last executing test programs: 2.362461632s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00ff40240400950000000000010902270001010080fa0904000003ff00ff00070581020002000705020200020007058303100004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xf, 0x4, "0000009e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000040)={0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x0, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x0, 0x1}}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000600)={'\x00', @ifru_flags=0x1}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000600)={'\x00', @ifru_flags=0x1}) nanosleep(&(0x7f0000000040)={0x1}, 0x0) 2.346985462s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=0.0.0.0:3260\x00', 0x25) 2.141862871s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x35, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) syz_usb_connect(0x0, 0x35, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mydev/v4l-touch1\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r1, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r1, 0xc058560f, &(0x7f0000000700)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400"/88) ioctl(r1, 0xc058560f, &(0x7f0000000800)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500"/88) ioctl(r1, 0xc058560f, &(0x7f0000000900)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000600"/88) ioctl(r1, 0xc058560f, &(0x7f0000000a00)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000700"/88) ioctl(r1, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 2.06010277s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./rpc_pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='8\n', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./nfs4\x00', 0x1ff) mount$nfs4(&(0x7f0000000900)='127.0.0.1:/\x00', &(0x7f0000000800)='./nfs4\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000b00)={[{'addr=127.0.0.1'}, {'vers=4'}]}) 2.024825173s ago: executing program 4 (id=5): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc299, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x1b}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x8, @string={0x8, 0x3, 's\x00y\x00z\x00'}}, &(0x7f0000000200)={0x0, 0x22, 0x1b, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @global=@item_012={0x1, 0x1, 0x8, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @main=@item_012={0x1, 0x0, 0x8, "02"}, @global=@item_012={0x1, 0x1, 0x8, "02"}, @local=@item_012={0x1, 0x2, 0x0, '1'}, @global=@item_012={0x1, 0x1, 0x9, '\a'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x1, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, &(0x7f0000000700)={0x20, 0x3, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0), &(0x7f0000000400)) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.96635951s ago: executing program 0 (id=7): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 1.965976752s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1\n\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180), 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.964648303s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) writev(r0, &(0x7f0000001000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000102)="02ff", 0x2}, {&(0x7f0000000104)="0247", 0x2}, {&(0x7f0000000106)="0280", 0x2}, {&(0x7f0000000108)="02fa", 0x2}, {&(0x7f000000010a)="02ff", 0x2}, {&(0x7f000000010c)="0247", 0x2}, {&(0x7f000000010e)="0280", 0x2}, {&(0x7f0000000110)="02fa", 0x2}, {&(0x7f0000000112)="02ff", 0x2}, {&(0x7f0000000114)="0247", 0x2}, {&(0x7f0000000116)="0280", 0x2}, {&(0x7f0000000118)="02fa", 0x2}, {&(0x7f000000011a)="02ff", 0x2}, {&(0x7f000000011c)="0247", 0x2}, {&(0x7f000000011e)="0280", 0x2}], 0x10) nanosleep(&(0x7f0000000240)={0x0, 0x2faf080}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/serio/devices/serio0/protocol\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='synaptics\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='synaptics\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/serio/devices/serio2/protocol\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='synaptics\x00', 0xa) 1.907278681s ago: executing program 0 (id=10): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@loopback, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="2c0000001a000100000000000000000002000000000000000000000008000100e00102030800030001000000", 0x2c) 1.907061614s ago: executing program 0 (id=11): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r0, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) 1.88932713s ago: executing program 0 (id=12): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff0007058102400000070501024000000705820140000107050601400001"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000400)=""/64) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000440)=""/64) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000140)="0400"/15) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 577.751506ms ago: executing program 1 (id=13): r0 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000403512018200010102030109022b0002010080fa0904000000010120000924010002080900000904010001ff00000007058103400001"], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0100000000000000") syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0100000000000000") syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x0, 0x18, '\x00'/24}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x3, 0x10, '\x00'/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x3, 0x10, '\x00'/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1, 0x3, 0x10, '\x00'/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 521.874774ms ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_debug_messages\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_print_times\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='freeze', 0x6) 447.153199ms ago: executing program 4 (id=15): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca0401f00001010203010902270001010080fa0904000003ffffff00070501020002000705810200020007058602000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="01b3") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="3001") nanosleep(&(0x7f0000000300)={0x1}, 0x0) 57.936022ms ago: executing program 1 (id=16): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x676, &(0x7f0000000740)="$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") r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000100000)=""/262144, 0x40000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r1, &(0x7f0000100000)='\x00'/262144, 0x40000) ftruncate(r1, 0x2000000) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000500)='./loop1\x00', 0x61b6, 0x701) mount(&(0x7f0000000600)=@filename='./loop1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0) ioctl(r3, 0x40086610, &(0x7f0000000800)="0080000000000000") 0s ago: executing program 1 (id=17): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x0, 0x1c, 0x20f}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x1c) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000200)={{}, 0x1, 0x1c, 0x1}, 0x18) write$input_event(r2, &(0x7f0000000240), 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 29.054859][ T4699] cgroup: Unknown subsys name 'net' [ 29.175945][ T4699] cgroup: Unknown subsys name 'cpuset' [ 29.178005][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.396309][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.148446][ T4714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.150829][ T4717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.153242][ T4717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.156145][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.158009][ T4717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.159866][ T4717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.161317][ T4717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.163359][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.163426][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.166581][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.166745][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.166957][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.176636][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.176721][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.177131][ T4717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.178238][ T4717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.183054][ T4714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.186527][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.186618][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.189500][ T4717] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.191194][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.193143][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.199243][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.201118][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.201426][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.572068][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.572361][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.572468][ T4722] bridge_slave_0: entered allmulticast mode [ 30.572915][ T4722] bridge_slave_0: entered promiscuous mode [ 30.577062][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.577085][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.577134][ T4722] bridge_slave_1: entered allmulticast mode [ 30.577551][ T4722] bridge_slave_1: entered promiscuous mode [ 30.598912][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.600084][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.607369][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.608778][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.610317][ T4711] bridge_slave_0: entered allmulticast mode [ 30.611999][ T4711] bridge_slave_0: entered promiscuous mode [ 30.615239][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.616698][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.618058][ T4711] bridge_slave_1: entered allmulticast mode [ 30.619719][ T4711] bridge_slave_1: entered promiscuous mode [ 30.641663][ T4722] team0: Port device team_slave_0 added [ 30.646444][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.646550][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.646608][ T4713] bridge_slave_0: entered allmulticast mode [ 30.647038][ T4713] bridge_slave_0: entered promiscuous mode [ 30.650625][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.650661][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.650713][ T4713] bridge_slave_1: entered allmulticast mode [ 30.651110][ T4713] bridge_slave_1: entered promiscuous mode [ 30.656380][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.657476][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.664590][ T4722] team0: Port device team_slave_1 added [ 30.668879][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.668925][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.669002][ T4712] bridge_slave_0: entered allmulticast mode [ 30.669481][ T4712] bridge_slave_0: entered promiscuous mode [ 30.672934][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.673002][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.673055][ T4712] bridge_slave_1: entered allmulticast mode [ 30.673598][ T4712] bridge_slave_1: entered promiscuous mode [ 30.683519][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.691517][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.692492][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.698438][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.700508][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.700535][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.700547][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.701653][ T4711] team0: Port device team_slave_0 added [ 30.703155][ T4711] team0: Port device team_slave_1 added [ 30.710636][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.712011][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.713564][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.730642][ T4712] team0: Port device team_slave_0 added [ 30.731783][ T4712] team0: Port device team_slave_1 added [ 30.733761][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.733779][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.733797][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.734496][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.734506][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.734523][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.737742][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.737766][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.737852][ T4723] bridge_slave_0: entered allmulticast mode [ 30.738358][ T4723] bridge_slave_0: entered promiscuous mode [ 30.739969][ T4713] team0: Port device team_slave_0 added [ 30.741198][ T4713] team0: Port device team_slave_1 added [ 30.755583][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.755645][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.755731][ T4723] bridge_slave_1: entered allmulticast mode [ 30.756141][ T4723] bridge_slave_1: entered promiscuous mode [ 30.774692][ T4711] hsr_slave_0: entered promiscuous mode [ 30.775081][ T4711] hsr_slave_1: entered promiscuous mode [ 30.779894][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.780512][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.780524][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.780543][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.781614][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.781625][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.781643][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.783693][ T4722] hsr_slave_0: entered promiscuous mode [ 30.784593][ T4722] hsr_slave_1: entered promiscuous mode [ 30.784982][ T4722] debugfs: 'hsr0' already exists in 'hsr' [ 30.785014][ T4722] Cannot create hsr debugfs directory [ 30.786102][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.786111][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.786129][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.786841][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.786849][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.786866][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.787933][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.818842][ T4723] team0: Port device team_slave_0 added [ 30.820387][ T4712] hsr_slave_0: entered promiscuous mode [ 30.821207][ T4712] hsr_slave_1: entered promiscuous mode [ 30.821618][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 30.821631][ T4712] Cannot create hsr debugfs directory [ 30.834905][ T4723] team0: Port device team_slave_1 added [ 30.852766][ T4713] hsr_slave_0: entered promiscuous mode [ 30.853100][ T4713] hsr_slave_1: entered promiscuous mode [ 30.853282][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.853292][ T4713] Cannot create hsr debugfs directory [ 30.859376][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.859398][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.859413][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.861578][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.861586][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.861600][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.927462][ T4723] hsr_slave_0: entered promiscuous mode [ 30.927786][ T4723] hsr_slave_1: entered promiscuous mode [ 30.928005][ T4723] debugfs: 'hsr0' already exists in 'hsr' [ 30.928015][ T4723] Cannot create hsr debugfs directory [ 30.978296][ T4722] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.981069][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.987765][ T4722] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.990924][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.999353][ T4722] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.001812][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.003685][ T4722] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.005836][ T4722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.029417][ T4711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.031731][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.032360][ T4711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.033967][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.039598][ T4711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.041748][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.045926][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.045982][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.046135][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.046169][ T4722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.047605][ T4711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.049596][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.071200][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.071260][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.071346][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.071379][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.077737][ T4712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.080075][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.082528][ T4712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.085632][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.089252][ T4712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.091319][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.091743][ T4712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.094206][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.114751][ T4713] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.117782][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.122976][ T4713] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.125535][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.126043][ T4713] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.127669][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.138417][ T4713] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.140616][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.143968][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.144006][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.144090][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.144123][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.161296][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.168174][ T4723] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.170347][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.172534][ T4723] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.175003][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.176458][ T4723] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.178477][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.180085][ T4723] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.182190][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.185571][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.190033][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.190073][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.190161][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.190194][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.201250][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.206084][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.207557][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.209558][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.211150][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.214629][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.216310][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.218261][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.219616][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.236698][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.246128][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.246176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.246564][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.246582][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.247184][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.247201][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.247514][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.247531][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.268507][ T4722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.268550][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.275166][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.275941][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.289219][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.311513][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.311556][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.323142][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.338944][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.338994][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.342626][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.342677][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.347403][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.349574][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.349623][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.392799][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.405808][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.423995][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.424044][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.424390][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.424418][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.474840][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.500018][ T4722] veth0_vlan: entered promiscuous mode [ 31.505077][ T4722] veth1_vlan: entered promiscuous mode [ 31.521954][ T4722] veth0_macvtap: entered promiscuous mode [ 31.533189][ T4722] veth1_macvtap: entered promiscuous mode [ 31.548461][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.551372][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.568976][ T4711] veth0_vlan: entered promiscuous mode [ 31.572162][ T4711] veth1_vlan: entered promiscuous mode [ 31.575907][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.598542][ T4711] veth0_macvtap: entered promiscuous mode [ 31.600939][ T1367] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.602868][ T1367] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.612230][ T4711] veth1_macvtap: entered promiscuous mode [ 31.619388][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.621169][ T1367] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.621227][ T1367] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.626001][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.633129][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.633219][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.633242][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.633257][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.665305][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.665335][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.695637][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.698032][ T3813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.698067][ T3813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.701037][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.717786][ T4712] veth0_vlan: entered promiscuous mode [ 31.722303][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.722333][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.739508][ T4712] veth1_vlan: entered promiscuous mode [ 31.755674][ T3813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.757547][ T3813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.761339][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.764047][ T4713] veth0_vlan: entered promiscuous mode [ 31.766837][ T4713] veth1_vlan: entered promiscuous mode [ 31.775145][ T4713] veth0_macvtap: entered promiscuous mode [ 31.780139][ T4722] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.786500][ T4713] veth1_macvtap: entered promiscuous mode [ 31.790316][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.797230][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.807062][ T4712] veth0_macvtap: entered promiscuous mode [ 31.808434][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.812385][ T4712] veth1_macvtap: entered promiscuous mode [ 31.819976][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.823613][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.832286][ T4889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.846359][ T4889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.848713][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.865931][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.867031][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.890187][ T257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890571][ T257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890598][ T257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890617][ T257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.895725][ T4891] lo speed is unknown, defaulting to 1000 [ 31.895758][ T4891] lo speed is unknown, defaulting to 1000 [ 31.896291][ T4891] lo speed is unknown, defaulting to 1000 [ 31.897140][ T4891] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 31.898473][ T4891] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 31.912076][ T4891] lo speed is unknown, defaulting to 1000 [ 31.923011][ T3813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.923046][ T3813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.923252][ T4891] lo speed is unknown, defaulting to 1000 [ 31.923777][ T4891] lo speed is unknown, defaulting to 1000 [ 31.924140][ T4891] lo speed is unknown, defaulting to 1000 [ 31.932190][ T4891] lo speed is unknown, defaulting to 1000 [ 31.941712][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.941750][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.947091][ T4723] veth0_vlan: entered promiscuous mode [ 31.951206][ T4723] veth1_vlan: entered promiscuous mode [ 31.969273][ T4723] veth0_macvtap: entered promiscuous mode [ 31.976904][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.976936][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.980861][ T4723] veth1_macvtap: entered promiscuous mode [ 31.985210][ T257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.985271][ T257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.000890][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.011409][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.011972][ T4891] ib_srp: No route available from (einval) to 0.0.0.0:3260 (-19) [ 32.016787][ T1367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.018556][ T1367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.029409][ T1367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.031152][ T1367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.074738][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.074761][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.081054][ T4906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.081666][ T4906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.108858][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.108883][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.140496][ T4914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.140692][ T4914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.166694][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.166892][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.243727][ T4719] Bluetooth: hci2: command tx timeout [ 32.243966][ T4719] Bluetooth: hci0: command tx timeout [ 32.244058][ T4719] Bluetooth: hci1: command tx timeout [ 32.253668][ T4719] Bluetooth: hci4: command tx timeout [ 32.255681][ T4720] Bluetooth: hci3: command tx timeout [ 32.279109][ T4928] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 32.533697][ T4820] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 32.686384][ T4820] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 32.686419][ T4820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.686434][ T4820] usb 1-1: Product: syz [ 32.686442][ T4820] usb 1-1: Manufacturer: syz [ 32.686449][ T4820] usb 1-1: SerialNumber: syz [ 33.284296][ T4831] atkbd serio0: keyboard reset failed on [ 33.610749][ T4935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.610986][ T4935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.666816][ T4937] PM: suspend entry (s2idle) [ 33.707123][ T4939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.707316][ T4939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.730112][ T1367] Filesystems sync: 0.062 seconds [ 34.131598][ T4941] loop1: detected capacity change from 0 to 1024 [ 34.145991][ T4941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.168595][ T4941] EXT4-fs warning (device loop1): ext4_resize_fs:2018: can't read last block, resize aborted [ 34.188490][ T4722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.216017][ T4946] input: syz0 as /devices/virtual/input/input5 [ 34.221044][ T1503] [ 34.221533][ T1503] ====================================================== [ 34.222820][ T1503] WARNING: possible circular locking dependency detected [ 34.224043][ T1503] syzkaller #0 Not tainted [ 34.224888][ T1503] ------------------------------------------------------ [ 34.226231][ T1503] kworker/0:2/1503 is trying to acquire lock: [ 34.227370][ T1503] ffff0000ca8382c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_flush_buffer+0x2c/0xa4 [ 34.229191][ T1503] [ 34.229191][ T1503] but task is already holding lock: [ 34.230463][ T1503] ffff0000c006a0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x78/0x2b4 [ 34.231995][ T1503] [ 34.231995][ T1503] which lock already depends on the new lock. [ 34.231995][ T1503] [ 34.233692][ T1503] [ 34.233692][ T1503] the existing dependency chain (in reverse order) is: [ 34.235133][ T1503] [ 34.235133][ T1503] -> #4 (&buf->lock){+.+.}-{4:4}: [ 34.236292][ T1503] __mutex_lock+0x164/0xf14 [ 34.237160][ T1503] mutex_lock_nested+0x24/0x30 [ 34.238044][ T1503] tty_buffer_flush+0x78/0x2b4 [ 34.238907][ T1503] tty_ldisc_flush+0x30/0x7c [ 34.239749][ T1503] __do_SAK+0x21c/0x604 [ 34.240552][ T1503] vc_SAK+0x74/0xa4 [ 34.241316][ T1503] process_scheduled_works+0x788/0x10b8 [ 34.242305][ T1503] worker_thread+0x798/0xbd0 [ 34.243147][ T1503] kthread+0x304/0x3d4 [ 34.243925][ T1503] ret_from_fork+0x10/0x20 [ 34.244770][ T1503] [ 34.244770][ T1503] -> #3 (console_lock){+.+.}-{0:0}: [ 34.246028][ T1503] console_lock+0x8c/0xac [ 34.246817][ T1503] console_call_setup+0x54/0xa4 [ 34.247715][ T1503] try_enable_preferred_console+0x444/0x5a4 [ 34.248716][ T1503] register_console+0x3a0/0xb98 [ 34.249580][ T1503] univ8250_console_init+0x5c/0x84 [ 34.250514][ T1503] console_init+0x14c/0x89c [ 34.251367][ T1503] start_kernel+0x25c/0x3c0 [ 34.252247][ T1503] __primary_switched+0x8c/0x94 [ 34.253194][ T1503] [ 34.253194][ T1503] -> #2 (console_mutex){+.+.}-{4:4}: [ 34.254474][ T1503] __mutex_lock+0x164/0xf14 [ 34.255321][ T1503] mutex_lock_nested+0x24/0x30 [ 34.256183][ T1503] console_list_lock+0x90/0xa8 [ 34.257052][ T1503] serial_core_register_port+0x1284/0x1b0c [ 34.258066][ T1503] serial_ctrl_register_port+0x28/0x38 [ 34.259035][ T1503] uart_add_one_port+0x28/0x38 [ 34.259926][ T1503] pl011_register_port+0x194/0x2ec [ 34.260902][ T1503] sbsa_uart_probe+0x334/0x46c [ 34.261754][ T1503] platform_probe+0x100/0x1a4 [ 34.262689][ T1503] really_probe+0x29c/0x800 [ 34.263509][ T1503] __driver_probe_device+0x1e0/0x350 [ 34.264496][ T1503] driver_probe_device+0x6c/0x19c [ 34.265407][ T1503] __device_attach_driver+0x198/0x2f8 [ 34.266387][ T1503] bus_for_each_drv+0x144/0x1dc [ 34.267268][ T1503] __device_attach+0x248/0x390 [ 34.268132][ T1503] device_initial_probe+0x90/0xc8 [ 34.269095][ T1503] bus_probe_device+0x58/0x120 [ 34.270003][ T1503] device_add+0x6cc/0x9e0 [ 34.270804][ T1503] platform_device_add+0x3dc/0x6f0 [ 34.271768][ T1503] platform_device_register_full+0x4fc/0x5ac [ 34.272832][ T1503] acpi_create_platform_device+0x50c/0x6e4 [ 34.273904][ T1503] acpi_default_enumeration+0x200/0x438 [ 34.274922][ T1503] acpi_bus_attach+0x64c/0x7e0 [ 34.275859][ T1503] acpi_dev_for_one_check+0xa0/0xb4 [ 34.276829][ T1503] device_for_each_child+0xf4/0x184 [ 34.277791][ T1503] acpi_dev_for_each_child+0x98/0xe4 [ 34.278747][ T1503] acpi_bus_attach+0x20c/0x7e0 [ 34.279614][ T1503] acpi_dev_for_one_check+0xa0/0xb4 [ 34.280581][ T1503] device_for_each_child+0xf4/0x184 [ 34.281562][ T1503] acpi_dev_for_each_child+0x98/0xe4 [ 34.282504][ T1503] acpi_bus_attach+0x20c/0x7e0 [ 34.283391][ T1503] acpi_bus_scan+0x104/0x310 [ 34.284247][ T1503] acpi_scan_init+0x168/0x3cc [ 34.285113][ T1503] acpi_init+0x15c/0x1f4 [ 34.285875][ T1503] do_one_initcall+0x274/0xc38 [ 34.286771][ T1503] do_initcall_level+0x12c/0x1c4 [ 34.287725][ T1503] do_initcalls+0x70/0xd0 [ 34.288524][ T1503] do_basic_setup+0x7c/0x90 [ 34.289360][ T1503] kernel_init_freeable+0x268/0x3a8 [ 34.290353][ T1503] kernel_init+0x24/0x1dc [ 34.291194][ T1503] ret_from_fork+0x10/0x20 [ 34.292017][ T1503] [ 34.292017][ T1503] -> #1 (&port->mutex){+.+.}-{4:4}: [ 34.293301][ T1503] __mutex_lock+0x164/0xf14 [ 34.294166][ T1503] mutex_lock_nested+0x24/0x30 [ 34.295059][ T1503] uart_set_termios+0x74/0x58c [ 34.295917][ T1503] tty_set_termios+0x3b0/0x6d0 [ 34.296810][ T1503] set_termios+0x428/0x618 [ 34.297643][ T1503] tty_mode_ioctl+0x45c/0x7f4 [ 34.298515][ T1503] n_tty_ioctl_helper+0xa8/0x2d8 [ 34.299417][ T1503] n_tty_ioctl+0x190/0x434 [ 34.300221][ T1503] tty_ioctl+0x900/0xd50 [ 34.301041][ T1503] __arm64_sys_ioctl+0x154/0x1cc [ 34.301930][ T1503] invoke_syscall+0x98/0x244 [ 34.302808][ T1503] el0_svc_common+0xec/0x23c [ 34.303653][ T1503] do_el0_svc+0x4c/0x5c [ 34.304423][ T1503] el0_svc+0x64/0x260 [ 34.305173][ T1503] el0t_64_sync_handler+0x48/0x148 [ 34.306102][ T1503] el0t_64_sync+0x198/0x19c [ 34.306972][ T1503] [ 34.306972][ T1503] -> #0 (&tty->termios_rwsem){++++}-{4:4}: [ 34.308305][ T1503] __lock_acquire+0x17c0/0x2ebc [ 34.309194][ T1503] lock_acquire+0x140/0x364 [ 34.310073][ T1503] down_write+0x50/0xc0 [ 34.310897][ T1503] n_tty_flush_buffer+0x2c/0xa4 [ 34.311870][ T1503] tty_buffer_flush+0x1b8/0x2b4 [ 34.312779][ T1503] tty_ldisc_flush+0x30/0x7c [ 34.313641][ T1503] __do_SAK+0x21c/0x604 [ 34.314452][ T1503] vc_SAK+0x74/0xa4 [ 34.315195][ T1503] process_scheduled_works+0x788/0x10b8 [ 34.316211][ T1503] worker_thread+0x798/0xbd0 [ 34.317069][ T1503] kthread+0x304/0x3d4 [ 34.317858][ T1503] ret_from_fork+0x10/0x20 [ 34.318655][ T1503] [ 34.318655][ T1503] other info that might help us debug this: [ 34.318655][ T1503] [ 34.320363][ T1503] Chain exists of: [ 34.320363][ T1503] &tty->termios_rwsem --> console_lock --> &buf->lock [ 34.320363][ T1503] [ 34.322544][ T1503] Possible unsafe locking scenario: [ 34.322544][ T1503] [ 34.324022][ T1503] CPU0 CPU1 [ 34.324087][ T4719] Bluetooth: hci4: command tx timeout [ 34.324118][ T4719] Bluetooth: hci1: command tx timeout [ 34.324144][ T4719] Bluetooth: hci2: command tx timeout [ 34.324435][ T4720] Bluetooth: hci3: command tx timeout [ 34.328781][ T1503] ---- ---- [ 34.329654][ T1503] lock(&buf->lock); [ 34.330280][ T1503] lock(console_lock); [ 34.331404][ T1503] lock(&buf->lock); [ 34.332416][ T1503] lock(&tty->termios_rwsem); [ 34.333203][ T1503] [ 34.333203][ T1503] *** DEADLOCK *** [ 34.333203][ T1503] [ 34.334538][ T1503] 5 locks held by kworker/0:2/1503: [ 34.335377][ T1503] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 34.337266][ T1503] #1: ffff800096357c40 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 34.339395][ T1503] #2: ffff800088cec860 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x2c/0xa4 [ 34.340856][ T1503] #3: ffff0000ca8380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x20/0x90 [ 34.342484][ T1503] #4: ffff0000c006a0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x78/0x2b4 [ 34.344145][ T1503] [ 34.344145][ T1503] stack backtrace: [ 34.345130][ T1503] CPU: 0 UID: 0 PID: 1503 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT [ 34.346545][ T1503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 34.348179][ T1503] Workqueue: events vc_SAK [ 34.348940][ T1503] Call trace: [ 34.349449][ T1503] show_stack+0x2c/0x3c (C) [ 34.350202][ T1503] __dump_stack+0x30/0x40 [ 34.350924][ T1503] dump_stack_lvl+0xd8/0x12c [ 34.351671][ T1503] dump_stack+0x1c/0x28 [ 34.352372][ T1503] print_circular_bug+0x328/0x330 [ 34.353184][ T1503] check_noncircular+0x158/0x174 [ 34.354036][ T1503] __lock_acquire+0x17c0/0x2ebc [ 34.354860][ T1503] lock_acquire+0x140/0x364 [ 34.355641][ T1503] down_write+0x50/0xc0 [ 34.356345][ T1503] n_tty_flush_buffer+0x2c/0xa4 [ 34.357123][ T1503] tty_buffer_flush+0x1b8/0x2b4 [ 34.357900][ T1503] tty_ldisc_flush+0x30/0x7c [ 34.358642][ T1503] __do_SAK+0x21c/0x604 [ 34.359280][ T1503] vc_SAK+0x74/0xa4 [ 34.359922][ T1503] process_scheduled_works+0x788/0x10b8 [ 34.360858][ T1503] worker_thread+0x798/0xbd0 [ 34.361609][ T1503] kthread+0x304/0x3d4 [ 34.362277][ T1503] ret_from_fork+0x10/0x20 [ 34.499183][ T4937] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 34.499337][ T4937] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 34.501806][ T4937] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 34.503743][ T4937] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 34.503802][ T4937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 34.506109][ T4937] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 34.507869][ T4937] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 34.507899][ T4937] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 34.510369][ T4937] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 34.512703][ T4937] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 34.512761][ T4937] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 34.515219][ T4937] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 34.516806][ T4937] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 34.516995][ T4937] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 34.519407][ T4937] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 34.963565][ T4831] atkbd serio0: keyboard reset failed on [ 35.843525][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 36.229223][ T1503] usb 1-1: USB disconnect, device number 2 [ 36.563636][ T50] Bluetooth: hci4: command 0x0419 tx timeout [ 36.563794][ T4720] Bluetooth: hci3: command 0x0419 tx timeout [ 36.563923][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 36.563950][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 37.923379][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 38.643381][ T4719] Bluetooth: hci1: command 0x0419 tx timeout [ 38.643387][ T4720] Bluetooth: hci2: command 0x0419 tx timeout [ 38.643799][ T50] Bluetooth: hci3: command 0x0419 tx timeout [ 38.653427][ T50] Bluetooth: hci4: command 0x0419 tx timeout [ 40.003480][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 40.723386][ T50] Bluetooth: hci4: command 0x0419 tx timeout [ 40.723423][ T50] Bluetooth: hci3: command 0x0419 tx timeout [ 40.723449][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 40.723466][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 42.093650][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 42.803395][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 42.803409][ T4720] Bluetooth: hci1: command 0x0419 tx timeout [ 42.803427][ T4714] Bluetooth: hci4: command 0x0419 tx timeout [ 42.803453][ T4719] Bluetooth: hci3: command 0x0419 tx timeout [ 44.163462][ T50] Bluetooth: hci0: command 0x040f tx timeout