last executing test programs: 3m14.252744533s ago: executing program 0 (id=1): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x34b6, &(0x7f0000000040)={0x0, 0xd689, 0x80082, 0x3, 0x800000c5}, &(0x7f00000000c0), &(0x7f0000000540), &(0x7f0000000f40)) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioperm(0x3, 0x4, 0x100000a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, 0x0, 0x40800) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x132) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x100, 0x7, 0xa18, 0x0, 0x0, 0x4}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./file0/file0\x00', 0x1) 3m9.646173613s ago: executing program 0 (id=12): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)}) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r6 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') r4 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) semop(r4, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) r5 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) dup3(r5, r0, 0x80000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001840)) 2m21.398513243s ago: executing program 3 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x400c014}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027400000000000"], 0xb4}}, 0x8044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c00018006000100003f0100080003400000"], 0x1a50}}, 0x8000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x2820000, &(0x7f0000000100)="1362114fefa6d8d4aa7f4ff03af41247ec8756768dceed3715888ebc14b158ac0e52c09f5077fbf5023cc9a27a7d97eb9dad8aeba35a6ec2b94714d27a0cfb1d488e9c9d70e12aebeb9237463f1abab0b49a3c36d51796b60eba0bc7e9644a379b99b69096ac5b6e420f21d76972955d0fc68e1b5d08d0df72742f6d30f2f68b7bfb9fae4ff5c4", 0x87, &(0x7f00000001c0), &(0x7f0000000200), 0x0) listen(r2, 0xda90) accept4(r2, &(0x7f0000000000)=@sco={0x1f, @fixed}, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x2, 0x1, 0x81, 0x9}, {0x2, 0xfb, 0xa, 0x9}, {0xffff, 0x0, 0xfe, 0x1ff}, {0x3, 0x80, 0x7, 0x884c}, {0x1, 0xf, 0xf2, 0x8}]}) 2m20.157245369s ago: executing program 3 (id=83): chdir(0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) 2m4.981156662s ago: executing program 33 (id=83): chdir(0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) 12.917197005s ago: executing program 1 (id=399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x440d0) 11.923822721s ago: executing program 1 (id=400): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000005c0)={&(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x9, 0x5}) 8.387643507s ago: executing program 1 (id=403): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 8.074952469s ago: executing program 2 (id=404): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/87, 0x57}, 0x2}], 0x1, 0x122, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 7.670007502s ago: executing program 2 (id=405): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580), 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="5a000000020000", 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0) r3 = gettid() r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, &(0x7f00000000c0), 0x0) tkill(r3, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 7.16885985s ago: executing program 1 (id=406): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x8383) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 4.266612952s ago: executing program 4 (id=407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0x8) 4.087134111s ago: executing program 4 (id=408): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x20400) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_to_batadv\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x5228, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0xff20, 0x40, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0x4000b, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x4, 0x11000, 0x10001, 0x5, 0x79b, 0x2, 0xbd, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xa9a3, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0xb, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7f, 0x331, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20008, 0x9, 0x2, 0xffffffff, 0x2, 0xd9a, 0xd, 0x2a2, 0x1, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x8000003, 0x404, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.830431104s ago: executing program 4 (id=409): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='mtd0\x00', 0x13b) mkdir(&(0x7f00000003c0)='./trace/set_event\x00', 0x104) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000740)='./file1\x00', 0x8, 0x1) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, &(0x7f0000000180)=0x0, 0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x8, 0x0}) syz_io_uring_submit(r1, 0x0, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x800ed, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r3}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r6, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r7, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) 3.700846806s ago: executing program 1 (id=410): sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3df1", 0x2}, {&(0x7f0000000380)="1fece8605605f86ae5ed2f9d4a694a3c5efa1cee7653147e2455e6ed2e83c0518fe6", 0x22}, {&(0x7f0000000480)="fcf6b777a5376144c4", 0x9}], 0x3}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.650806245s ago: executing program 2 (id=411): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') preadv(r0, 0x0, 0x0, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f00000003c0)={0x10004, 0x4, 0x26000, 0x1000, &(0x7f0000fff000/0x1000)=nil, 0x1000, r0}) 1.387711765s ago: executing program 4 (id=412): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="0200000103000000", 0x8) 932.140859ms ago: executing program 4 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}}, 0x20}, 0x1, 0x0, 0x0, 0x24008014}, 0xc010) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 884.16554ms ago: executing program 2 (id=414): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x5) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xe, 0x200ffffd, 0x7, 0xfffffff2, 0x0, "4d04000000d600", 0x8}) readv(r0, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) 804.397573ms ago: executing program 2 (id=415): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000040)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 662.739542ms ago: executing program 2 (id=416): pipe2(0x0, 0x0) fanotify_init(0x200, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r0, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 85.986919ms ago: executing program 1 (id=417): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 4 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): [ 97.655221][ T36] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 105.903624][ T5575] cgroup: Unknown subsys name 'net' [ 106.144955][ T5575] cgroup: Unknown subsys name 'cpuset' [ 106.197809][ T5575] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 108.452996][ T5575] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 111.458293][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.463638][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.530024][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.530917][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.533211][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.533712][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.536932][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.557403][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.593792][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.596865][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.625595][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.631511][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.634992][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.646560][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.659609][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.664746][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.672312][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.676241][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.680013][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.683714][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.690842][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.701601][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.704484][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.766597][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.778774][ T4901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.869148][ T4901] Bluetooth: hci1: command tx timeout [ 113.869329][ T5597] Bluetooth: hci0: command tx timeout [ 113.947720][ T4901] Bluetooth: hci2: command tx timeout [ 113.947856][ T4901] Bluetooth: hci3: command tx timeout [ 113.948277][ T5597] Bluetooth: hci4: command tx timeout [ 114.823031][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.824893][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.825089][ T5593] bridge_slave_0: entered allmulticast mode [ 114.836131][ T5593] bridge_slave_0: entered promiscuous mode [ 114.922157][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.922286][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.922841][ T5593] bridge_slave_1: entered allmulticast mode [ 114.926211][ T5593] bridge_slave_1: entered promiscuous mode [ 114.994836][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.995009][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.995219][ T5596] bridge_slave_0: entered allmulticast mode [ 115.018689][ T5596] bridge_slave_0: entered promiscuous mode [ 115.048509][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.048649][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.049039][ T5595] bridge_slave_0: entered allmulticast mode [ 115.051237][ T5595] bridge_slave_0: entered promiscuous mode [ 115.112535][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.112648][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.133038][ T5596] bridge_slave_1: entered allmulticast mode [ 115.135186][ T5596] bridge_slave_1: entered promiscuous mode [ 115.162799][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.162932][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.163469][ T5595] bridge_slave_1: entered allmulticast mode [ 115.165505][ T5595] bridge_slave_1: entered promiscuous mode [ 115.250916][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.336493][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.364504][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.364677][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.366399][ T5594] bridge_slave_0: entered allmulticast mode [ 115.377957][ T5594] bridge_slave_0: entered promiscuous mode [ 115.407541][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.407677][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.407854][ T5592] bridge_slave_0: entered allmulticast mode [ 115.410021][ T5592] bridge_slave_0: entered promiscuous mode [ 115.415260][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.479597][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.482173][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.482264][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.482413][ T5594] bridge_slave_1: entered allmulticast mode [ 115.486117][ T5594] bridge_slave_1: entered promiscuous mode [ 115.491291][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.492057][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.493845][ T5592] bridge_slave_1: entered allmulticast mode [ 115.504755][ T5592] bridge_slave_1: entered promiscuous mode [ 115.557916][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.615811][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.686251][ T5593] team0: Port device team_slave_0 added [ 115.763970][ T5593] team0: Port device team_slave_1 added [ 115.795640][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.810919][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.813302][ T5596] team0: Port device team_slave_0 added [ 115.850273][ T5595] team0: Port device team_slave_0 added [ 115.853182][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.856062][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.884959][ T5596] team0: Port device team_slave_1 added [ 115.916039][ T5595] team0: Port device team_slave_1 added [ 115.947427][ T5613] Bluetooth: hci1: command tx timeout [ 115.947675][ T5597] Bluetooth: hci0: command tx timeout [ 115.989810][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.989826][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.989846][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.027526][ T5613] Bluetooth: hci3: command tx timeout [ 116.027642][ T5613] Bluetooth: hci2: command tx timeout [ 116.028222][ T5597] Bluetooth: hci4: command tx timeout [ 116.127966][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.127987][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.128016][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.216243][ T5594] team0: Port device team_slave_0 added [ 116.225161][ T5592] team0: Port device team_slave_0 added [ 116.569566][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.569582][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.569602][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.626929][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.628888][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.628977][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.676841][ T5594] team0: Port device team_slave_1 added [ 116.688293][ T5592] team0: Port device team_slave_1 added [ 116.690743][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.690763][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.690793][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.750083][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.750145][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.750221][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.964847][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.964864][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.964889][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.017263][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.017282][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.017311][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.076890][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.076953][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.082116][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.144122][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.144145][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.144166][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.203381][ T5593] hsr_slave_0: entered promiscuous mode [ 117.204604][ T5593] hsr_slave_1: entered promiscuous mode [ 117.338790][ T5596] hsr_slave_0: entered promiscuous mode [ 117.343305][ T5596] hsr_slave_1: entered promiscuous mode [ 117.344653][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 117.344791][ T5596] Cannot create hsr debugfs directory [ 117.381276][ T5595] hsr_slave_0: entered promiscuous mode [ 117.382270][ T5595] hsr_slave_1: entered promiscuous mode [ 117.383119][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 117.383145][ T5595] Cannot create hsr debugfs directory [ 117.578626][ T5594] hsr_slave_0: entered promiscuous mode [ 117.580038][ T5594] hsr_slave_1: entered promiscuous mode [ 117.581160][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 117.581192][ T5594] Cannot create hsr debugfs directory [ 117.633879][ T5592] hsr_slave_0: entered promiscuous mode [ 117.634896][ T5592] hsr_slave_1: entered promiscuous mode [ 117.635610][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 117.635634][ T5592] Cannot create hsr debugfs directory [ 118.027328][ T4901] Bluetooth: hci1: command tx timeout [ 118.027444][ T5597] Bluetooth: hci0: command tx timeout [ 118.118118][ T5597] Bluetooth: hci4: command tx timeout [ 118.118159][ T5597] Bluetooth: hci2: command tx timeout [ 118.118193][ T5597] Bluetooth: hci3: command tx timeout [ 118.681799][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.732551][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.748133][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.794705][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.805971][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.831017][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.865804][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.882947][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.063133][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.126031][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.137633][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.162790][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.168530][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.201172][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.250658][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.284987][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.496072][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.530865][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.550580][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.592765][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.605181][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.633315][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.672710][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.712141][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.875367][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.940545][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.973123][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.002043][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.027609][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.071032][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.091542][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.107260][ T5613] Bluetooth: hci0: command tx timeout [ 120.107331][ T5613] Bluetooth: hci1: command tx timeout [ 120.148888][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.187239][ T4901] Bluetooth: hci2: command tx timeout [ 120.187275][ T4901] Bluetooth: hci3: command tx timeout [ 120.187305][ T4901] Bluetooth: hci4: command tx timeout [ 120.270301][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.405687][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.431397][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.458415][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.494273][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.523539][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.561205][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.581619][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.583497][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.633579][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.725814][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.726460][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.812779][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.855597][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.855733][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.979125][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.059324][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.059455][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.110872][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.155815][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.155979][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.299005][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.349979][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.410002][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.410734][ T1432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.492914][ T1550] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.493136][ T1550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.604398][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.666825][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.674247][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.704054][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.756868][ T1550] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.756963][ T1550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.954469][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.045620][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.045901][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.194005][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.194159][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.901858][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.689271][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.354368][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.423984][ T5596] veth0_vlan: entered promiscuous mode [ 124.485674][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.571823][ T5596] veth1_vlan: entered promiscuous mode [ 124.775739][ T5593] veth0_vlan: entered promiscuous mode [ 124.796470][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.876616][ T5593] veth1_vlan: entered promiscuous mode [ 124.905897][ T5594] veth0_vlan: entered promiscuous mode [ 124.963437][ T5596] veth0_macvtap: entered promiscuous mode [ 125.016553][ T5596] veth1_macvtap: entered promiscuous mode [ 125.041766][ T5594] veth1_vlan: entered promiscuous mode [ 125.056942][ T5592] veth0_vlan: entered promiscuous mode [ 125.136187][ T5592] veth1_vlan: entered promiscuous mode [ 125.189338][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.195532][ T5593] veth0_macvtap: entered promiscuous mode [ 125.218761][ T5595] veth0_vlan: entered promiscuous mode [ 125.255276][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.255943][ T5593] veth1_macvtap: entered promiscuous mode [ 125.346598][ T5595] veth1_vlan: entered promiscuous mode [ 125.364851][ T5594] veth0_macvtap: entered promiscuous mode [ 125.416353][ T5594] veth1_macvtap: entered promiscuous mode [ 125.429734][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.516664][ T5592] veth0_macvtap: entered promiscuous mode [ 125.529817][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.647526][ T5592] veth1_macvtap: entered promiscuous mode [ 125.758332][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.868940][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.015378][ T5595] veth0_macvtap: entered promiscuous mode [ 126.040652][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.194765][ T5595] veth1_macvtap: entered promiscuous mode [ 126.225448][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.366710][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.366744][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.732873][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.923154][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.944095][ T1439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.944137][ T1439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.251793][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.251816][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.493581][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.493606][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.076404][ T1439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.076431][ T1439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.279685][ T1432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.279710][ T1432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.415281][ T5596] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 128.561484][ T1432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.561510][ T1432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.746206][ T5783] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 128.910967][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.910991][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.292274][ T1439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.293590][ T1439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.370337][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.372005][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.372025][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.375782][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.375875][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.375915][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.375955][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.375994][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.376041][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.376083][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.376125][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.952962][ T1439] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.953444][ T1439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.005353][ T1439] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.005368][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.005393][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.094007][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.234678][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.258108][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.261658][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.263918][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.264138][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.485467][ T5817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'. [ 135.764803][ T5821] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 137.929631][ T5843] Zero length message leads to an empty skb [ 138.892480][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.893399][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.968884][ T5838] nvme nvme0: failed to connect socket: -512 [ 145.117147][ T5872] tipc: Started in network mode [ 145.117239][ T5872] tipc: Node identity 4, cluster identity 4711 [ 145.117254][ T5872] tipc: Node number set to 4 [ 146.688802][ T5882] warning: `syz.4.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 146.724645][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 146.727834][ T5882] bridge_slave_1: left allmulticast mode [ 146.728048][ T5882] bridge_slave_1: left promiscuous mode [ 146.737235][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.508769][ T5878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.107058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.117054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.127044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.137048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.147027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.157045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.167040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.177032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.187052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.197042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.410162][ T5890] loop7: detected capacity change from 0 to 16384 [ 152.464287][ T5882] bridge_slave_0: left allmulticast mode [ 152.464530][ T5882] bridge_slave_0: left promiscuous mode [ 152.467693][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.218317][ T5895] loop7: detected capacity change from 16384 to 0 [ 153.856135][ T4901] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.902413][ T1000] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 153.942869][ T4901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.944848][ T4901] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.920112][ T4901] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.921073][ T4901] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.067641][ T5613] Bluetooth: hci5: command tx timeout [ 157.731772][ T5925] capability: warning: `syz.1.31' uses deprecated v2 capabilities in a way that may be insecure [ 157.975791][ T1550] IPVS: starting estimator thread 0... [ 158.449487][ T5926] IPVS: using max 7 ests per chain, 16800 per kthread [ 159.160475][ T5613] Bluetooth: hci5: command tx timeout [ 159.567326][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 160.188176][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 160.238462][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.278734][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 160.278777][ T9] usb 5-1: Product: syz [ 160.278794][ T9] usb 5-1: Manufacturer: syz [ 160.451213][ T9] usb 5-1: selecting invalid altsetting 1 [ 160.495701][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 160.495858][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 162.192466][ T5953] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 163.594091][ T5613] Bluetooth: hci5: command tx timeout [ 164.077221][ T9] DVB: Unable to find symbol cx22700_attach() [ 165.052559][ T5971] netlink: 32 bytes leftover after parsing attributes in process `syz.3.40'. [ 165.849872][ T5613] Bluetooth: hci5: command tx timeout [ 165.952692][ T9] DVB: Unable to find symbol tda10046_attach() [ 165.952721][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 166.766203][ T9] usb 5-1: USB disconnect, device number 2 [ 166.800354][ T5723] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 167.017193][ T5723] usb 2-1: Using ep0 maxpacket: 8 [ 167.019097][ T5723] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.021376][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.021413][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.021532][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.410092][ T5709] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 167.578465][ T5723] usb 2-1: config 0 descriptor?? [ 167.660371][ T5709] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 167.661659][ T5709] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.661694][ T5709] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.661720][ T5709] usb 4-1: config 0 interface 0 has no altsetting 0 [ 167.661745][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.064121][ T5709] usb 4-1: config 0 descriptor?? [ 168.259680][ T5723] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 168.574791][ T5723] usb 2-1: USB disconnect, device number 3 [ 170.316181][ T5709] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 170.316729][ T5709] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 170.317559][ T5709] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 170.327044][ T5709] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 170.327098][ T5709] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 170.327129][ T5709] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 170.327158][ T5709] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 170.327192][ T5709] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 170.327219][ T5709] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 170.327245][ T5709] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 170.327347][ T5709] cougar 0003:060B:700A.0001: unbalanced collection at end of report description [ 170.387804][ T5709] cougar 0003:060B:700A.0001: parse failed [ 170.389286][ T5709] cougar 0003:060B:700A.0001: probe with driver cougar failed with error -22 [ 171.331984][ T5709] usb 4-1: USB disconnect, device number 2 [ 171.350225][ T6009] netlink: 256 bytes leftover after parsing attributes in process `syz.1.49'. [ 171.499266][ T6011] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 172.811585][ T6018] netlink: 60 bytes leftover after parsing attributes in process `syz.4.53'. [ 173.344289][ T6019] netlink: 60 bytes leftover after parsing attributes in process `syz.4.53'. [ 173.918038][ T5723] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 174.127166][ T5723] usb 5-1: Using ep0 maxpacket: 8 [ 174.143812][ T5723] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 174.146049][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.146085][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.146110][ T5723] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.146155][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.212271][ T5723] usb 5-1: config 0 descriptor?? [ 174.846529][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.911537][ T5723] sony 0003:054C:042F.0002: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 175.064556][ T6046] Bluetooth: MGMT ver 1.23 [ 175.064629][ T6046] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 175.207208][ T5723] sony 0003:054C:042F.0002: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.4-1/input0 [ 175.207246][ T5723] sony 0003:054C:042F.0002: failed to claim input [ 175.408448][ T5723] usb 5-1: USB disconnect, device number 3 [ 175.603174][ T6054] netlink: 256 bytes leftover after parsing attributes in process `syz.3.65'. [ 176.932033][ T6064] netlink: 'syz.1.66': attribute type 2 has an invalid length. [ 176.932062][ T6064] netlink: 164 bytes leftover after parsing attributes in process `syz.1.66'. [ 177.511291][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.658198][ T6065] vlan2: entered allmulticast mode [ 178.658235][ T6065] bond0: entered allmulticast mode [ 178.658251][ T6065] bond_slave_0: entered allmulticast mode [ 178.658280][ T6065] bond_slave_1: entered allmulticast mode [ 179.006427][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.006600][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.006827][ T5909] bridge_slave_0: entered allmulticast mode [ 179.042212][ T5909] bridge_slave_0: entered promiscuous mode [ 179.068446][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.068586][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.068811][ T5909] bridge_slave_1: entered allmulticast mode [ 179.075046][ T5909] bridge_slave_1: entered promiscuous mode [ 179.374085][ T5909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.796269][ T5709] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 179.843119][ T5884] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 179.905799][ T1432] rpcbind: server 127.0.0.1 not responding, timed out [ 179.944492][ T5716] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 179.997120][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 179.998278][ T5884] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 179.999868][ T5884] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 179.999927][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 179.999973][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.090107][ T5884] usb 4-1: config 0 descriptor?? [ 180.347918][ T5716] usb 5-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 180.403164][ T5716] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 180.403199][ T5716] usb 5-1: config 0 has no interface number 0 [ 180.403377][ T5716] usb 5-1: too many endpoints for config 0 interface 16 altsetting 5: 66, using maximum allowed: 30 [ 180.403423][ T5716] usb 5-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.403517][ T5716] usb 5-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.403544][ T5716] usb 5-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 180.403574][ T5716] usb 5-1: config 0 interface 16 has no altsetting 0 [ 180.403612][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.493984][ T5709] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 180.495537][ T5709] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.495595][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.495627][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.495668][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.639904][ T5709] usb 3-1: config 0 descriptor?? [ 181.009751][ T5884] usb 4-1: can't set config #0, error -71 [ 181.269551][ T5716] usb 5-1: config 0 descriptor?? [ 181.319565][ T5884] usb 4-1: USB disconnect, device number 3 [ 181.358273][ T5709] hid-picolcd 0003:04D8:F002.0003: unknown global tag 0xc [ 181.358301][ T5709] hid-picolcd 0003:04D8:F002.0003: item 0 1 1 12 parsing failed [ 181.359049][ T5709] hid-picolcd 0003:04D8:F002.0003: device report parse failed [ 181.359165][ T5709] hid-picolcd 0003:04D8:F002.0003: probe with driver hid-picolcd failed with error -22 [ 181.462691][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.168425][ T6001] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 183.168724][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 183.328557][ T6001] usb 2-1: device descriptor read/64, error -32 [ 183.417193][ T5709] usb 3-1: USB disconnect, device number 2 [ 183.422087][ T5716] usbhid 5-1:0.16: can't add hid device: -71 [ 183.422238][ T5716] usbhid 5-1:0.16: probe with driver usbhid failed with error -71 [ 183.584175][ T6111] netlink: 256 bytes leftover after parsing attributes in process `syz.3.78'. [ 183.636448][ T5716] usb 5-1: USB disconnect, device number 4 [ 183.664097][ T5909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.681165][ T6001] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.838337][ T6001] usb 2-1: Using ep0 maxpacket: 16 [ 183.843530][ T6001] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 183.850359][ T6001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.047286][ T6001] usb 2-1: config 0 descriptor?? [ 184.629805][ T6001] hid_parser_main: 4 callbacks suppressed [ 184.629849][ T6001] elo 0003:04E7:0009.0004: unknown main item tag 0x4 [ 184.629879][ T6001] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 184.629905][ T6001] elo 0003:04E7:0009.0004: unbalanced collection at end of report description [ 184.630634][ T6001] elo 0003:04E7:0009.0004: parse failed [ 184.630752][ T6001] elo 0003:04E7:0009.0004: probe with driver elo failed with error -22 [ 184.737119][ T5716] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 184.889727][ T1000] usb 2-1: USB disconnect, device number 5 [ 184.899165][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 184.922554][ T5716] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 184.924359][ T5716] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.924397][ T5716] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.924428][ T5716] usb 5-1: config 0 interface 0 has no altsetting 0 [ 184.924465][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.129131][ T5716] usb 5-1: config 0 descriptor?? [ 185.877866][ T5716] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf3 found [ 185.877956][ T5716] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf4 found [ 186.147110][ T5716] usb 5-1: USB disconnect, device number 5 [ 186.185510][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.257981][ T5909] team0: Port device team_slave_0 added [ 186.290652][ T6120] wlan0 speed is unknown, defaulting to 1000 [ 186.338769][ T5909] team0: Port device team_slave_1 added [ 186.344145][ T6120] wlan0 speed is unknown, defaulting to 1000 [ 186.665749][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.665772][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.665802][ T5909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.746734][ T5909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.746758][ T5909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.746793][ T5909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.045078][ T6120] wlan0 speed is unknown, defaulting to 1000 [ 187.207140][ T6120] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 187.207185][ T6120] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 187.207231][ T6120] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 188.155997][ T5909] hsr_slave_0: entered promiscuous mode [ 188.191922][ T5909] hsr_slave_1: entered promiscuous mode [ 188.195451][ T5909] debugfs: 'hsr0' already exists in 'hsr' [ 188.195481][ T5909] Cannot create hsr debugfs directory [ 188.374619][ T6120] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.649797][ T6145] netlink: 256 bytes leftover after parsing attributes in process `syz.4.92'. [ 188.830028][ T6120] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 191.475316][ T1423] rpcbind: server 127.0.0.1 not responding, timed out [ 192.227186][ T5709] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 192.407164][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 192.408364][ T5709] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 192.414735][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.414787][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.414832][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.529498][ T5709] usb 5-1: config 0 descriptor?? [ 192.619344][ T5709] hub 5-1:0.0: USB hub found [ 192.721423][ T155] bridge_slave_1: left allmulticast mode [ 192.726069][ T155] bridge_slave_1: left promiscuous mode [ 192.847590][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.880952][ T5709] hub 5-1:0.0: 26 ports detected [ 192.881600][ T5709] hub 5-1:0.0: insufficient power available to use all downstream ports [ 193.291301][ T5709] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 193.326740][ T5709] usbhid 5-1:0.0: can't add hid device: -71 [ 193.326892][ T5709] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 193.430202][ T5709] usb 5-1: USB disconnect, device number 6 [ 193.545584][ T155] bridge_slave_0: left allmulticast mode [ 193.545613][ T155] bridge_slave_0: left promiscuous mode [ 193.545864][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.718663][ T6180] capability: warning: `syz.2.104' uses 32-bit capabilities (legacy support in use) [ 195.353436][ T6187] netlink: 256 bytes leftover after parsing attributes in process `syz.1.106'. [ 195.705930][ T1439] IPVS: starting estimator thread 0... [ 195.910919][ T6194] IPVS: using max 7 ests per chain, 16800 per kthread [ 200.030794][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.030873][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.415938][ T4901] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.456634][ T4901] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.497805][ T4901] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.514207][ T4901] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.553787][ T4901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.069425][ T6225] binder: 6224:6225 ioctl c018620b 200000000180 returned -14 [ 202.479348][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.559122][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.610361][ T155] bond0 (unregistering): Released all slaves [ 202.723443][ T6120] wlan0 speed is unknown, defaulting to 1000 [ 203.418472][ T6120] wlan0 speed is unknown, defaulting to 1000 [ 203.665712][ T5986] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.787169][ T5613] Bluetooth: hci1: command tx timeout [ 203.858006][ T5986] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 203.860994][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.237235][ T5884] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 204.248641][ T6120] wlan0 speed is unknown, defaulting to 1000 [ 204.387254][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 204.388141][ T5884] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 204.474796][ T5884] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.474843][ T5884] usb 5-1: config 0 has no interface number 0 [ 204.474893][ T5884] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.474922][ T5884] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.474946][ T5884] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.474975][ T5884] usb 5-1: config 0 interface 1 has no altsetting 0 [ 204.475024][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.603516][ T5986] scsi host1: uas [ 204.791301][ T5884] usb 5-1: config 0 descriptor?? [ 204.988587][ T6120] wlan0 speed is unknown, defaulting to 1000 [ 205.108449][ C1] usb 2-1: stat urb: status -71 [ 205.221734][ C1] usb 2-1: cmd cmplt err -71 [ 205.279423][ T5986] usb 2-1: USB disconnect, device number 6 [ 205.280112][ T6120] wlan0 speed is unknown, defaulting to 1000 [ 205.283253][ T6120] wlan0 speed is unknown, defaulting to 1000 [ 205.459597][ T5884] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count [ 205.503416][ T5986] scsi 1:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 205.503589][ T5986] scsi 1:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00 [ 205.867601][ T5613] Bluetooth: hci1: command tx timeout [ 206.096469][ T5884] elan 0003:04F3:074D.0006: failed to start in urb: -90 [ 206.126184][ T5884] elan 0003:04F3:074D.0006: Set report error for parm 6: -71 [ 206.440187][ T5884] elan 0003:04F3:074D.0006: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.4-1/input1 [ 206.440225][ T5884] elan 0003:04F3:074D.0006: Input device is not registered [ 206.578924][ T5884] elan 0003:04F3:074D.0006: probe with driver elan failed with error -119 [ 206.749001][ T5884] usb 5-1: USB disconnect, device number 7 [ 207.747105][ T1000] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 207.908105][ T1000] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 207.909616][ T1000] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 207.909643][ T1000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.909663][ T1000] usb 3-1: config 0 has no interface number 0 [ 207.909708][ T1000] usb 3-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 207.909738][ T1000] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 207.909765][ T1000] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 207.909789][ T1000] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.947650][ T5613] Bluetooth: hci1: command tx timeout [ 207.973861][ T1000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 207.973938][ T1000] usb 3-1: Product: syz [ 207.973981][ T1000] usb 3-1: Manufacturer: syz [ 207.974015][ T1000] usb 3-1: SerialNumber: syz [ 208.110674][ T1000] usb 3-1: config 0 descriptor?? [ 208.555747][ T1000] radio-si470x 3-1:0.2: DeviceID=0x0000 ChipID=0x0000 [ 208.555781][ T1000] radio-si470x 3-1:0.2: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 208.925083][ T1000] radio-si470x 3-1:0.2: software version 0, hardware version 0 [ 208.925106][ T1000] radio-si470x 3-1:0.2: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 208.925121][ T1000] radio-si470x 3-1:0.2: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 209.133438][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.132'. [ 209.170925][ T1000] radio-si470x 3-1:0.2: si470x_set_report: usb_control_msg returned -71 [ 209.171120][ T1000] radio-si470x 3-1:0.2: submitting int urb failed (-90) [ 209.171583][ T1000] radio-si470x 3-1:0.2: si470x_set_report: usb_control_msg returned -71 [ 209.171961][ T1000] radio-si470x 3-1:0.2: probe with driver radio-si470x failed with error -22 [ 210.115142][ T5613] Bluetooth: hci1: command tx timeout [ 210.409303][ T1000] usb 3-1: USB disconnect, device number 3 [ 211.703993][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 211.706665][ T6303] tipc: Started in network mode [ 211.706699][ T6303] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 211.754274][ T6303] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 211.788179][ T1000] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 211.788604][ T6303] tipc: Enabled bearer , priority 10 [ 211.953435][ T1000] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 211.956884][ T1000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.143973][ T1000] usb 2-1: config 0 descriptor?? [ 212.284984][ T1000] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 212.815632][ T1000] gp8psk: usb out operation failed. [ 212.815678][ T1000] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 212.815723][ T1000] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 212.913274][ T1000] usb 2-1: USB disconnect, device number 7 [ 213.197242][ T36] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 213.356756][ T5723] tipc: Node number set to 1 [ 213.358402][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 213.360071][ T36] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 213.361979][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.362013][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.362037][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 213.362082][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.443806][ T5986] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 213.459410][ T6216] wlan0 speed is unknown, defaulting to 1000 [ 213.512357][ T36] usb 5-1: config 0 descriptor?? [ 213.603912][ T5986] usb 3-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 213.616874][ T5986] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.616908][ T5986] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.616970][ T5986] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.617004][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.741301][ T5986] usb 3-1: config 0 descriptor?? [ 214.167054][ T36] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.167099][ T36] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.167139][ T36] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.167189][ T36] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.167221][ T36] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.167252][ T36] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.167285][ T36] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.167319][ T36] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.167351][ T36] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.167384][ T36] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 214.623259][ T4901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.665640][ T4901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.704661][ T4901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.720386][ T4901] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.729994][ T4901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.762359][ T5986] hid-penmount 0003:14E1:6000.0008: hidraw0: USB HID v0.00 Device [HID 14e1:6000] on usb-dummy_hcd.2-1/input0 [ 214.988654][ T36] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input7 [ 215.224043][ T5986] usb 3-1: USB disconnect, device number 4 [ 215.433801][ T6347] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 215.756009][ T36] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 215.860122][ T36] usb 5-1: USB disconnect, device number 8 [ 215.878477][ T155] hsr_slave_0: left promiscuous mode [ 215.932248][ T5863] tipc: Subscription rejected, illegal request [ 215.987213][ T155] hsr_slave_1: left promiscuous mode [ 215.989223][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.989349][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.072943][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.072975][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.157161][ T5986] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 216.196547][ T6351] fido_id[6351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 216.349546][ T5986] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 216.367928][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.402023][ T5986] usb 3-1: config 0 descriptor?? [ 216.504129][ T5986] cp210x 3-1:0.0: cp210x converter detected [ 216.852148][ T155] veth1_macvtap: left promiscuous mode [ 216.865563][ T155] veth0_macvtap: left promiscuous mode [ 216.865971][ T155] veth1_vlan: left promiscuous mode [ 216.887145][ T5986] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 216.905564][ T155] veth0_vlan: left promiscuous mode [ 217.031422][ T5986] usb 3-1: cp210x converter now attached to ttyUSB0 [ 217.139114][ T5709] hid-generic 0000:0000:0001.0009: hidraw0: HID v0.10 Device [syz0] on syz1 [ 217.147230][ T5613] Bluetooth: hci4: command tx timeout [ 217.179862][ T5709] usb 3-1: USB disconnect, device number 5 [ 217.271404][ T6364] fido_id[6364]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.492499][ T5709] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.524631][ T5709] cp210x 3-1:0.0: device disconnected [ 217.822472][ T5723] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 217.967166][ T5723] usb 5-1: Using ep0 maxpacket: 16 [ 217.968019][ T5723] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 217.970932][ T5723] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 217.974978][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.975006][ T5723] usb 5-1: Product: syz [ 217.975019][ T5723] usb 5-1: Manufacturer: syz [ 217.975034][ T5723] usb 5-1: SerialNumber: syz [ 218.047115][ T5723] r8152-cfgselector 5-1: Unknown version 0x0000 [ 218.047146][ T5723] r8152-cfgselector 5-1: config 0 descriptor?? [ 218.217299][ T36] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 218.377734][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 218.378852][ T36] usb 2-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=48.60 [ 218.381601][ T36] usb 2-1: config 5 has an invalid interface number: 35 but max is 0 [ 218.381632][ T36] usb 2-1: config 5 has an invalid interface association descriptor of length 4, skipping [ 218.381655][ T36] usb 2-1: config 5 has an invalid interface number: 140 but max is 0 [ 218.381679][ T36] usb 2-1: config 5 has 2 interfaces, different from the descriptor's value: 1 [ 218.381705][ T36] usb 2-1: config 5 has no interface number 0 [ 218.381724][ T36] usb 2-1: config 5 has no interface number 1 [ 218.381802][ T36] usb 2-1: config 5 interface 35 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 218.381842][ T36] usb 2-1: too many endpoints for config 5 interface 140 altsetting 19: 183, using maximum allowed: 30 [ 218.381892][ T36] usb 2-1: config 5 interface 140 altsetting 19 has 0 endpoint descriptors, different from the interface descriptor's value: 183 [ 218.381925][ T36] usb 2-1: config 5 interface 35 has no altsetting 0 [ 218.381948][ T36] usb 2-1: config 5 interface 140 has no altsetting 0 [ 218.518498][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.518550][ T36] usb 2-1: Product: syz [ 218.518568][ T36] usb 2-1: Manufacturer: syz [ 218.518586][ T36] usb 2-1: SerialNumber: syz [ 218.581154][ T5716] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 218.823233][ T36] keyspan 2-1:5.35: Keyspan - (without firmware) converter detected [ 218.857394][ T36] keyspan 2-1:5.140: Keyspan - (without firmware) converter detected [ 218.869427][ T36] usb 2-1: USB disconnect, device number 8 [ 218.891312][ T36] keyspan 2-1:5.35: device disconnected [ 218.894402][ T36] keyspan 2-1:5.140: device disconnected [ 219.129185][ T155] team0 (unregistering): Port device team_slave_1 removed [ 219.196701][ T155] team0 (unregistering): Port device team_slave_0 removed [ 219.227621][ T5613] Bluetooth: hci4: command tx timeout [ 219.408944][ T36] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 219.568018][ T36] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 219.569318][ T36] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.574106][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 219.574137][ T36] usb 5-1: Product: syz [ 219.574153][ T36] usb 5-1: Manufacturer: syz [ 219.721022][ T36] usb 5-1: selecting invalid altsetting 1 [ 219.721142][ T36] dvb_ttusb_budget: ttusb_init_controller: error [ 219.721152][ T36] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 219.947237][ T5823] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 220.028906][ T36] DVB: Unable to find symbol cx22700_attach() [ 220.106179][ T5823] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 220.124624][ T5823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 220.124657][ T5823] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 220.124700][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.212139][ T36] DVB: Unable to find symbol tda10046_attach() [ 220.212158][ T36] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 220.265780][ T36] usb 5-1: USB disconnect, device number 10 [ 220.425679][ T5823] usb 2-1: probing VID:PID(0424:012C) [ 220.527189][ T5823] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 220.527244][ T5823] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 220.527269][ T5823] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 220.527292][ T5823] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 220.527315][ T5823] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 220.733934][ T5823] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 221.201771][ T5823] vub300 2-1:1.0: probe with driver vub300 failed with error -22 [ 221.232577][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 221.238399][ T5716] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 221.307114][ T5613] Bluetooth: hci4: command tx timeout [ 221.364225][ T5823] usb 2-1: USB disconnect, device number 9 [ 221.420990][ T5716] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 221.462507][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.462541][ T5716] usb 3-1: Product: syz [ 221.462557][ T5716] usb 3-1: Manufacturer: syz [ 221.462573][ T5716] usb 3-1: SerialNumber: syz [ 221.863898][ T5716] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 221.863963][ T5716] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 221.864003][ T5716] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 221.966857][ T5716] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 222.084934][ T5716] usb 3-1: USB disconnect, device number 6 [ 222.339136][ T6331] wlan0 speed is unknown, defaulting to 1000 [ 223.103006][ T5861] IPVS: stopping estimator thread 0... [ 223.388152][ T5613] Bluetooth: hci4: command tx timeout [ 223.453274][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.453410][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.493574][ T6216] bridge_slave_0: entered allmulticast mode [ 223.503909][ T6216] bridge_slave_0: entered promiscuous mode [ 223.561265][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.561406][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.561634][ T6216] bridge_slave_1: entered allmulticast mode [ 223.566619][ T6216] bridge_slave_1: entered promiscuous mode [ 223.989099][ T6216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.113749][ T6216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.180386][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 224.405851][ T6470] netlink: 136 bytes leftover after parsing attributes in process `syz.2.182'. [ 224.405873][ T6470] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 224.559727][ T6474] kvm: user requested TSC rate below hardware speed [ 224.651488][ T6216] team0: Port device team_slave_0 added [ 225.304109][ T6216] team0: Port device team_slave_1 added [ 225.482465][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.482486][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.482510][ T6216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.554724][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.554746][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.554776][ T6216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.134948][ T6001] kernel write not supported for file /media4 (pid: 6001 comm: kworker/0:8) [ 226.297119][ T6001] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 226.467217][ T6001] usb 3-1: Using ep0 maxpacket: 16 [ 226.471645][ T6001] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 226.473811][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.473846][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.473871][ T6001] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.473918][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.565352][ T6001] usb 3-1: config 0 descriptor?? [ 226.608795][ T5723] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 226.827915][ T5723] usb 5-1: Using ep0 maxpacket: 16 [ 226.842980][ T5723] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 226.845870][ T5723] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 226.845903][ T5723] usb 5-1: config 1 has no interface number 0 [ 226.846021][ T5723] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 226.846052][ T5723] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 226.846078][ T5723] usb 5-1: config 1 interface 105 has no altsetting 0 [ 226.910485][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 226.913310][ T5723] usb 5-1: Product: syz [ 226.913338][ T5723] usb 5-1: Manufacturer: syz [ 226.913354][ T5723] usb 5-1: SerialNumber: syz [ 226.966689][ T6505] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 226.966824][ T6505] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 227.050482][ T6001] hid_parser_main: 13 callbacks suppressed [ 227.050511][ T6001] aquacomputer_d5next 0003:0C70:F00A.000A: unknown main item tag 0x0 [ 227.050604][ T6001] aquacomputer_d5next 0003:0C70:F00A.000A: unknown main item tag 0x0 [ 227.050635][ T6001] aquacomputer_d5next 0003:0C70:F00A.000A: unknown main item tag 0x0 [ 227.050690][ T6001] aquacomputer_d5next 0003:0C70:F00A.000A: unknown main item tag 0x0 [ 227.050781][ T6001] aquacomputer_d5next 0003:0C70:F00A.000A: unknown main item tag 0x0 [ 227.050811][ T6001] aquacomputer_d5next 0003:0C70:F00A.000A: unknown main item tag 0x0 [ 227.050842][ T6001] aquacomputer_d5next 0003:0C70:F00A.000A: unknown main item tag 0x0 [ 227.050933][ T6001] aquacomputer_d5next 0003:0C70:F00A.000A: unknown main item tag 0x0 [ 227.050964][ T6001] aquacomputer_d5next 0003:0C70:F00A.000A: unknown main item tag 0x0 [ 227.050994][ T6001] aquacomputer_d5next 0003:0C70:F00A.000A: unknown main item tag 0x0 [ 227.198167][ T6001] aquacomputer_d5next 0003:0C70:F00A.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.2-1/input0 [ 227.467637][ T6505] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 227.467866][ T6505] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 227.715212][ T6001] usb 3-1: USB disconnect, device number 7 [ 227.904605][ T5723] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 227.905244][ T5723] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 227.905760][ T5723] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 227.975851][ T6216] hsr_slave_0: entered promiscuous mode [ 227.992457][ T6216] hsr_slave_1: entered promiscuous mode [ 227.993414][ T6216] debugfs: 'hsr0' already exists in 'hsr' [ 227.993439][ T6216] Cannot create hsr debugfs directory [ 228.376730][ T5723] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 36:f9:1d:80:0d:88 [ 228.402581][ T5723] usb 5-1: USB disconnect, device number 11 [ 228.441052][ T5723] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 229.370869][ T6537] program syz.2.200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.617529][ T6549] program syz.1.204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.911642][ T5723] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 230.911807][ T5723] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 230.911948][ T5723] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 231.124318][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 231.797333][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.797493][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.797668][ T6331] bridge_slave_0: entered allmulticast mode [ 231.803565][ T6331] bridge_slave_0: entered promiscuous mode [ 231.862135][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.862228][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.862385][ T6331] bridge_slave_1: entered allmulticast mode [ 231.893526][ T6331] bridge_slave_1: entered promiscuous mode [ 232.007883][ T36] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 232.133893][ T6569] block2mtd: too many arguments [ 232.188095][ T36] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 232.213371][ T6331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.250455][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.292076][ T36] usb 3-1: config 0 descriptor?? [ 232.329790][ T36] cp210x 3-1:0.0: cp210x converter detected [ 232.556079][ T6331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.860986][ T36] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 232.976167][ T36] usb 3-1: cp210x converter now attached to ttyUSB0 [ 233.624910][ T5723] usb 3-1: USB disconnect, device number 8 [ 233.636203][ T6331] team0: Port device team_slave_0 added [ 233.787780][ T6331] team0: Port device team_slave_1 added [ 234.304643][ T5723] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 234.390545][ T5723] cp210x 3-1:0.0: device disconnected [ 235.409891][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.409913][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.409946][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.533609][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.533624][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.533644][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.645151][ T6331] hsr_slave_0: entered promiscuous mode [ 237.646710][ T6331] hsr_slave_1: entered promiscuous mode [ 237.651204][ T6331] debugfs: 'hsr0' already exists in 'hsr' [ 237.651280][ T6331] Cannot create hsr debugfs directory [ 237.960238][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 237.960283][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 237.960308][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 238.175304][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.020665][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.231104][ T6216] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 240.345031][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.445325][ T6216] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 240.574118][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.627231][ T5716] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 240.798644][ T5716] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 240.802920][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.029569][ T5709] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 241.113922][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.207955][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 241.208961][ T5709] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 241.210704][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.210735][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.210770][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.425194][ T5709] usb 3-1: config 0 descriptor?? [ 241.519891][ T6216] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 242.152780][ T5709] hid_parser_main: 30 callbacks suppressed [ 242.152809][ T5709] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 242.152844][ T5709] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 242.152872][ T5709] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 242.152899][ T5709] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 242.152926][ T5709] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0 [ 242.154194][ T5716] comedi comedi5: could not switch to alternate setting 1 [ 242.154219][ T5716] usbduxfast 5-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 242.277950][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.351129][ T5709] koneplus 0003:1E7D:2D51.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 242.413136][ T5716] usb 5-1: USB disconnect, device number 12 [ 242.531786][ T6216] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 242.798321][ T6216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 243.132121][ T5709] usb 3-1: USB disconnect, device number 9 [ 245.311882][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.561724][ T6676] »»»»»»: renamed from vlan0 (while UP) [ 248.693286][ T5709] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 248.857105][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 248.857999][ T5709] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 248.859560][ T5709] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.859590][ T5709] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.859612][ T5709] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 248.859636][ T5709] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.859683][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.027972][ T5709] usb 5-1: config 0 descriptor?? [ 249.161337][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 249.523814][ T5709] hid (null): unknown global tag 0xd [ 249.523855][ T5709] hid (null): invalid report_count 32411 [ 249.862170][ T5716] usb 5-1: USB disconnect, device number 13 [ 251.267837][ T5723] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 251.427965][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 251.455076][ T5723] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 251.479483][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.479520][ T5723] usb 2-1: Product: syz [ 251.479538][ T5723] usb 2-1: Manufacturer: syz [ 251.479557][ T5723] usb 2-1: SerialNumber: syz [ 251.945927][ T6728] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 252.054550][ T5723] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 252.190599][ T5723] scsi host1: usb-storage 2-1:1.0 [ 252.838869][ T155] bridge_slave_1: left allmulticast mode [ 252.838900][ T155] bridge_slave_1: left promiscuous mode [ 252.839134][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.010086][ T5723] ums_eneub6250 2-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 253.106048][ T155] bridge_slave_0: left allmulticast mode [ 253.106089][ T155] bridge_slave_0: left promiscuous mode [ 253.106371][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.115226][ T5723] usb 2-1: USB disconnect, device number 10 [ 253.625697][ T155] bridge_slave_1: left allmulticast mode [ 253.625741][ T155] bridge_slave_1: left promiscuous mode [ 253.625997][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.811737][ T155] bridge_slave_0: left allmulticast mode [ 253.811780][ T155] bridge_slave_0: left promiscuous mode [ 253.812095][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.968399][ T5709] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 255.137075][ T5709] usb 2-1: Using ep0 maxpacket: 16 [ 255.138017][ T5709] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 255.139472][ T5709] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 255.139500][ T5709] usb 2-1: config 1 has no interface number 0 [ 255.139549][ T5709] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 255.139577][ T5709] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 255.139603][ T5709] usb 2-1: config 1 interface 105 has no altsetting 0 [ 255.143298][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 255.143320][ T5709] usb 2-1: Product: syz [ 255.143338][ T5709] usb 2-1: Manufacturer: syz [ 255.143349][ T5709] usb 2-1: SerialNumber: syz [ 255.249702][ T6764] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.249845][ T6764] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.486801][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.682328][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.684825][ T6764] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.684942][ T6764] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.799014][ T155] bond0 (unregistering): Released all slaves [ 256.116690][ T5709] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 256.117220][ T5709] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 256.117716][ T5709] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 256.762160][ T6790] jffs2: notice: (6790) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 256.863367][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.949865][ T6794] MTRR 1 not used [ 256.968891][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.020312][ T155] bond0 (unregistering): Released all slaves [ 257.604368][ T5709] aqc111 2-1:1.105 eth6: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, da:ab:23:ae:3a:1d [ 257.741785][ T5709] usb 2-1: USB disconnect, device number 11 [ 257.792790][ T5709] aqc111 2-1:1.105 eth6: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 257.897144][ T5823] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 258.077302][ T5823] usb 3-1: Using ep0 maxpacket: 8 [ 258.078192][ T5823] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 258.080039][ T5823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.080069][ T5823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 258.080125][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 258.080158][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 258.080206][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.253023][ T5823] hub 3-1:1.0: bad descriptor, ignoring hub [ 258.253068][ T5823] hub 3-1:1.0: probe with driver hub failed with error -5 [ 258.254107][ T5823] cdc_wdm 3-1:1.0: skipping garbage [ 258.254127][ T5823] cdc_wdm 3-1:1.0: skipping garbage [ 258.398386][ T5823] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 258.398430][ T5823] cdc_wdm 3-1:1.0: Unknown control protocol [ 258.635845][ T5823] usb 3-1: USB disconnect, device number 10 [ 259.137349][ T5709] aqc111 2-1:1.105 eth6 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 259.137493][ T5709] aqc111 2-1:1.105 eth6 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 259.137623][ T5709] aqc111 2-1:1.105 eth6 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 259.505505][ T6836] input: syz0 as /devices/virtual/input/input9 [ 260.476667][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.513749][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.529754][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.545309][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.572649][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.652930][ T5823] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 260.829762][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 260.853194][ T5823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 260.853268][ T5823] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 260.886465][ T5823] usb 5-1: config 4 interface 0 has no altsetting 0 [ 260.915263][ T5823] usb 5-1: string descriptor 0 read error: -22 [ 260.915389][ T5823] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 261.430100][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 261.455658][ T5823] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 261.500750][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.500828][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.597082][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 261.599236][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 261.603323][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.603355][ T10] usb 3-1: config 0 has no interface number 0 [ 261.657790][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.657828][ T10] usb 3-1: Product: syz [ 261.657846][ T10] usb 3-1: Manufacturer: syz [ 261.657863][ T10] usb 3-1: SerialNumber: syz [ 261.723286][ T5716] infiniband syz1: ib_query_port failed (-19) [ 261.929286][ T5823] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 261.929741][ T5823] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 261.929816][ T5823] usb 5-1: media controller created [ 261.985223][ T10] usb 3-1: config 0 descriptor?? [ 262.057767][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 262.057822][ T10] usb 3-1: selecting invalid altsetting 1 [ 262.057840][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 262.151378][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 262.212927][ T6854] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 262.383913][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.673209][ T4901] Bluetooth: hci5: command tx timeout [ 262.692110][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 262.692209][ T10] usb 3-1: media controller created [ 262.806808][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.930800][ T12] smbdirect: ib_dev[syz1] removed [ 262.983685][ T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 262.983753][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 263.006071][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 263.859337][ T10] usb 3-1: USB disconnect, device number 11 [ 264.101419][ T5823] usb 5-1: USB disconnect, device number 14 [ 264.463337][ T5247] 8021q: adding VLAN 0 to HW filter on device eth7 [ 264.631643][ T6882] loop8: detected capacity change from 0 to 1 [ 264.700835][ T6882] Dev loop8: unable to read RDB block 1 [ 264.700913][ T6882] loop8: unable to read partition table [ 264.701107][ T6882] loop8: partition table beyond EOD, truncated [ 264.701177][ T6882] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 264.750329][ T4901] Bluetooth: hci5: command tx timeout [ 264.776637][ T6885] FAULT_INJECTION: forcing a failure. [ 264.776637][ T6885] name failslab, interval 1, probability 0, space 0, times 1 [ 264.776725][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz.4.305 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 264.776756][ T6885] Tainted: [L]=SOFTLOCKUP [ 264.776764][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.776792][ T6885] Call Trace: [ 264.776800][ T6885] [ 264.776809][ T6885] dump_stack_lvl+0xe8/0x150 [ 264.776854][ T6885] should_fail_ex+0x46b/0x600 [ 264.776891][ T6885] should_failslab+0xa8/0x100 [ 264.776919][ T6885] ? mas_alloc_nodes+0x291/0x350 [ 264.776943][ T6885] kmem_cache_alloc_noprof+0x9e/0x690 [ 264.776976][ T6885] ? mas_alloc_nodes+0x291/0x350 [ 264.777006][ T6885] mas_alloc_nodes+0x291/0x350 [ 264.777034][ T6885] mas_preallocate+0x42d/0x840 [ 264.777066][ T6885] ? __pfx_mas_preallocate+0x10/0x10 [ 264.777098][ T6885] ? anon_vma_name+0x61/0x210 [ 264.777123][ T6885] ? __mas_set_range+0x11a/0x3a0 [ 264.777153][ T6885] __split_vma+0x2f3/0xa00 [ 264.777174][ T6885] ? sched_clock+0x41/0x60 [ 264.777213][ T6885] ? __pfx___split_vma+0x10/0x10 [ 264.777247][ T6885] ? finish_task_switch+0x40e/0xc60 [ 264.777285][ T6885] vma_modify+0x8b7/0x2060 [ 264.777324][ T6885] vma_modify_flags+0x2a4/0x3c0 [ 264.777351][ T6885] ? __pfx_vma_modify_flags+0x10/0x10 [ 264.777391][ T6885] ? __lock_acquire+0x747/0x2de0 [ 264.777422][ T6885] ? mprotect_fixup+0xf9/0xad0 [ 264.777449][ T6885] mprotect_fixup+0x51a/0xad0 [ 264.777477][ T6885] ? __pfx_mprotect_fixup+0x10/0x10 [ 264.777500][ T6885] ? mas_next_slot+0xc94/0xd70 [ 264.777551][ T6885] do_mprotect_pkey+0x8e7/0xd10 [ 264.777587][ T6885] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 264.777637][ T6885] ? rcu_is_watching+0x16/0xb0 [ 264.777682][ T6885] __x64_sys_mprotect+0x80/0x90 [ 264.777707][ T6885] do_syscall_64+0x166/0x520 [ 264.777740][ T6885] ? trace_irq_disable+0x3b/0x140 [ 264.777768][ T6885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.777800][ T6885] ? clear_bhb_loop+0x70/0xc0 [ 264.777827][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.777851][ T6885] RIP: 0033:0x7fc1a2b7e159 [ 264.777884][ T6885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.777904][ T6885] RSP: 002b:00007fc1a0dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 264.777929][ T6885] RAX: ffffffffffffffda RBX: 00007fc1a2e05fa0 RCX: 00007fc1a2b7e159 [ 264.777947][ T6885] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 264.777962][ T6885] RBP: 00007fc1a2c1506b R08: 0000000000000000 R09: 0000000000000000 [ 264.777978][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.777992][ T6885] R13: 00007fc1a2e06038 R14: 00007fc1a2e05fa0 R15: 00007ffc825b5648 [ 264.778029][ T6885] [ 265.779560][ T155] hsr_slave_0: left promiscuous mode [ 265.817291][ T155] hsr_slave_1: left promiscuous mode [ 265.818695][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.874204][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.239067][ T155] hsr_slave_0: left promiscuous mode [ 266.366186][ T155] hsr_slave_1: left promiscuous mode [ 266.377808][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.377840][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.434946][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.434979][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.723043][ T6916] FAULT_INJECTION: forcing a failure. [ 266.723043][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 266.723092][ T6916] CPU: 0 UID: 0 PID: 6916 Comm: syz.2.311 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 266.723126][ T6916] Tainted: [L]=SOFTLOCKUP [ 266.723135][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.723149][ T6916] Call Trace: [ 266.723158][ T6916] [ 266.723169][ T6916] dump_stack_lvl+0xe8/0x150 [ 266.723210][ T6916] should_fail_ex+0x46b/0x600 [ 266.723372][ T6916] should_failslab+0xa8/0x100 [ 266.723403][ T6916] ? security_inode_alloc+0x39/0x310 [ 266.723432][ T6916] kmem_cache_alloc_noprof+0x9e/0x690 [ 266.723471][ T6916] ? security_inode_alloc+0x39/0x310 [ 266.723507][ T6916] security_inode_alloc+0x39/0x310 [ 266.723538][ T6916] inode_init_always_gfp+0x983/0xd40 [ 266.723578][ T6916] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 266.723619][ T6916] alloc_inode+0x82/0x1b0 [ 266.723650][ T6916] new_inode+0x1f/0x170 [ 266.723678][ T6916] ? shmem_get_inode+0x29d/0xf80 [ 266.723720][ T6916] shmem_get_inode+0x3b1/0xf80 [ 266.723783][ T6916] ? __pfx_shmem_get_inode+0x10/0x10 [ 266.723830][ T6916] ? __vm_enough_memory+0x11a/0x380 [ 266.723867][ T6916] __shmem_file_setup+0x20b/0x370 [ 266.723907][ T6916] ? __pfx___shmem_file_setup+0x10/0x10 [ 266.723949][ T6916] ? vma_set_pgoff+0x163/0x2d0 [ 266.723982][ T6916] shmem_zero_setup+0x90/0x130 [ 266.724092][ T6916] mmap_region+0x1bcf/0x25c0 [ 266.724167][ T6916] ? do_raw_spin_lock+0x12b/0x2f0 [ 266.724200][ T6916] ? __pfx_mmap_region+0x10/0x10 [ 266.724481][ T6916] ? rcu_is_watching+0x16/0xb0 [ 266.724530][ T6916] ? trace_hrtimer_start+0x82/0x200 [ 266.724586][ T6916] ? lockdep_hardirqs_on+0x7b/0x110 [ 266.724669][ T6916] ? futex_unqueue+0x22/0x240 [ 266.724742][ T6916] ? cap_mmap_addr+0xaf/0x100 [ 266.724777][ T6916] ? bpf_lsm_mmap_addr+0x9/0x50 [ 266.724805][ T6916] ? security_mmap_addr+0x71/0x240 [ 266.724851][ T6916] do_mmap+0xe0e/0x1310 [ 266.724891][ T6916] ? __pfx_do_mmap+0x10/0x10 [ 266.724929][ T6916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 266.724968][ T6916] ? rwbase_write_lock+0x550/0x720 [ 266.725008][ T6916] vm_mmap_pgoff+0x275/0x4e0 [ 266.725044][ T6916] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 266.725074][ T6916] ? rcu_is_watching+0x16/0xb0 [ 266.725109][ T6916] ? __x64_sys_mmap+0x7f/0x140 [ 266.725134][ T6916] do_syscall_64+0x166/0x520 [ 266.725166][ T6916] ? trace_irq_disable+0x3b/0x140 [ 266.725191][ T6916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.725210][ T6916] ? clear_bhb_loop+0x70/0xc0 [ 266.725232][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.725252][ T6916] RIP: 0033:0x7fe81479e159 [ 266.725271][ T6916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.725287][ T6916] RSP: 002b:00007fe8129f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 266.725309][ T6916] RAX: ffffffffffffffda RBX: 00007fe814a25fa0 RCX: 00007fe81479e159 [ 266.725323][ T6916] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 266.725336][ T6916] RBP: 00007fe81483506b R08: ffffffffffffffff R09: 0000000000000000 [ 266.725348][ T6916] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 266.725360][ T6916] R13: 00007fe814a26038 R14: 00007fe814a25fa0 R15: 00007ffceccd4628 [ 266.725402][ T6916] [ 266.828660][ T4901] Bluetooth: hci5: command tx timeout [ 267.157485][ T6918] FAULT_INJECTION: forcing a failure. [ 267.157485][ T6918] name failslab, interval 1, probability 0, space 0, times 0 [ 267.157532][ T6918] CPU: 0 UID: 0 PID: 6918 Comm: syz.4.312 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 267.157564][ T6918] Tainted: [L]=SOFTLOCKUP [ 267.157572][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.157586][ T6918] Call Trace: [ 267.157595][ T6918] [ 267.157606][ T6918] dump_stack_lvl+0xe8/0x150 [ 267.157646][ T6918] should_fail_ex+0x46b/0x600 [ 267.157681][ T6918] ? alloc_inode+0xb8/0x1b0 [ 267.157712][ T6918] should_failslab+0xa8/0x100 [ 267.157744][ T6918] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 267.157780][ T6918] ? alloc_inode+0xb8/0x1b0 [ 267.157810][ T6918] alloc_inode+0xb8/0x1b0 [ 267.157836][ T6918] create_pipe_files+0x52/0x7d0 [ 267.157870][ T6918] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 267.157907][ T6918] __do_pipe_flags+0x46/0x1f0 [ 267.157955][ T6918] do_pipe2+0xaa/0x190 [ 267.157992][ T6918] ? __pfx_do_pipe2+0x10/0x10 [ 267.158030][ T6918] ? rcu_is_watching+0x16/0xb0 [ 267.158074][ T6918] __x64_sys_pipe2+0x5a/0x70 [ 267.158109][ T6918] do_syscall_64+0x166/0x520 [ 267.158135][ T6918] ? trace_irq_disable+0x3b/0x140 [ 267.158165][ T6918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.158207][ T6918] ? clear_bhb_loop+0x70/0xc0 [ 267.158234][ T6918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.158257][ T6918] RIP: 0033:0x7fc1a2b7e159 [ 267.158279][ T6918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.158298][ T6918] RSP: 002b:00007fc1a0dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 267.158323][ T6918] RAX: ffffffffffffffda RBX: 00007fc1a2e05fa0 RCX: 00007fc1a2b7e159 [ 267.158340][ T6918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.158355][ T6918] RBP: 00007fc1a2c1506b R08: 0000000000000000 R09: 0000000000000000 [ 267.158370][ T6918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.158384][ T6918] R13: 00007fc1a2e06038 R14: 00007fc1a2e05fa0 R15: 00007ffc825b5648 [ 267.158419][ T6918] [ 267.524257][ T155] veth1_macvtap: left promiscuous mode [ 267.524419][ T155] veth0_macvtap: left promiscuous mode [ 267.526302][ T155] veth1_vlan: left promiscuous mode [ 267.526501][ T155] veth0_vlan: left promiscuous mode [ 267.887191][ T5986] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 268.089852][ T5986] usb 5-1: Using ep0 maxpacket: 8 [ 268.090840][ T5986] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 268.096338][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.096396][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.153123][ T5986] usb 5-1: config 0 descriptor?? [ 268.400053][ T6932] netlink: 256 bytes leftover after parsing attributes in process `syz.2.317'. [ 268.439585][ T5986] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 268.763114][ T5986] usb 5-1: USB disconnect, device number 15 [ 268.911656][ T4901] Bluetooth: hci5: command tx timeout [ 269.198718][ T155] team0 (unregistering): Port device team_slave_1 removed [ 269.261201][ T155] team0 (unregistering): Port device team_slave_0 removed [ 270.188282][ T6955] netlink: 256 bytes leftover after parsing attributes in process `syz.4.326'. [ 270.949403][ T155] team0 (unregistering): Port device team_slave_1 removed [ 271.027790][ T155] team0 (unregistering): Port device team_slave_0 removed [ 271.293989][ T6961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 271.973710][ T5247] 8021q: adding VLAN 0 to HW filter on device eth8 [ 271.974185][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 271.974214][ T6949] netlink: 'syz.2.323': attribute type 5 has an invalid length. [ 272.938495][ T6331] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.136676][ T5986] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 273.280944][ T6331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.297189][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 273.298441][ T5986] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 273.300298][ T5986] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.300334][ T5986] usb 2-1: config 0 has no interface number 0 [ 273.309827][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.309857][ T5986] usb 2-1: Product: syz [ 273.309872][ T5986] usb 2-1: Manufacturer: syz [ 273.309887][ T5986] usb 2-1: SerialNumber: syz [ 273.468147][ T5986] usb 2-1: config 0 descriptor?? [ 273.515609][ T5986] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 273.579093][ T6331] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.774837][ T6331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.943255][ T6331] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.309258][ T6331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.585989][ T5986] gspca_spca1528: reg_w err -71 [ 274.586113][ T5986] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 274.648025][ T5986] usb 2-1: USB disconnect, device number 12 [ 275.147924][ T6991] sg_write: data in/out 432480/136 bytes for SCSI command 0x0-- guessing data in; [ 275.147924][ T6991] program syz.2.335 not setting count and/or reply_len properly [ 275.375986][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.424430][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.524821][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.586504][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.634025][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.826867][ T5884] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 277.037282][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 277.038311][ T5884] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 277.043856][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.043930][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.043956][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 277.043977][ T5884] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 277.043997][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.046488][ T5884] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 277.046517][ T5884] usb 2-1: Manufacturer: syz [ 277.320992][ T5884] usb 2-1: config 0 descriptor?? [ 277.873068][ T5597] Bluetooth: hci1: command tx timeout [ 277.957041][ T5884] rc_core: IR keymap rc-hauppauge not found [ 277.957063][ T5884] Registered IR keymap rc-empty [ 278.036060][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 278.064524][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 278.287742][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.288100][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.288312][ T6847] bridge_slave_0: entered allmulticast mode [ 278.292237][ T6847] bridge_slave_0: entered promiscuous mode [ 278.329956][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.331020][ T6847] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.331243][ T6847] bridge_slave_1: entered allmulticast mode [ 278.362639][ T6847] bridge_slave_1: entered promiscuous mode [ 278.434828][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 278.494027][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 278.788159][ T5723] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 278.856659][ T6847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.884087][ T6847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.987082][ T5723] usb 5-1: Using ep0 maxpacket: 8 [ 278.988181][ T5723] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 278.991171][ T5723] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 278.991201][ T5723] usb 5-1: config 0 has no interface number 0 [ 278.991249][ T5723] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.991275][ T5723] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 278.991303][ T5723] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.991332][ T5723] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 278.991378][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.213222][ T5723] usb 5-1: config 0 descriptor?? [ 279.223509][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.245965][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.277791][ T5723] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 279.295718][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.307761][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.330933][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.359922][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.379604][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.398755][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.419054][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.462006][ T5884] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 279.601990][ T5884] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 279.602023][ T5884] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 279.863637][ T36] usb 5-1: USB disconnect, device number 16 [ 279.949857][ T5597] Bluetooth: hci1: command tx timeout [ 279.961801][ T5884] usb 2-1: USB disconnect, device number 13 [ 280.038944][ T5986] kernel read not supported for file /video9 (pid: 5986 comm: kworker/0:7) [ 280.063355][ T6847] team0: Port device team_slave_0 added [ 280.095416][ T6847] team0: Port device team_slave_1 added [ 280.192735][ T36] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 281.330680][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.330699][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.330724][ T6847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.155400][ T5597] Bluetooth: hci1: command tx timeout [ 283.278989][ T6847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.279009][ T6847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.279031][ T6847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.862855][ T7098] FAULT_INJECTION: forcing a failure. [ 283.862855][ T7098] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 283.862902][ T7098] CPU: 0 UID: 0 PID: 7098 Comm: syz.1.353 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 283.862935][ T7098] Tainted: [L]=SOFTLOCKUP [ 283.862944][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.862959][ T7098] Call Trace: [ 283.862968][ T7098] [ 283.862979][ T7098] dump_stack_lvl+0xe8/0x150 [ 283.863020][ T7098] should_fail_ex+0x46b/0x600 [ 283.863060][ T7098] _copy_from_user+0x2d/0xb0 [ 283.863105][ T7098] futex_parse_waitv+0x101/0x420 [ 283.863134][ T7098] ? __pfx_futex_wake_mark+0x10/0x10 [ 283.863163][ T7098] ? __pfx_futex_parse_waitv+0x10/0x10 [ 283.863189][ T7098] ? __kmalloc_noprof+0x43e/0x790 [ 283.863222][ T7098] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 283.863245][ T7098] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 283.863287][ T7098] __se_sys_futex_waitv+0x1bd/0x2c0 [ 283.863317][ T7098] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 283.863360][ T7098] ? __x64_sys_futex_waitv+0x20/0xc0 [ 283.863387][ T7098] do_syscall_64+0x166/0x520 [ 283.863413][ T7098] ? trace_irq_disable+0x3b/0x140 [ 283.863444][ T7098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.863469][ T7098] ? clear_bhb_loop+0x70/0xc0 [ 283.863497][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.863520][ T7098] RIP: 0033:0x7fbbf3cde159 [ 283.863542][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.863562][ T7098] RSP: 002b:00007fbbf1f36028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 283.863587][ T7098] RAX: ffffffffffffffda RBX: 00007fbbf3f65fa0 RCX: 00007fbbf3cde159 [ 283.863604][ T7098] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000002dc0 [ 283.863619][ T7098] RBP: 00007fbbf3d7506b R08: 0000000000000000 R09: 0000000000000000 [ 283.863633][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.863647][ T7098] R13: 00007fbbf3f66038 R14: 00007fbbf3f65fa0 R15: 00007ffda58675b8 [ 283.863683][ T7098] [ 285.037188][ T5986] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 285.230351][ T5597] Bluetooth: hci1: command tx timeout [ 285.245404][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 285.252703][ T5986] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 285.277263][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.277296][ T5986] usb 2-1: Product: syz [ 285.277313][ T5986] usb 2-1: Manufacturer: syz [ 285.277328][ T5986] usb 2-1: SerialNumber: syz [ 285.315345][ T5986] usb 2-1: config 0 descriptor?? [ 285.333805][ T5986] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 285.647210][ T5823] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 285.824665][ T5823] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.853728][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.853769][ T5823] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 128, using maximum allowed: 30 [ 285.853821][ T5823] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 285.853849][ T5823] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 128 [ 285.856852][ T5986] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 285.857244][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.857296][ T5823] usb 3-1: Product: syz [ 285.857347][ T5823] usb 3-1: Manufacturer: syz [ 285.857389][ T5823] usb 3-1: SerialNumber: syz [ 285.971308][ T5986] usb 2-1: USB disconnect, device number 14 [ 286.865269][ T6847] hsr_slave_0: entered promiscuous mode [ 286.876677][ T6847] hsr_slave_1: entered promiscuous mode [ 286.884272][ T6847] debugfs: 'hsr0' already exists in 'hsr' [ 286.884303][ T6847] Cannot create hsr debugfs directory [ 287.031329][ T5823] cdc_ncm 3-1:1.0: bind() failure [ 287.120882][ T5823] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 287.126531][ T5823] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 287.147814][ T5823] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 287.185808][ T5823] usb 3-1: USB disconnect, device number 12 [ 287.226382][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d494800: rx timeout, send abort [ 287.229993][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804d494800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 288.490661][ T7135] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 290.304224][ T7153] jffs2: notice: (7153) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 290.558705][ T5884] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 290.707066][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 290.764235][ T5884] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 290.785017][ T5884] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 290.785075][ T5884] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 290.785142][ T5884] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 290.785176][ T5884] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 290.785209][ T5884] usb 3-1: config 0 interface 0 has no altsetting 0 [ 290.894243][ T5884] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 290.894277][ T5884] usb 3-1: Product: syz [ 290.894294][ T5884] usb 3-1: Manufacturer: syz [ 290.894310][ T5884] usb 3-1: SerialNumber: syz [ 290.947651][ T5884] usb 3-1: config 0 descriptor?? [ 290.967215][ T5884] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 290.974969][ T5884] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 291.313417][ T5986] usb 3-1: USB disconnect, device number 13 [ 291.313508][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 291.440256][ T5986] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 292.570764][ T7174] binder: 7171:7174 ioctl c0306201 200000000480 returned -14 [ 292.768450][ T5986] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 293.001183][ T5986] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 293.005049][ T5986] usb 3-1: config 1 has an invalid interface number: 27 but max is 1 [ 293.005080][ T5986] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.005103][ T5986] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 293.005118][ T5986] usb 3-1: config 1 has no interface number 2 [ 293.005168][ T5986] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 293.005185][ T5986] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.005204][ T5986] usb 3-1: config 1 interface 1 has no altsetting 0 [ 293.086863][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.087072][ T5986] usb 3-1: Product: syz [ 293.087091][ T5986] usb 3-1: Manufacturer: syz [ 293.087107][ T5986] usb 3-1: SerialNumber: syz [ 293.443076][ T5716] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 293.647041][ T5716] usb 2-1: Using ep0 maxpacket: 16 [ 293.648115][ T5716] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 293.653025][ T7173] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 293.655120][ T5716] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.655157][ T5716] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.655181][ T5716] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 293.655212][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 293.655238][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.780991][ T5716] usb 2-1: config 0 descriptor?? [ 294.080958][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 294.363915][ T5986] ATM dev 0: failed to start ADSL synchronisation: -71 [ 294.364456][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033f24300 failed (-71)! [ 294.365669][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033f24e00 failed (-71)! [ 294.365713][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033f24900 failed (-71)! [ 294.365758][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033f24700 failed (-71)! [ 294.432620][ T5986] speedtch 3-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 294.432653][ T5986] speedtch 3-1:1.27: usbatm_usb_probe: bind failed: -16! [ 294.432721][ T5986] speedtch 3-1:1.27: probe with driver speedtch failed with error -16 [ 294.472781][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033f24300 failed (-71)! [ 294.472859][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033f24e00 failed (-71)! [ 294.472924][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033f24900 failed (-71)! [ 294.472989][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033f24700 failed (-71)! [ 294.602854][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033f24300 failed (-71)! [ 294.602943][ C0] ATM dev 0: usbatm_complete: urb 0xffff888033f24e00 failed (-71)! [ 294.695556][ T5823] usb 2-1: USB disconnect, device number 15 [ 294.727157][ T5986] usb 3-1: USB disconnect, device number 14 [ 295.106105][ T7188] sd 0:0:1:0: PR command failed: 1026 [ 295.106161][ T7188] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 295.106211][ T7188] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 296.069862][ T7199] usb usb7: check_ctrlrecip: process 7199 (syz.1.379) requesting ep 01 but needs 81 [ 296.447904][ T7201] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 296.447979][ T7201] Unsupported pkey algo: 106 [ 298.576068][ T7221] netlink: 'syz.1.384': attribute type 2 has an invalid length. [ 298.663698][ T7225] netlink: 'syz.1.384': attribute type 2 has an invalid length. [ 299.821101][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.821251][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.821476][ T6992] bridge_slave_0: entered allmulticast mode [ 299.860630][ T6992] bridge_slave_0: entered promiscuous mode [ 299.959185][ T7233] __vm_enough_memory: pid: 7233, comm: syz.1.385, bytes: 4503599627366400 not enough memory for the allocation [ 301.690562][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.690784][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.691006][ T6992] bridge_slave_1: entered allmulticast mode [ 301.781891][ T6992] bridge_slave_1: entered promiscuous mode [ 302.161965][ T7236] jffs2: notice: (7236) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 302.889600][ T5597] Bluetooth: Wrong link type (-71) [ 305.169851][ T7244] 9p: Bad value for 'rfdno' [ 309.055518][ T10] libceph: connect (1)[c::]:6789 error -101 [ 309.471581][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 309.680886][ T7254] ceph: No mds server is up or the cluster is laggy [ 309.762983][ T10] libceph: connect (1)[c::]:6789 error -101 [ 309.763170][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 309.867492][ T6992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.966488][ T6992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.101806][ T7259] input: syz1 as /devices/virtual/input/input15 [ 310.270371][ T5986] libceph: connect (1)[c::]:6789 error -101 [ 310.270600][ T5986] libceph: mon0 (1)[c::]:6789 connect error [ 310.586600][ T155] bridge_slave_1: left allmulticast mode [ 310.586641][ T155] bridge_slave_1: left promiscuous mode [ 310.624336][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.028208][ T155] bridge_slave_0: left allmulticast mode [ 311.028254][ T155] bridge_slave_0: left promiscuous mode [ 311.032261][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.479258][ T155] bridge_slave_1: left allmulticast mode [ 311.479298][ T155] bridge_slave_1: left promiscuous mode [ 311.479555][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.603035][ T7274] jffs2: notice: (7274) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 311.859905][ T5597] Bluetooth: Wrong link type (-71) [ 313.478222][ T5986] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 313.482442][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 313.727609][ T5986] usb 2-1: device descriptor read/64, error -32 [ 314.610526][ T5986] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 314.610820][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 314.664400][ T155] bridge_slave_0: left allmulticast mode [ 314.664439][ T155] bridge_slave_0: left promiscuous mode [ 314.664702][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.767181][ T5986] usb 2-1: device descriptor read/64, error -32 [ 314.890959][ T5986] usb usb2-port1: attempt power cycle [ 315.377152][ T5986] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 315.413006][ T5986] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 315.414191][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.557151][ T5884] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 315.755312][ T5986] usb 2-1: config 0 descriptor?? [ 315.810547][ T5884] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 315.823157][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.823189][ T5884] usb 5-1: Product: syz [ 315.823226][ T5884] usb 5-1: Manufacturer: syz [ 315.823267][ T5884] usb 5-1: SerialNumber: syz [ 316.075832][ T5986] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 316.088246][ T5986] [drm:udl_init] *ERROR* Selecting channel failed [ 316.363925][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.410428][ T5986] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 316.410459][ T5986] [drm] Initialized udl on minor 1 [ 316.483232][ T5986] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 316.519368][ T5986] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 316.535808][ T5986] usb 2-1: USB disconnect, device number 18 [ 317.112266][ T5716] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 320.206241][ T5723] usb 5-1: USB disconnect, device number 17 [ 320.322745][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.396223][ T5716] usb 5-1: ath9k_htc: Unable to allocate URBs [ 320.411768][ T5723] usb 5-1: ath9k_htc: USB layer deinitialized [ 320.536567][ T36] libceph: connect (1)[c::]:6789 error -101 [ 320.536782][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 320.641404][ T36] libceph: connect (1)[c::]:6789 error -101 [ 320.641647][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 320.651780][ T7297] ceph: No mds server is up or the cluster is laggy [ 320.782571][ T155] bond0 (unregistering): Released all slaves [ 321.116201][ T7313] jffs2: notice: (7313) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 321.246283][ T5597] Bluetooth: Wrong link type (-71) [ 323.039948][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.040028][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.216865][ T4901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.229123][ T4901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.234784][ T4901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.311845][ T4901] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.313795][ T4901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.057992][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.138137][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.220129][ T155] bond0 (unregistering): Released all slaves [ 324.243034][ T6992] team0: Port device team_slave_0 added [ 324.832185][ T6992] team0: Port device team_slave_1 added [ 324.903857][ T7338] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.903892][ T7338] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 325.037342][ T7339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 325.037489][ T7339] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 325.550514][ T5597] Bluetooth: hci4: command tx timeout [ 325.585822][ T7346] ------------[ cut here ]------------ [ 325.585841][ T7346] failed to allocate ring buffer on CPU 1 [ 325.585857][ T7346] WARNING: kernel/trace/ring_buffer.c:8110 at trace_rb_cpu_prepare+0x330/0x3c0, CPU#0: syz.4.418/7346 [ 325.610549][ T7346] Modules linked in: [ 325.614506][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.4.418 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 325.626021][ T7346] Tainted: [L]=SOFTLOCKUP [ 325.630594][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.641987][ T7346] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 325.648072][ T7346] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d 41 92 09 cc e8 87 2c fc ff 48 8d 3d 60 32 eb 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 6d 2c fc ff e9 ef fe ff ff [ 325.668062][ T7346] RSP: 0000:ffffc900045477d0 EFLAGS: 00010283 [ 325.674187][ T7346] RAX: ffffffff81caa929 RBX: dffffc0000000000 RCX: 0000000000080000 [ 325.682468][ T7346] RDX: ffffc9000ee79000 RSI: 0000000000000001 RDI: ffffffff8fb5db90 [ 325.691663][ T7346] RBP: 0000000000000001 R08: ffffffff8fb22c7f R09: 1ffffffff1f6458f [ 325.700545][ T7346] R10: dffffc0000000000 R11: fffffbfff1f64590 R12: 0000000000000000 [ 325.709927][ T7346] R13: ffff888020300308 R14: ffff8880277668a0 R15: 0000000000000000 [ 325.718111][ T7346] FS: 00007fc1a0dd66c0(0000) GS:ffff888125bc2000(0000) knlGS:0000000000000000 [ 325.727221][ T7346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.733865][ T7346] CR2: 000055f31c1d5078 CR3: 000000004ce4e000 CR4: 00000000003526f0 [ 325.742035][ T7346] Call Trace: [ 325.745501][ T7346] [ 325.748853][ T7346] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 325.754636][ T7346] cpuhp_invoke_callback+0x498/0x810 [ 325.760077][ T7346] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 325.766003][ T7346] cpuhp_issue_call+0x3f0/0x750 [ 325.771052][ T7346] ? mutex_lock_nested+0x152/0x1d0 [ 325.776250][ T7346] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 325.783563][ T7346] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 325.790464][ T7346] __cpuhp_state_add_instance+0x25/0x40 [ 325.796428][ T7346] alloc_buffer+0x188f/0x1d70 [ 325.801282][ T7346] __ring_buffer_alloc+0x2c/0x40 [ 325.806383][ T7346] allocate_trace_buffer+0x1d2/0x950 [ 325.811848][ T7346] ? __kmalloc_node_track_caller_noprof+0x58c/0x7b0 [ 325.819073][ T7346] ? trace_array_create_systems+0x75/0xe60 [ 325.824955][ T7346] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 325.832010][ T7346] ? __raw_spin_lock_init+0x45/0x100 [ 325.837453][ T7346] trace_array_create_systems+0x590/0xe60 [ 325.843871][ T7346] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 325.849794][ T7346] ? mutex_lock_nested+0x152/0x1d0 [ 325.855100][ T7346] instance_mkdir+0xd5/0x140 [ 325.860930][ T7346] tracefs_syscall_mkdir+0x11a/0x190 [ 325.866303][ T7346] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 325.872622][ T7346] ? generic_permission+0x2bf/0x670 [ 325.877972][ T7346] ? __pfx_tracefs_permission+0x10/0x10 [ 325.883610][ T7346] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 325.889655][ T7346] vfs_mkdir+0x408/0x620 [ 325.894128][ T7346] filename_mkdirat+0x289/0x520 [ 325.899296][ T7346] ? __pfx_filename_mkdirat+0x10/0x10 [ 325.905633][ T7346] ? do_getname+0x151/0x250 [ 325.911212][ T7346] __se_sys_mkdirat+0x35/0x150 [ 325.916839][ T7346] do_syscall_64+0x166/0x520 [ 325.921665][ T7346] ? trace_irq_disable+0x3b/0x140 [ 325.927359][ T7346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.934009][ T7346] ? clear_bhb_loop+0x70/0xc0 [ 325.939067][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.945288][ T7346] RIP: 0033:0x7fc1a2b7e159 [ 325.950261][ T7346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.971184][ T7346] RSP: 002b:00007fc1a0dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 325.980280][ T7346] RAX: ffffffffffffffda RBX: 00007fc1a2e05fa0 RCX: 00007fc1a2b7e159 [ 325.989131][ T7346] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 325.997606][ T7346] RBP: 00007fc1a2c1506b R08: 0000000000000000 R09: 0000000000000000 [ 326.005682][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.014964][ T7346] R13: 00007fc1a2e06038 R14: 00007fc1a2e05fa0 R15: 00007ffc825b5648 [ 326.025709][ T7346] [ 326.029999][ T7346] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 326.039916][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.4.418 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 326.053107][ T7346] Tainted: [L]=SOFTLOCKUP [ 326.058263][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.068931][ T7346] Call Trace: [ 326.073073][ T7346] [ 326.076147][ T7346] vpanic+0x56d/0xa60 [ 326.080243][ T7346] ? __pfx__printk+0x10/0x10 [ 326.085594][ T7346] ? __pfx_vpanic+0x10/0x10 [ 326.090932][ T7346] ? is_bpf_text_address+0x292/0x2b0 [ 326.096274][ T7346] ? is_bpf_text_address+0x26/0x2b0 [ 326.101798][ T7346] panic+0xc5/0xd0 [ 326.105662][ T7346] ? __pfx_panic+0x10/0x10 [ 326.110170][ T7346] __warn+0x315/0x4c0 [ 326.114467][ T7346] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 326.120009][ T7346] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 326.125467][ T7346] __report_bug+0x276/0x570 [ 326.130224][ T7346] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 326.135951][ T7346] ? __pfx___report_bug+0x10/0x10 [ 326.141754][ T7346] ? rb_allocate_cpu_buffer+0x5cf/0x3070 [ 326.148611][ T7346] report_bug_entry+0x19b/0x290 [ 326.153631][ T7346] ? trace_rb_cpu_prepare+0x332/0x3c0 [ 326.159295][ T7346] ? trace_rb_cpu_prepare+0x337/0x3c0 [ 326.165050][ T7346] handle_bug+0xce/0x200 [ 326.170009][ T7346] exc_invalid_op+0x1a/0x50 [ 326.174951][ T7346] asm_exc_invalid_op+0x1a/0x20 [ 326.179870][ T7346] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 [ 326.186619][ T7346] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3d 41 92 09 cc e8 87 2c fc ff 48 8d 3d 60 32 eb 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 6d 2c fc ff e9 ef fe ff ff [ 326.208110][ T7346] RSP: 0000:ffffc900045477d0 EFLAGS: 00010283 [ 326.214670][ T7346] RAX: ffffffff81caa929 RBX: dffffc0000000000 RCX: 0000000000080000 [ 326.223657][ T7346] RDX: ffffc9000ee79000 RSI: 0000000000000001 RDI: ffffffff8fb5db90 [ 326.232319][ T7346] RBP: 0000000000000001 R08: ffffffff8fb22c7f R09: 1ffffffff1f6458f [ 326.240963][ T7346] R10: dffffc0000000000 R11: fffffbfff1f64590 R12: 0000000000000000 [ 326.249022][ T7346] R13: ffff888020300308 R14: ffff8880277668a0 R15: 0000000000000000 [ 326.257079][ T7346] ? trace_rb_cpu_prepare+0x329/0x3c0 [ 326.263053][ T7346] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 326.268848][ T7346] cpuhp_invoke_callback+0x498/0x810 [ 326.274401][ T7346] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 326.280215][ T7346] cpuhp_issue_call+0x3f0/0x750 [ 326.286283][ T7346] ? mutex_lock_nested+0x152/0x1d0 [ 326.291486][ T7346] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 326.298958][ T7346] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 326.305712][ T7346] __cpuhp_state_add_instance+0x25/0x40 [ 326.311632][ T7346] alloc_buffer+0x188f/0x1d70 [ 326.316452][ T7346] __ring_buffer_alloc+0x2c/0x40 [ 326.321462][ T7346] allocate_trace_buffer+0x1d2/0x950 [ 326.326947][ T7346] ? __kmalloc_node_track_caller_noprof+0x58c/0x7b0 [ 326.333648][ T7346] ? trace_array_create_systems+0x75/0xe60 [ 326.339525][ T7346] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 326.345755][ T7346] ? __raw_spin_lock_init+0x45/0x100 [ 326.351230][ T7346] trace_array_create_systems+0x590/0xe60 [ 326.357110][ T7346] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 326.363026][ T7346] ? mutex_lock_nested+0x152/0x1d0 [ 326.368231][ T7346] instance_mkdir+0xd5/0x140 [ 326.373502][ T7346] tracefs_syscall_mkdir+0x11a/0x190 [ 326.378879][ T7346] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 326.384749][ T7346] ? generic_permission+0x2bf/0x670 [ 326.390019][ T7346] ? __pfx_tracefs_permission+0x10/0x10 [ 326.395667][ T7346] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 326.400752][ T7346] vfs_mkdir+0x408/0x620 [ 326.405075][ T7346] filename_mkdirat+0x289/0x520 [ 326.410053][ T7346] ? __pfx_filename_mkdirat+0x10/0x10 [ 326.415501][ T7346] ? do_getname+0x151/0x250 [ 326.421192][ T7346] __se_sys_mkdirat+0x35/0x150 [ 326.426236][ T7346] do_syscall_64+0x166/0x520 [ 326.430893][ T7346] ? trace_irq_disable+0x3b/0x140 [ 326.435983][ T7346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.442134][ T7346] ? clear_bhb_loop+0x70/0xc0 [ 326.447047][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.453025][ T7346] RIP: 0033:0x7fc1a2b7e159 [ 326.457496][ T7346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.477238][ T7346] RSP: 002b:00007fc1a0dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 326.486672][ T7346] RAX: ffffffffffffffda RBX: 00007fc1a2e05fa0 RCX: 00007fc1a2b7e159 [ 326.494713][ T7346] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 326.502740][ T7346] RBP: 00007fc1a2c1506b R08: 0000000000000000 R09: 0000000000000000 [ 326.510783][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.520238][ T7346] R13: 00007fc1a2e06038 R14: 00007fc1a2e05fa0 R15: 00007ffc825b5648 [ 326.529134][ T7346] [ 326.533093][ T7346] Kernel Offset: disabled [ 326.537458][ T7346] Rebooting in 86400 seconds..