetooth: hci13: command tx timeout [ 678.965081][ T1215] Bluetooth: hci14: command tx timeout [ 682.977202][ T5226] Bluetooth: hci2: command 0x0406 tx timeout [ 686.012774][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.019283][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.211483][ T5229] Bluetooth: hci3: command 0x0406 tx timeout [ 693.227281][ T5229] Bluetooth: hci1: command 0x0406 tx timeout [ 726.544183][ T1180] bridge1: entered promiscuous mode [ 726.551755][ T1180] bridge1: entered allmulticast mode [ 726.603184][T30586] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 726.752265][ T1180] team0: Port device bridge1 added [ 728.961012][ T1258] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 728.972655][ T1258] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 728.982648][ T1258] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 728.990842][ T1258] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 729.004991][ T1258] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 729.029240][ T5229] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 729.037971][ T5229] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 729.054036][ T5229] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 729.080838][ T1253] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 729.090684][ T1253] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 729.098754][ T1253] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 729.106284][ T1253] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 729.205031][ T1253] Bluetooth: hci5: command 0x0406 tx timeout [ 729.211070][ T1253] Bluetooth: hci6: command 0x0406 tx timeout [ 730.044149][ T1262] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 730.053719][ T1262] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 730.062376][ T1262] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 730.077532][ T1262] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 730.085780][ T1262] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 730.096366][ T1262] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 730.159113][ T1253] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 730.176701][ T1253] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 730.188111][ T1253] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 730.198091][ T1253] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 730.205952][ T1253] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 730.213611][ T1253] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 730.933231][ T1279] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 730.948537][ T1279] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 730.959917][ T1279] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 730.973128][ T1279] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 730.981100][ T1279] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 730.988600][ T1279] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 734.172212][ T1285] Bluetooth: hci7: command 0x0406 tx timeout [ 734.180277][ T1285] Bluetooth: hci8: command 0x0406 tx timeout [ 734.186412][ T1285] Bluetooth: hci9: command 0x0406 tx timeout [ 747.453976][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.460467][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 790.416008][ T1275] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 790.425419][ T1275] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 790.457253][ T1275] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 790.494836][ T1275] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 790.516091][ T1275] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 790.525079][ T1275] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 791.350634][ T1298] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 791.364241][ T1298] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 791.373010][ T1298] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 791.382563][ T1298] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 791.390619][ T1298] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 791.401293][ T1298] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3 [ 791.409625][ T1298] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 791.419705][ T1298] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 791.428879][ T1298] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 791.437816][ T1298] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 791.445673][ T1298] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 791.454108][ T1298] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 791.620523][ T1300] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 791.637828][ T1300] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 791.646173][ T1300] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 791.667249][ T1300] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 791.675022][ T1300] Bluetooth: hci23: unexpected cc 0x0c25 length: 249 > 3 [ 791.683819][ T1300] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 791.965001][ T1306] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 791.981795][ T1306] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 791.990541][ T1306] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 791.999042][ T1306] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 792.007283][ T1306] Bluetooth: hci24: unexpected cc 0x0c25 length: 249 > 3 [ 792.021521][ T1306] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 795.690636][ T1314] Bluetooth: hci10: command 0x0406 tx timeout [ 795.697212][ T1314] Bluetooth: hci11: command 0x0406 tx timeout [ 795.703332][ T1314] Bluetooth: hci12: command 0x0406 tx timeout [ 795.709636][ T1313] Bluetooth: hci13: command 0x0406 tx timeout [ 795.716891][ T1314] Bluetooth: hci14: command 0x0406 tx timeout [ 808.889196][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.895639][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 847.285051][ T30] INFO: task kworker/u9:2:5226 blocked for more than 143 seconds. [ 847.292907][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 847.338096][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 847.378061][ T30] task:kworker/u9:2 state:D stack:25232 pid:5226 tgid:5226 ppid:2 flags:0x00004000 [ 847.467927][ T30] Workqueue: hci3 hci_cmd_sync_work [ 847.473173][ T30] Call Trace: [ 847.516873][ T30] [ 847.519843][ T30] __schedule+0x1895/0x4b30 [ 847.524401][ T30] ? __pfx___schedule+0x10/0x10 [ 847.552687][ T30] ? __pfx_lock_release+0x10/0x10 [ 847.567509][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 847.587491][ T30] ? kthread_data+0x52/0xd0 [ 847.592035][ T30] ? schedule+0x90/0x320 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 847.625126][ T30] ? wq_worker_sleeping+0x66/0x240 [ 847.630280][ T30] ? schedule+0x90/0x320 [ 847.685436][ T30] schedule+0x14b/0x320 [ 847.689638][ T30] schedule_preempt_disabled+0x13/0x30 [ 847.765263][ T30] __mutex_lock+0x6a7/0xd70 [ 847.785095][ T30] ? __mutex_lock+0x52a/0xd70 [ 847.789811][ T30] ? hci_conn_failed+0x15d/0x300 [ 847.814788][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 847.819856][ T30] ? __pfx_lock_release+0x10/0x10 [ 847.890843][ T30] ? hci_disconnect_sync+0x218/0x3d0 [ 847.900839][ T30] hci_conn_failed+0x15d/0x300 [ 847.935329][ T30] hci_abort_conn_sync+0x583/0xde0 [ 847.940489][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 847.964919][ T30] ? hci_abort_conn_sync+0x1f6/0xde0 [ 847.970245][ T30] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 848.022580][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 848.039904][ T30] ? abort_conn_sync+0x26/0x270 [ 848.074863][ T30] ? abort_conn_sync+0x204/0x270 [ 848.079843][ T30] ? __pfx_abort_conn_sync+0x10/0x10 [ 848.131737][ T30] hci_cmd_sync_work+0x22b/0x400 [ 848.161017][ T30] ? process_scheduled_works+0x976/0x1850 [ 848.181634][ T30] process_scheduled_works+0xa63/0x1850 [ 848.214950][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 848.220978][ T30] ? assign_work+0x364/0x3d0 [ 848.264017][ T30] worker_thread+0x870/0xd30 [ 848.294800][ T30] ? __kthread_parkme+0x169/0x1d0 [ 848.299869][ T30] ? __pfx_worker_thread+0x10/0x10 [ 848.335336][ T30] kthread+0x2f0/0x390 [ 848.339444][ T30] ? __pfx_worker_thread+0x10/0x10 [ 848.344577][ T30] ? __pfx_kthread+0x10/0x10 [ 848.389181][ T30] ret_from_fork+0x4b/0x80 [ 848.393637][ T30] ? __pfx_kthread+0x10/0x10 [ 848.434982][ T30] ret_from_fork_asm+0x1a/0x30 [ 848.439799][ T30] [ 848.465595][ T30] INFO: task kworker/u9:4:1236 blocked for more than 144 seconds. [ 848.473423][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 848.514604][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 848.538446][ T30] task:kworker/u9:4 state:D stack:25912 pid:1236 tgid:1236 ppid:2 flags:0x00004000 [ 848.572504][ T30] Workqueue: hci1 hci_cmd_sync_work [ 848.583810][ T30] Call Trace: [ 848.594008][ T30] [ 848.610336][ T30] __schedule+0x1895/0x4b30 [ 848.619660][ T30] ? __pfx___schedule+0x10/0x10 [ 848.624551][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.644299][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 848.674322][ T30] ? kthread_data+0x52/0xd0 [ 848.704867][ T30] ? schedule+0x90/0x320 [ 848.709148][ T30] ? wq_worker_sleeping+0x66/0x240 [ 848.714284][ T30] ? schedule+0x90/0x320 [ 848.740077][ T30] schedule+0x14b/0x320 [ 848.744278][ T30] schedule_preempt_disabled+0x13/0x30 [ 848.764836][ T30] __mutex_lock+0x6a7/0xd70 [ 848.769378][ T30] ? __mutex_lock+0x52a/0xd70 [ 848.774076][ T30] ? hci_conn_failed+0x15d/0x300 [ 848.804010][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 848.820566][ T30] ? __pfx_lock_release+0x10/0x10 [ 848.842521][ T30] ? hci_disconnect_sync+0x218/0x3d0 [ 848.848001][ T30] hci_conn_failed+0x15d/0x300 [ 848.852798][ T30] hci_abort_conn_sync+0x583/0xde0 [ 848.874134][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 848.884449][ T30] ? hci_abort_conn_sync+0x1f6/0xde0 [ 848.902415][ T30] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 848.919901][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 848.930074][ T30] ? abort_conn_sync+0x26/0x270 [ 848.947817][ T30] ? abort_conn_sync+0x204/0x270 [ 848.952791][ T30] ? __pfx_abort_conn_sync+0x10/0x10 [ 848.974834][ T30] hci_cmd_sync_work+0x22b/0x400 [ 848.979811][ T30] ? process_scheduled_works+0x976/0x1850 [ 849.008566][ T30] process_scheduled_works+0xa63/0x1850 [ 849.014179][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 849.040088][ T30] ? assign_work+0x364/0x3d0 [ 849.044723][ T30] worker_thread+0x870/0xd30 [ 849.059434][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 849.081063][ T30] ? __kthread_parkme+0x169/0x1d0 [ 849.093045][ T30] ? __pfx_worker_thread+0x10/0x10 [ 849.108892][ T30] kthread+0x2f0/0x390 [ 849.112991][ T30] ? __pfx_worker_thread+0x10/0x10 [ 849.139924][ T30] ? __pfx_kthread+0x10/0x10 [ 849.144551][ T30] ret_from_fork+0x4b/0x80 [ 849.164858][ T30] ? __pfx_kthread+0x10/0x10 [ 849.169483][ T30] ret_from_fork_asm+0x1a/0x30 [ 849.194933][ T30] [ 849.198365][ T30] [ 849.198365][ T30] Showing all locks held in the system: [ 849.230380][ T30] 1 lock held by khungtaskd/30: [ 849.243467][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 849.266559][ T30] 3 locks held by kworker/u8:2/35: [ 849.271693][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 849.311840][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 849.346482][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 849.372555][ T30] 1 lock held by klogd/4672: [ 849.391561][ T30] 2 locks held by getty/4981: [ 849.404877][ T30] #0: ffff88814bde30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 849.414683][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 849.454902][ T30] 5 locks held by kworker/u9:2/5226: [ 849.460207][ T30] #0: ffff88807a0b3148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 849.499758][ T30] #1: ffffc9000362fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 849.534919][ T30] #2: ffff88807a754d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 849.560049][ T30] #3: ffff88807a754078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 849.589275][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 849.614830][ T30] 4 locks held by kworker/u9:3/5229: [ 849.620141][ T30] #0: ffff888074422148 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 849.674905][ T30] #1: ffffc9000395fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 849.724892][ T30] #2: ffff88804ca28078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 849.744844][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 849.770684][ T30] 3 locks held by kworker/1:5/5284: [ 849.785902][ T30] 5 locks held by kworker/1:2/30586: [ 849.791212][ T30] 5 locks held by kworker/1:4/30616: [ 849.810691][ T30] 5 locks held by kworker/u9:0/32054: [ 849.827186][ T30] #0: ffff88807e675148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 849.859229][ T30] #1: ffffc900033bfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 849.889102][ T30] #2: ffff888062e74d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 849.913090][ T30] #3: ffff888062e74078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 849.934867][ T30] #4: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 849.960575][ T30] 3 locks held by kworker/0:5/32325: [ 849.973723][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 850.002328][ T30] #1: ffffc90004407d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 850.028781][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 850.049316][ T30] 5 locks held by kworker/u9:1/1215: [ 850.054623][ T30] #0: ffff8880684ba148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 850.093576][ T30] #1: ffffc9000427fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 850.120460][ T30] #2: ffff88804c2f4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 850.140933][ T30] #3: ffff88804c2f4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 850.168426][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 850.191317][ T30] 2 locks held by syz-executor/1216: [ 850.208648][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 850.234485][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 850.252184][ T30] 1 lock held by syz-executor/1218: [ 850.269058][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 850.290199][ T30] 1 lock held by syz-executor/1221: [ 850.310276][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 850.334890][ T30] 1 lock held by syz-executor/1224: [ 850.340110][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 850.374829][ T30] 1 lock held by syz-executor/1228: [ 850.380050][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 850.418807][ T30] 5 locks held by kworker/u9:4/1236: [ 850.424284][ T30] #0: ffff88806e8f0148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 850.446454][ T30] #1: ffffc900030bfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 850.488341][ T30] #2: ffff88806e8e8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 850.513773][ T30] #3: ffff88806e8e8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 850.537754][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 850.560922][ T30] 1 lock held by syz-executor/1239: [ 850.574846][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 850.584306][ T30] 1 lock held by syz-executor/1241: [ 850.612406][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 850.638548][ T30] 1 lock held by syz-executor/1246: [ 850.643771][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 850.694261][ T30] 2 locks held by syz-executor/1247: [ 850.712625][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 850.739373][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 850.762867][ T30] 2 locks held by syz-executor/1250: [ 850.773627][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 850.794871][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 850.804423][ T30] 5 locks held by kworker/u9:5/1251: [ 850.837051][ T30] #0: ffff88805806d948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 850.864950][ T30] #1: ffffc9000312fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 850.892393][ T30] #2: ffff88806024cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 850.914563][ T30] #3: ffff88806024c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 850.940477][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 850.968129][ T30] 5 locks held by kworker/u9:6/1252: [ 850.973437][ T30] #0: ffff88807a844148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 851.003763][ T30] #1: ffffc9000322fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 851.024822][ T30] #2: ffff88807ef74d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 851.034714][ T30] #3: ffff88807ef74078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 851.080501][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 851.104834][ T30] 5 locks held by kworker/u9:7/1253: [ 851.110140][ T30] #0: ffff888076b52148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 851.160314][ T30] #1: ffffc9000420fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 851.184978][ T30] #2: ffff8880511e0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 851.210475][ T30] #3: ffff8880511e0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 851.245254][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 851.264854][ T30] 4 locks held by kworker/u9:8/1258: [ 851.270160][ T30] #0: ffff888074423948 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 851.310555][ T30] #1: ffffc9000325fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 851.341828][ T30] #2: ffff88804ca2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 851.372407][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 851.402816][ T30] 4 locks held by kworker/u9:9/1262: [ 851.408255][ T30] #0: ffff8880702e4948 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 851.440615][ T30] #1: ffffc9000328fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 851.476112][ T30] #2: ffff8880675d0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 851.502213][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 851.534971][ T30] 2 locks held by syz-executor/1265: [ 851.540283][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 851.570298][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 851.610246][ T30] 2 locks held by syz-executor/1266: [ 851.615634][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 851.641106][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 851.664830][ T30] 4 locks held by kworker/u9:10/1267: [ 851.670228][ T30] #0: ffff8880702e3148 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 851.714984][ T30] #1: ffffc900032cfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 851.737463][ T30] #2: ffff8880675d4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 851.790362][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 851.850619][ T30] 1 lock held by dhcpcd/1272: [ 851.855578][ T30] #0: ffff888078dba258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 851.905135][ T30] 5 locks held by kworker/u9:11/1275: [ 851.910529][ T30] #0: ffff8880244e6948 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 851.953706][ T30] #1: ffffc9000331fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 852.005143][ T30] #2: ffff88802c8d8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 852.039660][ T30] #3: ffff88802c8d8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 852.080628][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 852.124925][ T30] 2 locks held by syz-executor/1276: [ 852.130239][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 852.194785][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 852.234802][ T30] 2 locks held by syz-executor/1277: [ 852.240111][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 852.284784][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 852.330139][ T30] 4 locks held by kworker/u9:12/1279: [ 852.355524][ T30] #0: ffff88804278f148 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 852.390856][ T30] #1: ffffc9000332fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 852.422749][ T30] #2: ffff888053180078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 852.452124][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 852.491272][ T30] 1 lock held by dhcpcd/1281: [ 852.496062][ T30] #0: ffff8880b018c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 852.530447][ T30] 2 locks held by syz-executor/1282: [ 852.535801][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 852.560958][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 852.591337][ T30] 5 locks held by kworker/u9:13/1283: [ 852.604936][ T30] #0: ffff888054de7148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 852.625461][ T30] #1: ffffc9000335fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 852.648200][ T30] #2: ffff88806add4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 852.665466][ T30] #3: ffff88806add4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 852.680222][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 852.691457][ T30] 5 locks held by kworker/u9:14/1284: [ 852.706297][ T30] #0: ffff888048fbd148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 852.721946][ T30] #1: ffffc9000336fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 852.741174][ T30] #2: ffff88807f200d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 852.751364][ T30] #3: ffff88807f200078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 852.768529][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 852.780044][ T30] 4 locks held by kworker/u9:15/1285: [ 852.790119][ T30] #0: ffff88806744e948 ((wq_completion)hci21#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 852.802714][ T30] #1: ffffc9000337fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 852.822793][ T30] #2: ffff88809f8c0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 852.833057][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 852.849829][ T30] 1 lock held by dhcpcd/1286: [ 852.854528][ T30] #0: ffff8880aacda258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 852.868046][ T30] 4 locks held by kworker/u9:16/1287: [ 852.873441][ T30] #0: ffff888055b52948 ((wq_completion)hci20#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 852.890648][ T30] #1: ffffc9000433fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 852.903239][ T30] #2: ffff88804d7a0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 852.919793][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 852.932356][ T30] 2 locks held by syz-executor/1294: [ 852.942373][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 852.953316][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 852.970808][ T30] 4 locks held by kworker/u9:17/1298: [ 852.978076][ T30] #0: ffff88809cc08148 ((wq_completion)hci22#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 852.994065][ T30] #1: ffffc90003477d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 853.011987][ T30] #2: ffff88809f8c4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 853.023509][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 853.039906][ T30] 5 locks held by kworker/u9:18/1300: [ 853.047621][ T30] #0: ffff8880767ec148 ((wq_completion)hci14){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 853.063432][ T30] #1: ffffc900034afd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 853.082536][ T30] #2: ffff88806d1d4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 853.093392][ T30] #3: ffff88806d1d4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 853.109266][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 853.120605][ T30] 4 locks held by kworker/u9:19/1301: [ 853.136236][ T30] #0: ffff88803b880948 ((wq_completion)hci23#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 853.152069][ T30] #1: ffffc900034cfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 853.172277][ T30] #2: ffff88808db60078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 853.194784][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 853.230071][ T30] 2 locks held by syz-executor/1303: [ 853.239479][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 853.254781][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 853.272460][ T30] 2 locks held by syz-executor/1304: [ 853.278728][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 853.294440][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 853.304797][ T30] 2 locks held by syz-executor/1305: [ 853.310104][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 853.325991][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 853.340788][ T30] 4 locks held by kworker/u9:20/1306: [ 853.347597][ T30] #0: ffff88802c89e948 ((wq_completion)hci24#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 853.363572][ T30] #1: ffffc900034ffd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 853.383185][ T30] #2: ffff8880b32d8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 853.394361][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 853.410647][ T30] 2 locks held by syz-executor/1308: [ 853.416195][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 853.431992][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 853.442462][ T30] 5 locks held by kworker/u9:21/1309: [ 853.454778][ T30] #0: ffff888061323148 ((wq_completion)hci13){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 853.472900][ T30] #1: ffffc9000351fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 853.490791][ T30] #2: ffff888062a10d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 853.501770][ T30] #3: ffff888062a10078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 853.517545][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 853.530965][ T30] 5 locks held by kworker/u9:22/1311: [ 853.540381][ T30] #0: ffff8880377c1948 ((wq_completion)hci12){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 853.553941][ T30] #1: ffffc9000352fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 853.572383][ T30] #2: ffff8880213f0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 853.584184][ T30] #3: ffff8880213f0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 853.599953][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 853.610790][ T30] 5 locks held by kworker/u9:23/1312: [ 853.622237][ T30] #0: ffff888044bc3948 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 853.633511][ T30] #1: ffffc9000353fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 853.652806][ T30] #2: ffff8880297ccd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 853.662946][ T30] #3: ffff8880297cc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 853.680161][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 853.693619][ T30] 1 lock held by dhcpcd/1317: [ 853.703664][ T30] #0: ffff8880a67b6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 853.714913][ T30] [ 853.717255][ T30] ============================================= [ 853.717255][ T30] [ 853.733912][ T30] NMI backtrace for cpu 0 [ 853.738262][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 853.748777][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 853.758849][ T30] Call Trace: [ 853.762136][ T30] [ 853.765074][ T30] dump_stack_lvl+0x241/0x360 [ 853.769767][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 853.774985][ T30] ? __pfx__printk+0x10/0x10 [ 853.779603][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 853.784561][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 853.790034][ T30] ? _printk+0xd5/0x120 [ 853.794207][ T30] ? __pfx__printk+0x10/0x10 [ 853.798819][ T30] ? __wake_up_klogd+0xcc/0x110 [ 853.803692][ T30] ? __pfx__printk+0x10/0x10 [ 853.808308][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 853.813356][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 853.819363][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 853.825369][ T30] watchdog+0xff4/0x1040 [ 853.829631][ T30] ? watchdog+0x1ea/0x1040 [ 853.834069][ T30] ? __pfx_watchdog+0x10/0x10 [ 853.838763][ T30] kthread+0x2f0/0x390 [ 853.842854][ T30] ? __pfx_watchdog+0x10/0x10 [ 853.847547][ T30] ? __pfx_kthread+0x10/0x10 [ 853.852151][ T30] ret_from_fork+0x4b/0x80 [ 853.856582][ T30] ? __pfx_kthread+0x10/0x10 [ 853.861188][ T30] ret_from_fork_asm+0x1a/0x30 [ 853.865985][ T30] [ 853.869811][ T30] Sending NMI from CPU 0 to CPUs 1: [ 853.875543][ C1] NMI backtrace for cpu 1 [ 853.875556][ C1] CPU: 1 UID: 0 PID: 30616 Comm: kworker/1:4 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 853.875576][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 853.875587][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 853.875611][ C1] RIP: 0010:unwind_next_frame+0x6d5/0x22d0 [ 853.875629][ C1] Code: 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 46 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 f8 4c 0f 46 f1 48 [ 853.875644][ C1] RSP: 0018:ffffc90000a17bb0 EFLAGS: 00000a06 [ 853.875658][ C1] RAX: 0000000000000000 RBX: ffffffff90831920 RCX: dffffc0000000000 [ 853.875671][ C1] RDX: 00000000000b0001 RSI: ffffffff91234d96 RDI: 0000000000000001 [ 853.875682][ C1] RBP: ffffffff90831920 R08: 0000000000000009 R09: ffffc90000a17d70 [ 853.875694][ C1] R10: ffffc90000a17cd0 R11: ffffffff81808f50 R12: ffffffff90831920 [ 853.875707][ C1] R13: ffffffff90831920 R14: ffffffff90831920 R15: ffffffff898a708f [ 853.875721][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 853.875735][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 853.875747][ C1] CR2: 00000000f73f5008 CR3: 000000000e734000 CR4: 00000000003526f0 [ 853.875762][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 853.875772][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 853.875782][ C1] Call Trace: [ 853.875789][ C1] [ 853.875796][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 853.875815][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 853.875839][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 853.875856][ C1] ? nmi_handle+0x2a/0x5a0 [ 853.875880][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 853.875900][ C1] ? nmi_handle+0x14f/0x5a0 [ 853.875916][ C1] ? nmi_handle+0x2a/0x5a0 [ 853.875934][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 853.875949][ C1] ? default_do_nmi+0x63/0x160 [ 853.875968][ C1] ? exc_nmi+0x123/0x1f0 [ 853.875986][ C1] ? end_repeat_nmi+0xf/0x53 [ 853.876001][ C1] ? skb_release_data+0x69f/0x8a0 [ 853.876025][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 853.876047][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 853.876063][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 853.876080][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 853.876095][ C1] [ 853.876101][ C1] [ 853.876112][ C1] ? skb_release_data+0x6a0/0x8a0 [ 853.876131][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 853.876149][ C1] arch_stack_walk+0x11c/0x150 [ 853.876169][ C1] ? skb_release_data+0x6a0/0x8a0 [ 853.876188][ C1] stack_trace_save+0x118/0x1d0 [ 853.876207][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 853.876226][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 853.876249][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 853.876272][ C1] kasan_save_track+0x3f/0x80 [ 853.876287][ C1] ? kasan_save_track+0x3f/0x80 [ 853.876302][ C1] ? kasan_save_free_info+0x40/0x50 [ 853.876322][ C1] ? __kasan_slab_free+0x59/0x70 [ 853.876338][ C1] ? kfree+0x1a0/0x440 [ 853.876355][ C1] ? skb_release_data+0x6a0/0x8a0 [ 853.876394][ C1] kasan_save_free_info+0x40/0x50 [ 853.876414][ C1] __kasan_slab_free+0x59/0x70 [ 853.876430][ C1] ? skb_release_data+0x6a0/0x8a0 [ 853.876447][ C1] kfree+0x1a0/0x440 [ 853.876464][ C1] ? rcuref_put+0x1e3/0x240 [ 853.876479][ C1] ? skb_release_data+0x6a0/0x8a0 [ 853.876498][ C1] skb_release_data+0x6a0/0x8a0 [ 853.876519][ C1] consume_skb+0x9f/0xf0 [ 853.876535][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 853.876560][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 853.876583][ C1] ? nf_ip_checksum+0x13a/0x500 [ 853.876606][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 853.876630][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 853.876650][ C1] ? ip_vs_conn_hashkey_param+0x3ad/0x6b0 [ 853.876675][ C1] ? ip_vs_conn_out_get+0xba6/0xc00 [ 853.876700][ C1] nft_do_chain+0x4ad/0x1da0 [ 853.876719][ C1] ? tcp_conn_schedule+0x45e/0x880 [ 853.876741][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 853.876775][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 853.876791][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 853.876810][ C1] nft_do_chain_inet+0x418/0x6b0 [ 853.876832][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 853.876861][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 853.876881][ C1] nf_hook_slow+0xc3/0x220 [ 853.876901][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 853.876919][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 853.876937][ C1] NF_HOOK+0x29e/0x450 [ 853.876955][ C1] ? NF_HOOK+0x9a/0x450 [ 853.876971][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 853.876989][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 853.877010][ C1] ? ip_rcv_finish+0x406/0x560 [ 853.877033][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 853.877050][ C1] NF_HOOK+0x3a4/0x450 [ 853.877066][ C1] ? __lock_acquire+0x1384/0x2050 [ 853.877089][ C1] ? NF_HOOK+0x9a/0x450 [ 853.877105][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 853.877121][ C1] ? ip_rcv_core+0x801/0xd10 [ 853.877140][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 853.877160][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 853.877178][ C1] __netif_receive_skb+0x2bf/0x650 [ 853.877198][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 853.877220][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 853.877238][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 853.877260][ C1] ? __pfx_lock_release+0x10/0x10 [ 853.877282][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 853.877309][ C1] process_backlog+0x662/0x15b0 [ 853.877331][ C1] ? process_backlog+0x33b/0x15b0 [ 853.877355][ C1] ? __pfx_process_backlog+0x10/0x10 [ 853.877376][ C1] ? xdp_do_check_flushed+0x217/0x240 [ 853.877397][ C1] __napi_poll+0xcb/0x490 [ 853.877417][ C1] net_rx_action+0x89b/0x1240 [ 853.877446][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 853.877466][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 853.877503][ C1] handle_softirqs+0x2c5/0x980 [ 853.877525][ C1] ? do_softirq+0x11b/0x1e0 [ 853.877546][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 853.877571][ C1] do_softirq+0x11b/0x1e0 [ 853.877589][ C1] [ 853.877595][ C1] [ 853.877601][ C1] ? __pfx_do_softirq+0x10/0x10 [ 853.877620][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 853.877644][ C1] ? rcu_is_watching+0x15/0xb0 [ 853.877662][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 853.877682][ C1] ? neigh_periodic_work+0xb35/0xd50 [ 853.877700][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 853.877721][ C1] ? neigh_destroy+0x423/0x580 [ 853.877742][ C1] neigh_periodic_work+0xb35/0xd50 [ 853.877765][ C1] ? process_scheduled_works+0x976/0x1850 [ 853.877786][ C1] process_scheduled_works+0xa63/0x1850 [ 853.877820][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 853.877845][ C1] ? assign_work+0x364/0x3d0 [ 853.877866][ C1] worker_thread+0x870/0xd30 [ 853.877891][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 853.877914][ C1] ? __kthread_parkme+0x169/0x1d0 [ 853.877936][ C1] ? __pfx_worker_thread+0x10/0x10 [ 853.877957][ C1] kthread+0x2f0/0x390 [ 853.877972][ C1] ? __pfx_worker_thread+0x10/0x10 [ 853.877992][ C1] ? __pfx_kthread+0x10/0x10 [ 853.878008][ C1] ret_from_fork+0x4b/0x80 [ 853.878032][ C1] ? __pfx_kthread+0x10/0x10 [ 853.878047][ C1] ret_from_fork_asm+0x1a/0x30 [ 853.878075][ C1] [ 854.729205][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 854.736080][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 854.746589][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 854.756654][ T30] Call Trace: [ 854.759946][ T30] [ 854.762885][ T30] dump_stack_lvl+0x241/0x360 [ 854.767578][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 854.772788][ T30] ? __pfx__printk+0x10/0x10 [ 854.777395][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 854.783405][ T30] ? vscnprintf+0x5d/0x90 [ 854.787751][ T30] panic+0x349/0x880 [ 854.791662][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 854.797836][ T30] ? __pfx_panic+0x10/0x10 [ 854.802269][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 854.807653][ T30] ? __irq_work_queue_local+0x137/0x410 [ 854.813224][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 854.818613][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 854.824783][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 854.830954][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 854.837125][ T30] watchdog+0x1033/0x1040 [ 854.841472][ T30] ? watchdog+0x1ea/0x1040 [ 854.845908][ T30] ? __pfx_watchdog+0x10/0x10 [ 854.850599][ T30] kthread+0x2f0/0x390 [ 854.854686][ T30] ? __pfx_watchdog+0x10/0x10 [ 854.859375][ T30] ? __pfx_kthread+0x10/0x10 [ 854.863978][ T30] ret_from_fork+0x4b/0x80 [ 854.868409][ T30] ? __pfx_kthread+0x10/0x10 [ 854.873011][ T30] ret_from_fork_asm+0x1a/0x30 [ 854.877802][ T30] [ 854.881061][ T30] Kernel Offset: disabled [ 854.885377][ T30] Rebooting in 86400 seconds..