last executing test programs: 12.590903666s ago: executing program 0 (id=1): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3) fcntl$addseals(r0, 0x409, 0x8) 12.395132418s ago: executing program 0 (id=5): r0 = socket$igmp(0x2, 0x3, 0x2) syz_usb_connect$uac2(0x3, 0x83, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x5, 0x30, 0x19, {0x8, 0xb, 0x0, 0x1, 0x1, 0xb, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x11, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xf, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0xfff8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) waitid(0x2, 0x0, 0x0, 0x2, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, 0x0) 11.247223654s ago: executing program 2 (id=10): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000004c0)=0x0) fcntl$setown(r0, 0x8, r3) 7.39554727s ago: executing program 0 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) inotify_init() 7.384754999s ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000140), 0x6) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00') 5.663791068s ago: executing program 0 (id=15): madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)) 3.943725191s ago: executing program 2 (id=16): syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e3a0d011200010000000000000307f908008100010000000019d7b8908a4e"], 0x3d) 2.947355046s ago: executing program 2 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req={0x8000, 0x6, 0x300, 0xfc}, 0x10) mmap(&(0x7f0000000000/0x30000)=nil, 0x30000, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.7111218s ago: executing program 3 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d05, &(0x7f0000000900)="000001000000000002") 2.140073079s ago: executing program 1 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd27, 0x65dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8000) 1.948323873s ago: executing program 3 (id=22): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 1.948077519s ago: executing program 1 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x1c, r1, 0x211, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) 1.014701337s ago: executing program 1 (id=24): gettid() timer_create(0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) wait4(0x0, 0x0, 0x20000000, 0x0) 921.41107ms ago: executing program 2 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x2, 0xa3f1, 0xfffffffffffffff9, 0x50ff, 0x9, 0x8}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x4, 0xffffffffffffffff}}, 0x28) 743.576665ms ago: executing program 3 (id=26): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap$usbmon(&(0x7f0000573000/0x1000)=nil, 0x1000, 0x2000005, 0x19, 0xffffffffffffffff, 0x6) 719.762973ms ago: executing program 1 (id=27): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000012c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003fc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 603.081656ms ago: executing program 1 (id=28): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0005}]}) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) 602.768498ms ago: executing program 3 (id=29): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000d00)='nf ', 0x3) 569.474929ms ago: executing program 2 (id=30): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 382.497732ms ago: executing program 3 (id=31): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 193.74111ms ago: executing program 1 (id=32): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r0, 0x0) syz_emit_vhci(0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r1, &(0x7f0000000100)={0x1f, @any, 0x1}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000200)=0x2, 0x4) connect$bt_rfcomm(r1, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x40, 0x40}}]}}, 0x15) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xe}, @l2cap_cid_signaling={{0xa}, [@l2cap_conf_rsp={{0x5, 0x2, 0x6}, {0x40}}]}}, 0x13) syz_emit_vhci(&(0x7f0000000700)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conf_req={{0x4, 0x3, 0x4}, {0x40}}]}}, 0x11) close(r1) mmap(&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x3, 0x28012, r0, 0x1000) 183.110259ms ago: executing program 3 (id=33): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x8000000, @local, 0x3}}}, 0x88) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) write$FUSE_STATX(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getitimer(0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 47.806319ms ago: executing program 0 (id=34): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) unshare(0x20400) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) rename(0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4088, 0xff8) getdents(r0, 0x0, 0x0) 0s ago: executing program 0 (id=35): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 85.873873][ T5603] cgroup: Unknown subsys name 'net' [ 85.982621][ T5603] cgroup: Unknown subsys name 'cpuset' [ 85.993090][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.824288][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.264135][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.273788][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.274377][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.294618][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.304759][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.431515][ T4932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.439979][ T4932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.441659][ T4932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.446439][ T4932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.454497][ T4932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.483198][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.502359][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.510740][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.520415][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.528737][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.661082][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.672643][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.681997][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.690155][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.693335][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.885007][ T11] cfg80211: failed to load regulatory.db [ 92.150714][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.150933][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.153439][ T5625] bridge_slave_0: entered allmulticast mode [ 92.159908][ T5625] bridge_slave_0: entered promiscuous mode [ 92.216464][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.216732][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.217101][ T5625] bridge_slave_1: entered allmulticast mode [ 92.222344][ T5625] bridge_slave_1: entered promiscuous mode [ 92.249277][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.249696][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.250715][ T5617] bridge_slave_0: entered allmulticast mode [ 92.255298][ T5617] bridge_slave_0: entered promiscuous mode [ 92.302596][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.302825][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.303181][ T5617] bridge_slave_1: entered allmulticast mode [ 92.308413][ T5617] bridge_slave_1: entered promiscuous mode [ 92.349856][ T4932] Bluetooth: hci0: command tx timeout [ 92.360275][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.385118][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.385670][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.390117][ T5626] bridge_slave_0: entered allmulticast mode [ 92.403468][ T5626] bridge_slave_0: entered promiscuous mode [ 92.415170][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.446565][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.446786][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.447851][ T5626] bridge_slave_1: entered allmulticast mode [ 92.454712][ T5626] bridge_slave_1: entered promiscuous mode [ 92.483254][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.493308][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.508752][ T4932] Bluetooth: hci1: command tx timeout [ 92.552624][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.552979][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.553940][ T5637] bridge_slave_0: entered allmulticast mode [ 92.559619][ T5637] bridge_slave_0: entered promiscuous mode [ 92.588760][ T4932] Bluetooth: hci2: command tx timeout [ 92.595749][ T5625] team0: Port device team_slave_0 added [ 92.615439][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.615694][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.616059][ T5637] bridge_slave_1: entered allmulticast mode [ 92.623292][ T5637] bridge_slave_1: entered promiscuous mode [ 92.656387][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.666377][ T5625] team0: Port device team_slave_1 added [ 92.684473][ T5617] team0: Port device team_slave_0 added [ 92.703889][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.729631][ T5617] team0: Port device team_slave_1 added [ 92.748670][ T4932] Bluetooth: hci3: command tx timeout [ 92.748947][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.774224][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.774377][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.774478][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.822624][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.844817][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.844945][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.845056][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.852328][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.852371][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.852452][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.911490][ T5626] team0: Port device team_slave_0 added [ 92.944234][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.944290][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.944354][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.000260][ T5626] team0: Port device team_slave_1 added [ 93.039965][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.042159][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.042241][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.055098][ T5637] team0: Port device team_slave_0 added [ 93.097325][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.097391][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.098987][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.122657][ T5637] team0: Port device team_slave_1 added [ 93.203675][ T5625] hsr_slave_0: entered promiscuous mode [ 93.211911][ T5625] hsr_slave_1: entered promiscuous mode [ 93.235717][ T5617] hsr_slave_0: entered promiscuous mode [ 93.239480][ T5617] hsr_slave_1: entered promiscuous mode [ 93.241457][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 93.241554][ T5617] Cannot create hsr debugfs directory [ 93.247287][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.247304][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.247330][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.269641][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.269692][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.269759][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.392332][ T5626] hsr_slave_0: entered promiscuous mode [ 93.395154][ T5626] hsr_slave_1: entered promiscuous mode [ 93.397128][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 93.397169][ T5626] Cannot create hsr debugfs directory [ 93.509287][ T5637] hsr_slave_0: entered promiscuous mode [ 93.512066][ T5637] hsr_slave_1: entered promiscuous mode [ 93.514376][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 93.514441][ T5637] Cannot create hsr debugfs directory [ 93.952962][ T5625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.970821][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.976148][ T5625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.989494][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.996124][ T5625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.007030][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.015626][ T5625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.027650][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.112122][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.125186][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.133439][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.144179][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.151301][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.163202][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.173682][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.185306][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.298221][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.311019][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.320521][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.334244][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.355806][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.365378][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.373974][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.385587][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.428947][ T4932] Bluetooth: hci0: command tx timeout [ 94.490876][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.501792][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.504466][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.521919][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.534826][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.546456][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.560497][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.569421][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.589340][ T4932] Bluetooth: hci1: command tx timeout [ 94.640734][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.668530][ T4932] Bluetooth: hci2: command tx timeout [ 94.694799][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.706629][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.746421][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.747305][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.785181][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.785324][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.810173][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.829931][ T4932] Bluetooth: hci3: command tx timeout [ 94.840866][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.841112][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.887938][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.888224][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.935059][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.985169][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.032914][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.085585][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.106177][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.106317][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.140970][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.141075][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.176626][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.176895][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.217195][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.217468][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.052662][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.197455][ T5625] veth0_vlan: entered promiscuous mode [ 96.215171][ T5625] veth1_vlan: entered promiscuous mode [ 96.301424][ T5625] veth0_macvtap: entered promiscuous mode [ 96.318273][ T5625] veth1_macvtap: entered promiscuous mode [ 96.338201][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.363232][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.401898][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.478957][ T3272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.479035][ T3272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.479090][ T3272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.479131][ T3272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.510588][ T4932] Bluetooth: hci0: command tx timeout [ 96.589544][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.612949][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.623242][ T5617] veth0_vlan: entered promiscuous mode [ 96.679348][ T4932] Bluetooth: hci1: command tx timeout [ 96.707293][ T5617] veth1_vlan: entered promiscuous mode [ 96.732607][ T3272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.742727][ T3272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.750652][ T4932] Bluetooth: hci2: command tx timeout [ 96.814773][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.814818][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.875575][ T5637] veth0_vlan: entered promiscuous mode [ 96.921729][ T4932] Bluetooth: hci3: command tx timeout [ 96.942258][ T5626] veth0_vlan: entered promiscuous mode [ 96.949340][ T5617] veth0_macvtap: entered promiscuous mode [ 96.958691][ T5625] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.980133][ T5637] veth1_vlan: entered promiscuous mode [ 96.992635][ T5617] veth1_macvtap: entered promiscuous mode [ 97.005008][ T5626] veth1_vlan: entered promiscuous mode [ 97.081291][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.126292][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.189948][ T5626] veth0_macvtap: entered promiscuous mode [ 97.198634][ T3272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.211866][ T5626] veth1_macvtap: entered promiscuous mode [ 97.223742][ T5637] veth0_macvtap: entered promiscuous mode [ 97.272842][ T5637] veth1_macvtap: entered promiscuous mode [ 97.289811][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.326780][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.352475][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.352512][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.370706][ T5735] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.385284][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.419933][ T1000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.446107][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.451447][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.452334][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.462997][ T1000] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.466341][ T1000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.466746][ T1000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.467175][ T1000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.478971][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.479025][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.551995][ T5735] usb 2-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 1.00 [ 97.587425][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.596538][ T5735] usb 2-1: Product: syz [ 97.601155][ T5735] usb 2-1: Manufacturer: syz [ 97.607939][ T5735] usb 2-1: SerialNumber: syz [ 97.615409][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.616065][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.616136][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.616252][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.834904][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.834950][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.895926][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.895977][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.007485][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.007524][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.072997][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.073051][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.314525][ T5775] 9p: Bad value for 'rfdno' [ 98.319304][ T5629] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.328855][ T5735] ipheth 2-1:1.0: ipheth_enable_ncm: usb_control_msg: -71 [ 98.372680][ T5735] ipheth 2-1:1.0: Apple iPhone USB Ethernet device attached [ 98.408846][ T5735] apple-mfi-fastcharge 2-1: USB disconnect, device number 2 [ 98.469616][ T5629] usb 1-1: Using ep0 maxpacket: 8 [ 98.486199][ T5629] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.486279][ T5629] usb 1-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice= 0.40 [ 98.506740][ T5629] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 98.525192][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.525237][ T5629] usb 1-1: Product: syz [ 98.525811][ T5629] usb 1-1: Manufacturer: syz [ 98.525835][ T5629] usb 1-1: SerialNumber: syz [ 98.562047][ T5735] ipheth 2-1:1.0: Apple iPhone USB Ethernet now disconnected [ 98.589514][ T4932] Bluetooth: hci0: command tx timeout [ 98.761541][ T4932] Bluetooth: hci1: command tx timeout [ 98.802328][ T5629] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.820293][ T5629] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 98.830177][ T4932] Bluetooth: hci2: command tx timeout [ 98.853451][ T5629] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.861836][ T5629] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 98.877384][ T5629] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.964062][ T5629] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 98.982009][ T5629] usb 1-1: USB disconnect, device number 2 [ 98.990036][ T4932] Bluetooth: hci3: command tx timeout [ 99.267428][ T5787] ======================================================= [ 99.267428][ T5787] WARNING: The mand mount option has been deprecated and [ 99.267428][ T5787] and is ignored by this kernel. Remove the mand [ 99.267428][ T5787] option from the mount to silence this warning. [ 99.267428][ T5787] ======================================================= [ 100.298606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 101.470241][ T5795] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 101.470241][ T5795] The task syz.1.9 (5795) triggered the difference, watch for misbehavior. [ 101.879201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.711559][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.828562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.226933][ T4932] Bluetooth: hci1: Malformed LE Event: 0x0d [ 107.445170][ T5813] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.108809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.449413][ T32] audit: type=1800 audit(1788227440.471:2): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25" name=8006 dev="sda1" ino=2043 res=0 errno=0 [ 109.472920][ T5839] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 109.835251][ T32] audit: type=1326 audit(1788227440.851:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5849 comm="syz.1.28" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55a99e159 code=0x7ffc0000 [ 109.863768][ T32] audit: type=1326 audit(1788227440.881:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5849 comm="syz.1.28" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55a99e159 code=0x7ffc0000 [ 109.897201][ T32] audit: type=1326 audit(1788227440.911:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5849 comm="syz.1.28" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb55a99e159 code=0x7ffc0000 [ 109.897288][ T32] audit: type=1326 audit(1788227440.911:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5849 comm="syz.1.28" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55a99e159 code=0x7ffc0000 [ 109.897399][ T32] audit: type=1326 audit(1788227440.911:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5849 comm="syz.1.28" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55a99e159 code=0x7ffc0000 [ 109.912706][ T32] audit: type=1326 audit(1788227440.911:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5849 comm="syz.1.28" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb55a99f9c7 code=0x7ffc0000 [ 109.917200][ T32] audit: type=1326 audit(1788227440.911:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5849 comm="syz.1.28" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb55a95e98e code=0x7ffc0000 [ 109.921116][ T32] audit: type=1326 audit(1788227440.911:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5849 comm="syz.1.28" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb55a95e98e code=0x7ffc0000 [ 109.961123][ T32] audit: type=1326 audit(1788227440.941:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5849 comm="syz.1.28" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb55a95e98e code=0x7ffc0000 [ 110.347583][ T4932] [ 110.349989][ T4932] ====================================================== [ 110.357081][ T4932] WARNING: possible circular locking dependency detected [ 110.364367][ T4932] syzkaller #0 Tainted: G L [ 110.370373][ T4932] ------------------------------------------------------ [ 110.377426][ T4932] kworker/u9:1/4932 is trying to acquire lock: [ 110.383599][ T4932] ffffffff90613f00 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x90/0x820 [ 110.392863][ T4932] [ 110.392863][ T4932] but task is already holding lock: [ 110.400252][ T4932] ffffffff905ef900 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x318/0xc80 [ 110.410132][ T4932] [ 110.410132][ T4932] which lock already depends on the new lock. [ 110.410132][ T4932] [ 110.420561][ T4932] [ 110.420561][ T4932] the existing dependency chain (in reverse order) is: [ 110.429631][ T4932] [ 110.429631][ T4932] -> #2 (hci_cb_list_lock){+.+.}-{4:4}: [ 110.437405][ T4932] __mutex_lock+0x19c/0x15a0 [ 110.442574][ T4932] hci_remote_features_evt+0x53d/0x950 [ 110.448606][ T4932] hci_event_packet+0x6cd/0xf10 [ 110.454027][ T4932] hci_rx_work+0x3ee/0x1020 [ 110.459107][ T4932] process_scheduled_works+0xc3d/0x1630 [ 110.465229][ T4932] worker_thread+0xa47/0xfb0 [ 110.470385][ T4932] kthread+0x38b/0x480 [ 110.475299][ T4932] ret_from_fork+0x514/0xb70 [ 110.480452][ T4932] ret_from_fork_asm+0x1a/0x30 [ 110.485779][ T4932] [ 110.485779][ T4932] -> #1 (&hdev->lock){+.+.}-{4:4}: [ 110.493115][ T4932] __mutex_lock+0x19c/0x15a0 [ 110.498275][ T4932] l2cap_chan_connect+0xff/0xf60 [ 110.503772][ T4932] l2cap_sock_connect+0x5e4/0x7e0 [ 110.509353][ T4932] kernel_connect+0x141/0x1c0 [ 110.514577][ T4932] rfcomm_dlc_open+0x644/0x1080 [ 110.519965][ T4932] rfcomm_sock_connect+0x2ed/0x650 [ 110.525624][ T4932] __sys_connect+0x316/0x450 [ 110.530768][ T4932] __x64_sys_connect+0x7a/0x90 [ 110.536079][ T4932] do_syscall_64+0x166/0x520 [ 110.541235][ T4932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.547694][ T4932] [ 110.547694][ T4932] -> #0 (rfcomm_mutex){+.+.}-{4:4}: [ 110.555137][ T4932] __lock_acquire+0x15ff/0x2e50 [ 110.560558][ T4932] lock_acquire+0x115/0x350 [ 110.565621][ T4932] __mutex_lock+0x19c/0x15a0 [ 110.570788][ T4932] rfcomm_security_cfm+0x90/0x820 [ 110.576371][ T4932] hci_auth_complete_evt+0x39f/0xc80 [ 110.582207][ T4932] hci_event_packet+0x6cd/0xf10 [ 110.587625][ T4932] hci_rx_work+0x3ee/0x1020 [ 110.592677][ T4932] process_scheduled_works+0xc3d/0x1630 [ 110.598857][ T4932] worker_thread+0xa47/0xfb0 [ 110.604001][ T4932] kthread+0x38b/0x480 [ 110.608637][ T4932] ret_from_fork+0x514/0xb70 [ 110.613775][ T4932] ret_from_fork_asm+0x1a/0x30 [ 110.619089][ T4932] [ 110.619089][ T4932] other info that might help us debug this: [ 110.619089][ T4932] [ 110.629343][ T4932] Chain exists of: [ 110.629343][ T4932] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 110.629343][ T4932] [ 110.641960][ T4932] Possible unsafe locking scenario: [ 110.641960][ T4932] [ 110.649450][ T4932] CPU0 CPU1 [ 110.654853][ T4932] ---- ---- [ 110.660264][ T4932] lock(hci_cb_list_lock); [ 110.664804][ T4932] lock(&hdev->lock); [ 110.671446][ T4932] lock(hci_cb_list_lock); [ 110.678521][ T4932] lock(rfcomm_mutex); [ 110.682739][ T4932] [ 110.682739][ T4932] *** DEADLOCK *** [ 110.682739][ T4932] [ 110.690915][ T4932] locks held by kworker/u9:1/4932: 4, last CPU#1: [ 110.697357][ T4932] #0: ffff88807f46f940 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 110.708391][ T4932] #1: ffffc9000e25fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 110.720430][ T4932] #2: ffff8880352d00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x95/0xc80 [ 110.730206][ T4932] #3: ffffffff905ef900 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x318/0xc80 [ 110.740503][ T4932] [ 110.740503][ T4932] stack backtrace: [ 110.746431][ T4932] CPU: 1 UID: 0 PID: 4932 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.757480][ T4932] Tainted: [L]=SOFTLOCKUP [ 110.761851][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.772074][ T4932] Workqueue: hci2 hci_rx_work [ 110.776799][ T4932] Call Trace: [ 110.780100][ T4932] [ 110.783062][ T4932] dump_stack_lvl+0xe8/0x150 [ 110.787702][ T4932] print_circular_bug+0x2e2/0x300 [ 110.792760][ T4932] check_noncircular+0x12f/0x150 [ 110.797729][ T4932] __lock_acquire+0x15ff/0x2e50 [ 110.802619][ T4932] ? __bfs+0x153/0x290 [ 110.806723][ T4932] lock_acquire+0x115/0x350 [ 110.811256][ T4932] ? rfcomm_security_cfm+0x90/0x820 [ 110.817001][ T4932] __mutex_lock+0x19c/0x15a0 [ 110.821618][ T4932] ? rfcomm_security_cfm+0x90/0x820 [ 110.826843][ T4932] ? ktime_get+0x1f5/0x220 [ 110.831393][ T4932] ? lapic_next_event+0x11/0x20 [ 110.836285][ T4932] ? clockevents_program_event+0x491/0x630 [ 110.842134][ T4932] ? rfcomm_security_cfm+0x90/0x820 [ 110.847378][ T4932] ? __pfx___mutex_lock+0x10/0x10 [ 110.852465][ T4932] ? irqentry_exit+0x218/0x910 [ 110.857319][ T4932] ? lockdep_hardirqs_on+0x7b/0x110 [ 110.862595][ T4932] rfcomm_security_cfm+0x90/0x820 [ 110.867675][ T4932] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 110.873371][ T4932] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 110.879107][ T4932] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 110.884788][ T4932] ? hci_auth_complete_evt+0x38e/0xc80 [ 110.890318][ T4932] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 110.896030][ T4932] hci_auth_complete_evt+0x39f/0xc80 [ 110.901382][ T4932] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 110.907286][ T4932] ? skb_pull_data+0xf0/0x200 [ 110.912027][ T4932] hci_event_packet+0x6cd/0xf10 [ 110.916994][ T4932] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 110.922892][ T4932] ? __pfx_hci_event_packet+0x10/0x10 [ 110.928342][ T4932] ? __sanitizer_cov_trace_pc+0x60/0x80 [ 110.933989][ T4932] ? hci_send_to_monitor+0xe2/0x590 [ 110.939246][ T4932] hci_rx_work+0x3ee/0x1020 [ 110.943812][ T4932] ? process_scheduled_works+0x97a/0x1630 [ 110.949560][ T4932] process_scheduled_works+0xc3d/0x1630 [ 110.955177][ T4932] ? __pfx_process_scheduled_works+0x10/0x10 [ 110.961183][ T4932] ? assign_work+0x3cf/0x5d0 [ 110.965798][ T4932] worker_thread+0xa47/0xfb0 [ 110.970414][ T4932] ? __kthread_parkme+0x71/0x1f0 [ 110.975405][ T4932] kthread+0x38b/0x480 [ 110.979513][ T4932] ? __pfx_worker_thread+0x10/0x10 [ 110.984677][ T4932] ? __pfx_kthread+0x10/0x10 [ 110.989389][ T4932] ret_from_fork+0x514/0xb70 [ 110.994011][ T4932] ? __pfx_ret_from_fork+0x10/0x10 [ 110.999145][ T4932] ? __switch_to+0xc89/0x1420 [ 111.003854][ T4932] ? __pfx_kthread+0x10/0x10 [ 111.008500][ T4932] ret_from_fork_asm+0x1a/0x30 [ 111.013499][ T4932] [ 117.158586][ T4932] Bluetooth: hci2: command 0x0406 tx timeout