last executing test programs: 4.950235029s ago: executing program 1 (id=2): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010000000904000002030000000921110100012232000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022320000000600ff0900a10185010901150026ff0075089508810285020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x32}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) nanosleep(&(0x7f0000000300)={0x0, 0x17d78400}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000410)="010000000000000000") read$hidraw(r1, &(0x7f0000000800), 0x9) 4.947143128s ago: executing program 0 (id=1): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x14) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x1c, 0x20f}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x1c, 0x1}, 0x18) write$input_event(r1, &(0x7f0000000140), 0x18) write$input_event(r1, &(0x7f0000000180)={{}, 0x1, 0x1c}, 0x18) write$input_event(r1, &(0x7f00000001c0), 0x18) 4.941723947s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001223f000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00223f0000000600ff0901a101850c0901150026ff00750895018102850f090175089501b10285090901750895019102850b0901750895018102850a0901750895019102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/2-1/power/control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/3-1/power/control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/4-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) write(r2, &(0x7f0000000700)='auto\x00', 0x4) write(r3, &(0x7f0000000700)='auto\x00', 0x4) write(r4, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) write(r2, &(0x7f0000000800)='on\x00', 0x2) write(r3, &(0x7f0000000800)='on\x00', 0x2) write(r4, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 4.920075398s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030001000921110100012223000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000600)={0x0, 0x3, 0x4, {0x4, 0x3, "0904"}}, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000640)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x8, "0200000000000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="028000000000000000") 4.729980232s ago: executing program 0 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.0/ep.0/direction\x00', 0x0, 0x0) 4.729744103s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/psmouse/parameters/proto\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='bare\x00', 0x4) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000001080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000002000), 0x2) nanosleep(&(0x7f0000003000)={0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001000)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001001), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001002), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001003)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f000000100d)={0x2, 0x5}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f000000100e)={0x2, 0x47}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f000000100f)={0x2, 0x7}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000001011)={0x2, 0xaa}, 0x2) nanosleep(&(0x7f0000003000)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004000)='./sys/bus/serio/devices/serio0/protocol\x00', 0x1, 0x0) write(r2, &(0x7f0000005000)='synaptics-smbus\x00', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r3, &(0x7f0000005000)='synaptics-smbus\x00', 0xf) r4 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./sys/bus/serio/devices/serio2/protocol\x00', 0x1, 0x0) write(r4, &(0x7f0000005000)='synaptics-smbus\x00', 0xf) r5 = openat(0xffffffffffffff9c, &(0x7f0000004300)='./sys/bus/serio/devices/serio3/protocol\x00', 0x1, 0x0) write(r5, &(0x7f0000005000)='synaptics-smbus\x00', 0xf) nanosleep(&(0x7f0000003000)={0x1}, 0x0) write(r2, &(0x7f0000005100)='bare\x00', 0x4) write(r3, &(0x7f0000005100)='bare\x00', 0x4) write(r4, &(0x7f0000005100)='bare\x00', 0x4) write(r5, &(0x7f0000005100)='bare\x00', 0x4) 3.810325436s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='disk\n\x00\x00\x00', 0x8) 3.040236871s ago: executing program 0 (id=8): r0 = syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902330002010080fa080b0002010020000904000000010120000924010002080900000904010001ff00000007058103400001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x0, 0x18, "0000000000000100"/24}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x3, 0x10, "00000000000001000000000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x3, 0x10, "00000000000001000000000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x3, 0x10, "00000000000001000000000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0100000000000000") syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0100000000000000") 1.879962494s ago: executing program 1 (id=9): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705010200020007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)={0x40, 0x41, 0x10, "01000000020000000300000004000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000400)={0x40, 0x50, 0x5, '\v\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)={0x40, 0x51}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000600)={0x40, 0x54, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000700)={0x40, 0x56, 0x7d, "00ffffffffffff0004430100000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00324b1e53110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 600.168045ms ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/vkms/mydev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/vkms/mydev/planes/plane0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/vkms/mydev/crtcs/crtc0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/vkms/mydev/encoders/enc0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/vkms/mydev/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) 587.661794ms ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem\n', 0x4) 509.521209ms ago: executing program 2 (id=12): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000380)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000400), 0x2) 249.952459ms ago: executing program 2 (id=13): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00ff40240400950000000000010902270001010080fa0904000003ff00ff00070581020002000705020200020007058303100004"], 0x0) nanosleep(&(0x7f0000000040)={0x1}, 0x0) 252.555µs ago: executing program 0 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/cirrus-qemu/bind\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 0s ago: executing program 0 (id=15): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)="736c30000000000000000000000000000100"/40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000803)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000804)=0x40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000805)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000806)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000807)=0xc0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46036' (ED25519) to the list of known hosts. [ 48.204628][ T5730] cgroup: Unknown subsys name 'net' [ 48.369142][ T5730] cgroup: Unknown subsys name 'cpuset' [ 48.377055][ T5730] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.281141][ T5730] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.134722][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.140803][ T5756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.144872][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.146730][ T5757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.148252][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.151762][ T5757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.152019][ T5752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.153641][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.153975][ T5759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.154996][ T5759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.155335][ T5759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.155818][ T5757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.157483][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.157646][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.158044][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.158806][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.159371][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.161593][ T5757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.162926][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.186476][ T5757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.781515][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.785934][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.788806][ T5755] bridge_slave_0: entered allmulticast mode [ 53.792280][ T5755] bridge_slave_0: entered promiscuous mode [ 53.796717][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.798978][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.801552][ T5745] bridge_slave_0: entered allmulticast mode [ 53.804212][ T5745] bridge_slave_0: entered promiscuous mode [ 53.827859][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.830121][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.832306][ T5755] bridge_slave_1: entered allmulticast mode [ 53.835166][ T5755] bridge_slave_1: entered promiscuous mode [ 53.838466][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.840806][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.843215][ T5745] bridge_slave_1: entered allmulticast mode [ 53.846220][ T5745] bridge_slave_1: entered promiscuous mode [ 53.886708][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.915247][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.955995][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.970082][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.973788][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.975990][ T5753] bridge_slave_0: entered allmulticast mode [ 53.978592][ T5753] bridge_slave_0: entered promiscuous mode [ 53.989337][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.995148][ T5745] team0: Port device team_slave_0 added [ 54.000024][ T5745] team0: Port device team_slave_1 added [ 54.002418][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.006356][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.009389][ T5753] bridge_slave_1: entered allmulticast mode [ 54.013074][ T5753] bridge_slave_1: entered promiscuous mode [ 54.026868][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.030059][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.033051][ T5744] bridge_slave_0: entered allmulticast mode [ 54.037147][ T5744] bridge_slave_0: entered promiscuous mode [ 54.041925][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.044914][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.047848][ T5744] bridge_slave_1: entered allmulticast mode [ 54.051637][ T5744] bridge_slave_1: entered promiscuous mode [ 54.126430][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.132740][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.143548][ T5755] team0: Port device team_slave_0 added [ 54.146786][ T5755] team0: Port device team_slave_1 added [ 54.149043][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.151158][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.158896][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.163764][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.165979][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.174164][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.184706][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.219803][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.240331][ T5753] team0: Port device team_slave_0 added [ 54.244079][ T5753] team0: Port device team_slave_1 added [ 54.251861][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.254764][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.264942][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.286822][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.289672][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.300134][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.308923][ T5745] hsr_slave_0: entered promiscuous mode [ 54.311614][ T5745] hsr_slave_1: entered promiscuous mode [ 54.322277][ T5744] team0: Port device team_slave_0 added [ 54.333083][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.335684][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.344682][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.350088][ T5744] team0: Port device team_slave_1 added [ 54.354793][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.357078][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.366074][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.427979][ T5755] hsr_slave_0: entered promiscuous mode [ 54.431113][ T5755] hsr_slave_1: entered promiscuous mode [ 54.434350][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 54.436765][ T5755] Cannot create hsr debugfs directory [ 54.440077][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.442259][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.450405][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.454908][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.457092][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.464632][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.506707][ T5753] hsr_slave_0: entered promiscuous mode [ 54.509211][ T5753] hsr_slave_1: entered promiscuous mode [ 54.512257][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 54.514985][ T5753] Cannot create hsr debugfs directory [ 54.609314][ T5744] hsr_slave_0: entered promiscuous mode [ 54.612514][ T5744] hsr_slave_1: entered promiscuous mode [ 54.615930][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 54.618314][ T5744] Cannot create hsr debugfs directory [ 54.828157][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.835282][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.838183][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.842827][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.846270][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.851465][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.853990][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.857729][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.906035][ T5755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.912573][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.916018][ T5755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.921528][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.929261][ T5755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.934478][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.937883][ T5755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.943117][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.012755][ T5753] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.018129][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.021165][ T5753] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.025975][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.029367][ T5753] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.036480][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.042677][ T5753] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.047994][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.111003][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.117221][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.126434][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.132378][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.136625][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.143250][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.147404][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.156390][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.179083][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.186635][ T5757] Bluetooth: hci2: command tx timeout [ 55.186642][ T5746] Bluetooth: hci0: command tx timeout [ 55.186649][ T64] Bluetooth: hci3: command tx timeout [ 55.234102][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.251156][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.253586][ T64] Bluetooth: hci1: command tx timeout [ 55.257918][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.260965][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.282899][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.285758][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.300502][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.311391][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.316886][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.319797][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.335457][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.338323][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.370620][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.379371][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.394404][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.396918][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.408159][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.410337][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.430268][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.440271][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.442647][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.459839][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.462354][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.690817][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.694853][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.732884][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.740148][ T5745] veth0_vlan: entered promiscuous mode [ 55.753590][ T5755] veth0_vlan: entered promiscuous mode [ 55.758331][ T5745] veth1_vlan: entered promiscuous mode [ 55.766396][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.773039][ T5755] veth1_vlan: entered promiscuous mode [ 55.809673][ T5753] veth0_vlan: entered promiscuous mode [ 55.818947][ T5745] veth0_macvtap: entered promiscuous mode [ 55.832948][ T5755] veth0_macvtap: entered promiscuous mode [ 55.836614][ T5744] veth0_vlan: entered promiscuous mode [ 55.839348][ T5753] veth1_vlan: entered promiscuous mode [ 55.844135][ T5745] veth1_macvtap: entered promiscuous mode [ 55.850602][ T5755] veth1_macvtap: entered promiscuous mode [ 55.858651][ T5744] veth1_vlan: entered promiscuous mode [ 55.869258][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.882540][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.886329][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.904915][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.912318][ T5753] veth0_macvtap: entered promiscuous mode [ 55.918450][ T5744] veth0_macvtap: entered promiscuous mode [ 55.922736][ T5753] veth1_macvtap: entered promiscuous mode [ 55.929162][ T5744] veth1_macvtap: entered promiscuous mode [ 55.972602][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.978755][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.983965][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.008548][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.014389][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.033732][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.038122][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.048810][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.051486][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.079907][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.082385][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.113911][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.116920][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.121913][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.124557][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.149094][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.152622][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.161288][ T5755] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.179611][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.181056][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.182090][ T5755] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 56.182827][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.187657][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.194025][ T5745] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 56.197335][ T5755] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 56.203875][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.206509][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.208942][ T5745] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 56.209170][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.216573][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.220663][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.227520][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.230872][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.235257][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.237927][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.240685][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.243284][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.246918][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.250362][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.273620][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.283538][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.403882][ T5898] input: syz0 as /devices/virtual/input/input5 [ 56.544067][ T5892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.615426][ T5823] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.633474][ T56] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 56.706371][ T5892] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 56.709559][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.765331][ T5823] usb 7-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 56.768628][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.859459][ T56] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 56.862534][ T56] usb 8-1: can't read configurations, error -71 [ 56.928341][ T5892] lg-g15 0003:046D:C222.0002: hidraw1: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 57.188649][ T5823] hid-rmi 0003:1532:011D.0003: hiddev0,hidraw2: USB HID v1.11 Device [HID 1532:011d] on usb-dummy_hcd.2-1/input0 [ 57.253890][ T64] Bluetooth: hci3: command tx timeout [ 57.263924][ T64] Bluetooth: hci0: command tx timeout [ 57.264577][ T5757] Bluetooth: hci2: command tx timeout [ 57.333458][ T5757] Bluetooth: hci1: command tx timeout [ 57.400074][ T5920] PM: hibernation: hibernation entry [ 57.834616][ T1351] input: PS/2 Generic Mouse as /devices/serio2/input/input7 [ 58.063513][ T1351] psmouse serio2: Failed to enable mouse on [ 58.076849][ T5908] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9 [ 58.231170][ T5920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.235004][ T5920] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.242142][ T5920] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.247327][ T5920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.249745][ T5920] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.255949][ T5920] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.260142][ T5920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.262618][ T5920] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.268867][ T5920] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.272478][ T5920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.275418][ T5920] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.280409][ T5920] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.306361][ T13] Filesystems sync: 0.019 seconds [ 58.403472][ T5837] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.558091][ T5837] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 58.561039][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.563562][ T5837] usb 5-1: Product: syz [ 58.564948][ T5837] usb 5-1: Manufacturer: syz [ 58.566384][ T5837] usb 5-1: SerialNumber: syz [ 58.576032][ T5837] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 59.302159][ T5892] lg-g15 0003:046D:C222.0002: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 59.309949][ T5892] usb 6-1: USB disconnect, device number 2 [ 59.503424][ T5757] Bluetooth: hci0: command 0x0419 tx timeout [ 59.623479][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.785205][ T5892] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 59.788057][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.055671][ T5837] usb 5-1: Scarlett Gen 2 USB request timed out, cmd 0 [ 60.058049][ T5837] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -110 [ 60.082209][ T5837] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -110 [ 60.100126][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.200894][ T5892] gud 6-1:1.0: No supported pixel formats found [ 60.203698][ T5892] gud 6-1:1.0: probe with driver gud failed with error -22 [ 60.293443][ T5757] Bluetooth: hci3: command 0x0419 tx timeout [ 60.293740][ T5746] Bluetooth: hci1: command 0x0419 tx timeout [ 60.297870][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 60.581638][ T56] usb 7-1: USB disconnect, device number 2 [ 60.618834][ T5938] (NULL device *): [drm] The number of connectors must be between 1 and 31 [ 60.667455][ T5940] PM: suspend entry (deep) [ 60.669568][ T5940] PM: suspend exit [ 60.703710][ T5837] input: PS/2 Generic Mouse as /devices/serio3/input/input11 [ 60.913525][ T5837] psmouse serio3: Failed to enable mouse on [ 61.180959][ T5837] usb 5-1: USB disconnect, device number 2 [ 61.203510][ T5892] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.304250][ T62] [ 61.305247][ T62] ====================================================== [ 61.307904][ T62] WARNING: possible circular locking dependency detected [ 61.310586][ T62] syzkaller #0 Not tainted [ 61.312415][ T62] ------------------------------------------------------ [ 61.314783][ T62] kworker/u33:3/62 is trying to acquire lock: [ 61.317195][ T62] ffff88804b3fe2c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_receive_buf_common+0x85/0x1930 [ 61.321308][ T62] [ 61.321308][ T62] but task is already holding lock: [ 61.324090][ T62] ffff88801404a8b8 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x730 [ 61.327464][ T62] [ 61.327464][ T62] which lock already depends on the new lock. [ 61.327464][ T62] [ 61.331469][ T62] [ 61.331469][ T62] the existing dependency chain (in reverse order) is: [ 61.334890][ T62] [ 61.334890][ T62] -> #3 (&buf->lock){+.+.}-{4:4}: [ 61.337764][ T62] lock_acquire+0x1b9/0x370 [ 61.339730][ T62] __mutex_lock+0x1a4/0x1bd0 [ 61.341733][ T62] tty_buffer_flush+0x72/0x310 [ 61.343871][ T62] tty_ldisc_flush+0xd2/0xf0 [ 61.345913][ T62] __do_SAK+0x368/0x480 [ 61.347636][ T62] vc_SAK+0x7f/0x320 [ 61.349047][ T62] process_one_work+0xa23/0x1940 [ 61.350750][ T62] worker_thread+0x5ef/0xe50 [ 61.352666][ T62] kthread+0x370/0x450 [ 61.354312][ T62] ret_from_fork+0x72b/0xd50 [ 61.356170][ T62] ret_from_fork_asm+0x1a/0x30 [ 61.358272][ T62] [ 61.358272][ T62] -> #2 (console_lock){+.+.}-{0:0}: [ 61.361194][ T62] lock_acquire+0x1b9/0x370 [ 61.363248][ T62] console_lock+0x7a/0xa0 [ 61.365213][ T62] serial_core_register_port+0xe65/0x16f0 [ 61.367794][ T62] serial8250_register_8250_port+0x15af/0x2330 [ 61.369858][ T62] serial_pnp_probe+0x436/0x930 [ 61.371597][ T62] pnp_device_probe+0x2b3/0x4a0 [ 61.373563][ T62] really_probe+0x241/0xa60 [ 61.375202][ T62] __driver_probe_device+0x20e/0x450 [ 61.377025][ T62] driver_probe_device+0x4a/0x140 [ 61.378876][ T62] __driver_attach+0x21f/0x5b0 [ 61.381049][ T62] bus_for_each_dev+0x13e/0x1d0 [ 61.383078][ T62] bus_add_driver+0x305/0x5b0 [ 61.384721][ T5892] usb 7-1: New USB device found, idVendor=0424, idProduct=9500, bcdDevice= 0.00 [ 61.384849][ T62] driver_register+0x1e2/0x360 [ 61.387790][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.389286][ T62] serial8250_init+0xcc/0x1c0 [ 61.389305][ T62] do_one_initcall+0x11d/0x700 [ 61.394929][ T62] kernel_init_freeable+0x6ea/0x7b0 [ 61.396673][ T62] kernel_init+0x1f/0x1e0 [ 61.398164][ T62] ret_from_fork+0x72b/0xd50 [ 61.399771][ T62] ret_from_fork_asm+0x1a/0x30 [ 61.401329][ T62] [ 61.401329][ T62] -> #1 (&port->mutex){+.+.}-{4:4}: [ 61.403531][ T62] lock_acquire+0x1b9/0x370 [ 61.405075][ T62] __mutex_lock+0x1a4/0x1bd0 [ 61.406602][ T62] uart_set_termios+0x8e/0x690 [ 61.408192][ T62] tty_set_termios+0x64d/0x980 [ 61.409836][ T62] set_termios+0x5c8/0x880 [ 61.411352][ T62] tty_mode_ioctl+0x17e/0xd40 [ 61.412941][ T62] n_tty_ioctl_helper+0x47/0x2b0 [ 61.414667][ T62] n_tty_ioctl+0x53/0x340 [ 61.416270][ T62] tty_ioctl+0x11b4/0x1640 [ 61.418317][ T62] __x64_sys_ioctl+0x18e/0x210 [ 61.420460][ T62] do_syscall_64+0x115/0x840 [ 61.422508][ T62] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.425050][ T62] [ 61.425050][ T62] -> #0 (&tty->termios_rwsem){++++}-{4:4}: [ 61.428197][ T62] check_prev_add+0xeb/0xe60 [ 61.430214][ T62] __lock_acquire+0x136c/0x1a40 [ 61.432413][ T62] lock_acquire+0x1b9/0x370 [ 61.434227][ T62] down_read+0x99/0x4c0 [ 61.435671][ T62] n_tty_receive_buf_common+0x85/0x1930 [ 61.437522][ T62] tty_ldisc_receive_buf+0xaa/0x1a0 [ 61.439269][ T62] tty_port_default_receive_buf+0x70/0xb0 [ 61.441223][ T62] flush_to_ldisc+0x26b/0x730 [ 61.442939][ T62] process_one_work+0xa23/0x1940 [ 61.444687][ T62] worker_thread+0x5ef/0xe50 [ 61.446300][ T62] kthread+0x370/0x450 [ 61.447767][ T62] ret_from_fork+0x72b/0xd50 [ 61.449407][ T62] ret_from_fork_asm+0x1a/0x30 [ 61.451066][ T62] [ 61.451066][ T62] other info that might help us debug this: [ 61.451066][ T62] [ 61.454044][ T62] Chain exists of: [ 61.454044][ T62] &tty->termios_rwsem --> console_lock --> &buf->lock [ 61.454044][ T62] [ 61.457742][ T62] Possible unsafe locking scenario: [ 61.457742][ T62] [ 61.460101][ T62] CPU0 CPU1 [ 61.461681][ T62] ---- ---- [ 61.463257][ T62] lock(&buf->lock); [ 61.464681][ T62] lock(console_lock); [ 61.466898][ T62] lock(&buf->lock); [ 61.469483][ T62] rlock(&tty->termios_rwsem); [ 61.471378][ T62] [ 61.471378][ T62] *** DEADLOCK *** [ 61.471378][ T62] [ 61.474474][ T62] 4 locks held by kworker/u33:3/62: [ 61.476328][ T62] #0: ffff88801bce4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 61.480616][ T62] #1: ffffc900009efd08 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 61.484868][ T62] #2: ffff88801404a8b8 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x730 [ 61.488447][ T62] #3: ffff88804b3fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x21/0x90 [ 61.492046][ T62] [ 61.492046][ T62] stack backtrace: [ 61.494313][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 61.494335][ T62] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.494347][ T62] Workqueue: events_unbound flush_to_ldisc [ 61.494380][ T62] Call Trace: [ 61.494394][ T62] [ 61.494401][ T62] dump_stack_lvl+0x100/0x190 [ 61.494419][ T62] print_circular_bug.cold+0x178/0x1c7 [ 61.494444][ T62] check_noncircular+0x146/0x160 [ 61.494470][ T62] check_prev_add+0xeb/0xe60 [ 61.494492][ T62] __lock_acquire+0x136c/0x1a40 [ 61.494517][ T62] lock_acquire+0x1b9/0x370 [ 61.494539][ T62] ? n_tty_receive_buf_common+0x85/0x1930 [ 61.494555][ T62] ? __pfx___might_resched+0x10/0x10 [ 61.494580][ T62] down_read+0x99/0x4c0 [ 61.494603][ T62] ? n_tty_receive_buf_common+0x85/0x1930 [ 61.494619][ T62] ? __pfx_down_read+0x10/0x10 [ 61.494639][ T62] ? rcu_is_watching+0x12/0xc0 [ 61.494660][ T62] n_tty_receive_buf_common+0x85/0x1930 [ 61.494678][ T62] ? ldsem_down_read_trylock+0x115/0x190 [ 61.494693][ T62] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 61.494708][ T62] ? tty_buffer_free+0x12b/0x270 [ 61.494727][ T62] tty_ldisc_receive_buf+0xaa/0x1a0 [ 61.494746][ T62] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 61.494762][ T62] tty_port_default_receive_buf+0x70/0xb0 [ 61.494784][ T62] flush_to_ldisc+0x26b/0x730 [ 61.494804][ T62] ? rcu_is_watching+0x12/0xc0 [ 61.494822][ T62] process_one_work+0xa23/0x1940 [ 61.494847][ T62] ? __pfx_process_one_work+0x10/0x10 [ 61.494870][ T62] ? __pfx_flush_to_ldisc+0x10/0x10 [ 61.494890][ T62] worker_thread+0x5ef/0xe50 [ 61.494913][ T62] ? kthread+0x13a/0x450 [ 61.494932][ T62] ? __pfx_worker_thread+0x10/0x10 [ 61.494952][ T62] kthread+0x370/0x450 [ 61.494976][ T62] ? __pfx_kthread+0x10/0x10 [ 61.494996][ T62] ret_from_fork+0x72b/0xd50 [ 61.495015][ T62] ? __pfx_ret_from_fork+0x10/0x10 [ 61.495033][ T62] ? __switch_to+0x800/0x10f0 [ 61.495056][ T62] ? __pfx_kthread+0x10/0x10 [ 61.495075][ T62] ret_from_fork_asm+0x1a/0x30 [ 61.495100][ T62] [ 61.583454][ T5746] Bluetooth: hci0: command 0x0419 tx timeout [ 62.373671][ T5746] Bluetooth: hci1: command 0x0419 tx timeout [ 62.373741][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 62.373777][ T5757] Bluetooth: hci3: command 0x0419 tx timeout [ 62.598770][ T5892] smsc95xx 7-1:1.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 62.603592][ T5892] smsc95xx 7-1:1.0: probe with driver smsc95xx failed with error -71 [ 62.607850][ T5892] usb 7-1: USB disconnect, device number 3 [ 63.293092][ T5837] usb 6-1: USB disconnect, device number 3 [ 63.653465][ T64] Bluetooth: hci0: command 0x0419 tx timeout [ 64.453486][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 64.453581][ T5746] Bluetooth: hci3: command 0x0419 tx timeout [ 64.453661][ T5757] Bluetooth: hci1: command 0x0419 tx timeout [ 65.733581][ T5746] Bluetooth: hci0: command 0x0419 tx timeout [ 66.533524][ T5746] Bluetooth: hci2: command 0x0419 tx timeout [ 66.533596][ T64] Bluetooth: hci3: command 0x0419 tx timeout [ 66.533609][ T5757] Bluetooth: hci1: command 0x0419 tx timeout [ 70.937246][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.939979][ T1443] ieee802154 phy1 wpan1: encryption failed: -22