last executing test programs: 7m16.153084851s ago: executing program 4 (id=13048): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_pid(r2, &(0x7f00000003c0), 0xffffffa0) 7m15.050494159s ago: executing program 4 (id=13060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2006}) 7m14.891221234s ago: executing program 4 (id=13063): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x8, 0x0, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x80, 0x0}, 0x2000f761) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) 7m14.780607335s ago: executing program 4 (id=13064): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 7m14.556849746s ago: executing program 4 (id=13067): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @local, 0x0, 0x0, 0x8000000, 0x0, 0x6}) 7m10.423728493s ago: executing program 4 (id=13100): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0xfffffffffffffde0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 7m9.747216298s ago: executing program 32 (id=13100): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0xfffffffffffffde0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 5m39.110796479s ago: executing program 0 (id=13671): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x28c, 0x30, 0x871a15abc695f91c, 0x0, 0x0, {}, [{0x278, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x40003, 0x0, 0x1, 0x200000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fffffff}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0xb4, 0x17, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffff7}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x55, 0x6, "b36c9360a687b7b48dab4646d9ca683e6f662cdd59e47700fe58c607f2e1944e6d769925ab9d591039d5e685ae47c195900d58202e5b7c9f7144b2ec9b078940184666c5cf7d3e11408e96ff85bc8b3529"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x9c, 0xb, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x19, 0x6, "b0c788834491db917a9a992c9833c17cff3b436365"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xb0, 0x8, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x20000000, 0x4, 0xcb8c}, 0x4}}]}, {0x61, 0x6, "a611650f26be9cd7202da28cac16d8d11fdb771f20ce375a34e3dba9f39705a673d73efe471bb4fd0d2fbed092b7ee194fceec6f36a9fd75fe5dedc20749c4f127768202979a913d3c140ae84f54b33f261beb283c20852cc5b0027f9a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x28c}}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 5m37.90687409s ago: executing program 0 (id=13681): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000480)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x4b, 0x11, 0x1, @private0, @mcast2, {[], {0x0, 0x4e22, 0x4b, 0x0, @opaque="f7a8080887faa66d31fff63a5b1fc73bb065e1eeafb27ee706f0cb741342588d0ad1c71e67bf4a203e6c1f7218561783ca6bb213639ed583dece835a51fa9c5a076757"}}}}}}, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 5m36.275498377s ago: executing program 0 (id=13692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xff, 0x4}, {0x0, 0x4, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 5m34.259795193s ago: executing program 0 (id=13703): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x81) read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) read(r0, &(0x7f0000000600)=""/1024, 0x400) 5m33.450004004s ago: executing program 0 (id=13708): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8ce, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9602, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5m32.55687175s ago: executing program 1 (id=13712): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20010040}, 0x40) 5m31.693476774s ago: executing program 1 (id=13715): socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2}, 'J'}}}}}}}, 0x0) 5m31.692957308s ago: executing program 0 (id=13716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001111204600000a60c6eec00be00302bfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 5m30.177849113s ago: executing program 1 (id=13721): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x38dd2298, @empty, 0x5}, {0xa, 0x4e23, 0x94, @loopback, 0xfffffeff}, r1, 0xe38}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 5m29.770317106s ago: executing program 1 (id=13724): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 5m28.812961424s ago: executing program 1 (id=13727): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000280)) 5m20.404130107s ago: executing program 1 (id=13748): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 5m15.482849396s ago: executing program 33 (id=13716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001111204600000a60c6eec00be00302bfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 5m3.961962542s ago: executing program 34 (id=13748): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 4.305949937s ago: executing program 3 (id=14476): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000240)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x1d57, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.209673786s ago: executing program 2 (id=14477): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 3.936523392s ago: executing program 3 (id=14478): inotify_init1(0x80800) socket$unix(0x1, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.843962316s ago: executing program 2 (id=14479): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r6, &(0x7f0000000500), 0x0}, 0x20) 3.557803122s ago: executing program 3 (id=14480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) 3.043219952s ago: executing program 2 (id=14481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x1, 0x0, 0xf0}) 2.688948413s ago: executing program 3 (id=14482): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000140)=0xe996) 2.336683947s ago: executing program 2 (id=14483): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, 0x0, 0x0) capset(0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)='devices.deny\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2.013399894s ago: executing program 3 (id=14484): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x101301) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x4004550c, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x1, 0x0, 0xe0, 0x40, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5, 0x2, 0x0, 0x0, @multicast2, @rand_addr=0x64010102}}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}}, 0x24}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x197, 0x4, 0x4, 0x0, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) 741.922767ms ago: executing program 2 (id=14485): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = fcntl$dupfd(r0, 0x0, r0) read$midi(r2, &(0x7f00000001c0)=""/158, 0x9e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r3, 0x0) 643.292103ms ago: executing program 3 (id=14486): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xf9, 0x80, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xba0}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x4, 0x73, 0x9}, {0x6, 0x24, 0x1a, 0x9, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x9, 0xdf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x410, 0x5, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x8, 0xc5}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000b80)={0x14, &(0x7f0000000a40)={0x20, 0xc, 0x2, {0x2, 0xd}}, 0x0}, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000"], 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000840)=ANY=[], 0x0) 0s ago: executing program 2 (id=14487): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): 59487][ T5586] usb 4-1: config 0 descriptor?? [ 785.617766][ T5586] corsair-cpro 0003:1B1C:0C10.000B: item fetching failed at offset 0/5 [ 785.618719][ T5586] corsair-cpro 0003:1B1C:0C10.000B: probe with driver corsair-cpro failed with error -22 [ 785.841963][ T5742] usb 4-1: USB disconnect, device number 82 [ 786.100086][T29213] program syz.1.11216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 786.790153][T29241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11228'. [ 787.731209][T29254] sctp: [Deprecated]: syz.4.11232 (pid 29254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 787.731209][T29254] Use struct sctp_sack_info instead [ 788.112423][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.112492][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.135943][T29282] netlink: 774 bytes leftover after parsing attributes in process `syz.1.11245'. [ 788.135969][T29282] netlink: 'syz.1.11245': attribute type 1 has an invalid length. [ 789.560110][ T37] audit: type=1400 audit(748.453:401): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="l" requested=rw pid=29310 comm="syz.1.11258" name="file1" dev="tmpfs" ino=10519 [ 792.543233][T29388] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11297'. [ 792.723886][T29383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.487451][T29421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11312'. [ 793.487481][T29421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11312'. [ 793.812345][T29430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11316'. [ 796.642856][T29535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11366'. [ 797.328980][T29554] sctp: [Deprecated]: syz.1.11375 (pid 29554) Use of int in max_burst socket option. [ 797.328980][T29554] Use struct sctp_assoc_value instead [ 797.744551][ T37] audit: type=1326 audit(756.028:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29563 comm="syz.4.11380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1fe8e0d9 code=0x7ffc0000 [ 797.746462][ T37] audit: type=1326 audit(756.028:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29563 comm="syz.4.11380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f6f1fe8e0d9 code=0x7ffc0000 [ 797.746608][ T37] audit: type=1326 audit(756.028:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29563 comm="syz.4.11380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1fe8e0d9 code=0x7ffc0000 [ 797.746837][ T37] audit: type=1326 audit(756.028:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29563 comm="syz.4.11380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1fe8e0d9 code=0x7ffc0000 [ 797.747206][ T37] audit: type=1326 audit(756.028:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29563 comm="syz.4.11380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f6f1fe8e0d9 code=0x7ffc0000 [ 797.747367][ T37] audit: type=1326 audit(756.028:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29563 comm="syz.4.11380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1fe8e0d9 code=0x7ffc0000 [ 797.747544][ T37] audit: type=1326 audit(756.028:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29563 comm="syz.4.11380" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1fe8e0d9 code=0x7ffc0000 [ 797.760029][ T5586] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 797.955216][ T5586] usb 4-1: Using ep0 maxpacket: 32 [ 797.957701][ T5586] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 797.957734][ T5586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.997879][ T5586] usb 4-1: config 0 descriptor?? [ 798.238391][ T5586] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 798.394076][ T5586] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 798.395694][ T5586] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 798.395798][ T5586] usb 4-1: media controller created [ 798.547201][ T5586] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 798.771839][ T5586] az6027: usb out operation failed. (-71) [ 798.787629][ T5586] az6027: usb out operation failed. (-71) [ 798.787649][ T5586] stb0899_attach: Driver disabled by Kconfig [ 798.787660][ T5586] az6027: no front-end attached [ 798.787660][ T5586] [ 798.788135][ T5586] az6027: usb out operation failed. (-71) [ 798.788152][ T5586] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 798.829108][ T5586] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 798.919890][ T5870] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 798.984961][ T5586] dvb-usb: schedule remote query interval to 400 msecs. [ 798.984986][ T5586] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 799.021121][ T5586] usb 4-1: USB disconnect, device number 83 [ 799.094223][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 799.100754][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.100793][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 799.100838][ T5870] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 799.100863][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.175382][ T5870] usb 2-1: config 0 descriptor?? [ 799.277699][T29596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11394'. [ 799.665985][ T5870] kye 0003:0458:5005.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 799.666849][ T5870] kye 0003:0458:5005.000C: unknown main item tag 0x2 [ 799.666940][ T5870] kye 0003:0458:5005.000C: item fetching failed at offset 21/22 [ 799.673052][ T5870] kye 0003:0458:5005.000C: parse failed [ 799.673140][ T5870] kye 0003:0458:5005.000C: probe with driver kye failed with error -22 [ 799.864970][ T5586] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 801.015308][ T822] usb 2-1: USB disconnect, device number 75 [ 801.879338][ T5870] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 802.062048][ T5870] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 802.062085][ T5870] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 802.062106][ T5870] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 802.062127][ T5870] usb 4-1: config 220 has no interface number 2 [ 802.062205][ T5870] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 802.062245][ T5870] usb 4-1: config 220 interface 0 has no altsetting 0 [ 802.062265][ T5870] usb 4-1: config 220 interface 76 has no altsetting 0 [ 802.062286][ T5870] usb 4-1: config 220 interface 1 has no altsetting 0 [ 802.113272][ T5870] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 802.113307][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.113330][ T5870] usb 4-1: Product: syz [ 802.113346][ T5870] usb 4-1: Manufacturer: syz [ 802.113363][ T5870] usb 4-1: SerialNumber: syz [ 802.450301][ T5870] usb 4-1: selecting invalid altsetting 0 [ 802.450840][ T5870] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 802.450876][ T5870] uvcvideo 4-1:220.0: No valid video chain found. [ 802.484224][ T5870] usb 4-1: selecting invalid altsetting 0 [ 802.484265][ T5870] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 802.504745][ T5870] usb 4-1: USB disconnect, device number 84 [ 802.561856][T29679] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 803.385842][T29702] sg_write: process 4104 (syz.3.11444) changed security contexts after opening file descriptor, this is not allowed. [ 804.407307][T29721] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd [ 804.607961][ T37] audit: type=1400 audit(1018.352:409): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=29742 comm="syz.0.11465" daddr=::ffff:172.20.20.170 [ 806.358542][T29791] loop3: detected capacity change from 0 to 7 [ 806.579715][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.579937][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 806.642837][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.642938][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 806.671918][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.672030][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 806.705984][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.706045][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 806.777301][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.777406][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 806.777613][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.777713][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 806.779768][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.779844][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 806.779897][T29791] ldm_validate_partition_table(): Disk read failed. [ 806.786318][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.786408][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 806.788145][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.788216][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 806.789944][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.790375][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 806.924785][T29791] Dev loop3: unable to read RDB block 0 [ 806.971084][T29791] loop3: unable to read partition table [ 806.971328][T29791] loop3: partition table beyond EOD, truncated [ 806.971363][T29791] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 807.542637][T29828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11503'. [ 807.707195][T29828] vlan3: entered promiscuous mode [ 807.707224][T29828] macvlan0: entered promiscuous mode [ 810.340678][T29918] input: syz1 as /devices/virtual/input/input36 [ 811.904356][T29983] netlink: 165 bytes leftover after parsing attributes in process `syz.1.11576'. [ 812.315290][T29999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11582'. [ 812.560704][T30000] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 812.560736][T30000] CPU: 1 UID: 0 PID: 30000 Comm: syz.1.11583 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 812.560769][T30000] Tainted: [L]=SOFTLOCKUP [ 812.560777][T30000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.560790][T30000] Call Trace: [ 812.560798][T30000] [ 812.560808][T30000] dump_stack_lvl+0xe8/0x150 [ 812.560855][T30000] sysfs_create_dir_ns+0x271/0x2a0 [ 812.560884][T30000] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 812.560913][T30000] ? rt_spin_unlock+0x163/0x200 [ 812.560941][T30000] kobject_add_internal+0x62c/0xce0 [ 812.560970][T30000] kobject_add+0x163/0x240 [ 812.560990][T30000] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 812.561018][T30000] ? __pfx_kobject_add+0x10/0x10 [ 812.561044][T30000] ? get_device_parent+0x370/0x3a0 [ 812.561071][T30000] ? __pfx_klist_children_get+0x10/0x10 [ 812.561098][T30000] device_add+0x3fa/0xb80 [ 812.561129][T30000] tty_register_device_attr+0x422/0x950 [ 812.561169][T30000] ? __pfx_tty_register_device_attr+0x10/0x10 [ 812.561206][T30000] ? tty_port_init+0x140/0x1b0 [ 812.561237][T30000] ? gsm_dlci_alloc+0x341/0x650 [ 812.561272][T30000] gsm_activate_mux+0x110/0x2a0 [ 812.561319][T30000] gsmld_ioctl+0xcf5/0x1930 [ 812.561359][T30000] ? __pfx_gsmld_ioctl+0x10/0x10 [ 812.561402][T30000] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 812.561434][T30000] ? ldsem_down_read+0x12/0x40 [ 812.561467][T30000] ? __pfx_gsmld_ioctl+0x10/0x10 [ 812.561493][T30000] tty_ioctl+0x9c3/0xde0 [ 812.561521][T30000] ? __pfx_tty_ioctl+0x10/0x10 [ 812.561548][T30000] __se_sys_ioctl+0xff/0x170 [ 812.561576][T30000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.561599][T30000] do_syscall_64+0x174/0x580 [ 812.561628][T30000] ? trace_irq_disable+0x3b/0x140 [ 812.561650][T30000] ? clear_bhb_loop+0x40/0x90 [ 812.561677][T30000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.561699][T30000] RIP: 0033:0x7fb2f07ee0d9 [ 812.561718][T30000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.561738][T30000] RSP: 002b:00007fb2eea25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.561761][T30000] RAX: ffffffffffffffda RBX: 00007fb2f0a76090 RCX: 00007fb2f07ee0d9 [ 812.561788][T30000] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 812.561802][T30000] RBP: 00007fb2f0885024 R08: 0000000000000000 R09: 0000000000000000 [ 812.561816][T30000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.561828][T30000] R13: 00007fb2f0a76128 R14: 00007fb2f0a76090 R15: 00007ffe590b66c8 [ 812.561862][T30000] [ 812.562013][T30000] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 812.608880][T29999] ip6gre2: entered promiscuous mode [ 812.608906][T29999] ip6gre2: entered allmulticast mode [ 812.626184][T29986] virt_wifi0 speed is unknown, defaulting to 1000 [ 812.637818][ T172] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 812.638082][ T172] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 812.664989][ T5743] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 812.750677][ T5743] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 813.312119][ T5743] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 816.010586][T30070] MTRR 1 not used [ 816.148946][ T37] audit: type=1400 audit(1029.008:410): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=30073 comm="syz.3.11618" daddr=::ffff:224.0.0.1 dest=20003 [ 817.314480][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 818.073390][T30146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11650'. [ 818.427949][T30157] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11656'. [ 818.802698][T30167] netlink: 'syz.4.11660': attribute type 2 has an invalid length. [ 818.802726][T30167] netlink: 'syz.4.11660': attribute type 1 has an invalid length. [ 818.802743][T30167] nbd: illegal input index 65544 [ 820.869270][T30235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11691'. [ 821.570753][T30263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11705'. [ 822.924345][T30307] GUP no longer grows the stack in syz.1.11725 (30307): 200000001000-200000c01000 (200000000000) [ 822.924391][T30307] CPU: 1 UID: 0 PID: 30307 Comm: syz.1.11725 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 822.924422][T30307] Tainted: [L]=SOFTLOCKUP [ 822.924430][T30307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 822.924443][T30307] Call Trace: [ 822.924452][T30307] [ 822.924463][T30307] dump_stack_lvl+0xe8/0x150 [ 822.924505][T30307] __get_user_pages+0x21e9/0x2590 [ 822.924555][T30307] ? down_read_killable+0x14c/0x220 [ 822.924675][T30307] __gup_longterm_locked+0xd52/0x15c0 [ 822.924711][T30307] ? gup_fast_fallback+0x20d/0x2040 [ 822.924748][T30307] gup_fast_fallback+0x1cf7/0x2040 [ 822.924805][T30307] ? __pfx_gup_fast_fallback+0x10/0x10 [ 822.924832][T30307] ? is_valid_gup_args+0x11f/0x200 [ 822.924859][T30307] ? get_user_pages_fast+0x4d/0xb0 [ 822.924884][T30307] get_futex_key+0x90e/0x1580 [ 822.924924][T30307] ? __pfx_get_futex_key+0x10/0x10 [ 822.924947][T30307] ? futex_unqueue+0x22/0x240 [ 822.924976][T30307] ? __futex_wait+0x1e3/0x410 [ 822.925020][T30307] futex_requeue+0x23a/0x1b10 [ 822.925062][T30307] ? __pfx_futex_wake_mark+0x10/0x10 [ 822.925104][T30307] ? try_to_wake_up+0x84b/0x1430 [ 822.925138][T30307] ? __pfx_futex_requeue+0x10/0x10 [ 822.925180][T30307] ? futex_wait+0x2a2/0x390 [ 822.925214][T30307] ? __pfx_futex_wait+0x10/0x10 [ 822.925267][T30307] do_futex+0x41b/0x4e0 [ 822.925305][T30307] ? __pfx_do_futex+0x10/0x10 [ 822.925334][T30307] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 822.925375][T30307] __se_sys_futex+0x3a8/0x450 [ 822.925414][T30307] ? __pfx___se_sys_futex+0x10/0x10 [ 822.925444][T30307] ? rcu_is_watching+0x15/0xb0 [ 822.925482][T30307] ? __x64_sys_futex+0x21/0xf0 [ 822.925512][T30307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.925539][T30307] do_syscall_64+0x174/0x580 [ 822.925570][T30307] ? trace_irq_disable+0x3b/0x140 [ 822.925594][T30307] ? clear_bhb_loop+0x40/0x90 [ 822.925623][T30307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.925656][T30307] RIP: 0033:0x7fb2f07ee0d9 [ 822.925680][T30307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.925700][T30307] RSP: 002b:00007fb2eea46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 822.925726][T30307] RAX: ffffffffffffffda RBX: 00007fb2f0a75fa0 RCX: 00007fb2f07ee0d9 [ 822.925748][T30307] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 822.925764][T30307] RBP: 00007fb2f0885024 R08: 0000000000000000 R09: 0000000000000000 [ 822.925779][T30307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.925793][T30307] R13: 00007fb2f0a76038 R14: 00007fb2f0a75fa0 R15: 00007ffe590b66c8 [ 822.925832][T30307] [ 824.514653][ T1450] wlan1: Trigger new scan to find an IBSS to join [ 825.271446][T30369] netlink: 124 bytes leftover after parsing attributes in process `syz.1.11755'. [ 825.371949][T30375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11757'. [ 825.371982][T30375] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11757'. [ 825.372001][T30375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11757'. [ 825.372480][T30375] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11757'. [ 826.785635][T30435] pimreg: tun_chr_ioctl cmd 1074025677 [ 826.785875][T30435] pimreg: linktype set to 1 [ 826.942023][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 827.011643][T30443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11789'. [ 827.506686][T30463] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11799'. [ 827.722717][T30474] netlink: 'syz.1.11805': attribute type 12 has an invalid length. [ 827.722740][T30474] netlink: 'syz.1.11805': attribute type 29 has an invalid length. [ 827.722755][T30474] netlink: 148 bytes leftover after parsing attributes in process `syz.1.11805'. [ 827.966820][T30484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11809'. [ 829.297982][ T37] audit: type=1804 audit(1041.130:411): pid=30544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.11836" name="/newroot/1924/file0" dev="tmpfs" ino=9711 res=1 errno=0 [ 829.975989][ T150] wlan1: Trigger new scan to find an IBSS to join [ 830.494816][ T172] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.496388][ T172] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.496451][ T172] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 830.496491][ T172] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.394250][T29900] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 831.567526][T29900] usb 4-1: Using ep0 maxpacket: 32 [ 831.570301][T29900] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 831.570335][T29900] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 831.570360][T29900] usb 4-1: config 0 interface 0 has no altsetting 0 [ 831.573645][T29900] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 831.573677][T29900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.573701][T29900] usb 4-1: Product: syz [ 831.573717][T29900] usb 4-1: Manufacturer: syz [ 831.573734][T29900] usb 4-1: SerialNumber: syz [ 831.657777][T29900] usb 4-1: config 0 descriptor?? [ 831.918753][ T172] wlan1: Creating new IBSS network, BSSID 5a:ac:da:92:e7:f0 [ 832.129720][T29900] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 832.349530][T29900] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 832.529309][T29900] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 832.619263][T29900] usb 4-1: USB disconnect, device number 85 [ 833.190254][T30677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11898'. [ 833.190281][T30677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11898'. [ 833.190294][T30677] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11898'. [ 833.965386][T30704] block2mtd: illegal erase size [ 836.691379][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 836.781413][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 836.783359][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 836.810964][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 836.824040][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 837.276354][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.498487][T30791] team0: entered promiscuous mode [ 837.498515][T30791] team_slave_0: entered promiscuous mode [ 837.504407][T30791] team_slave_1: entered promiscuous mode [ 837.504669][T30791] bridge0: entered promiscuous mode [ 837.703662][T30791] batadv0: entered promiscuous mode [ 838.468200][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.339086][T25856] Bluetooth: hci0: command tx timeout [ 839.544541][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.652141][T30771] virt_wifi0 speed is unknown, defaulting to 1000 [ 840.013132][ T37] audit: type=1326 audit(1051.020:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30885 comm="syz.3.11991" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x0 [ 840.417858][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 840.420749][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.117548][T30922] batadv_slave_1: entered promiscuous mode [ 841.124299][T30922] batadv_slave_1: left promiscuous mode [ 841.556348][ T37] audit: type=1326 audit(1052.441:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30936 comm="syz.4.12014" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f1fe8e0d9 code=0x0 [ 841.593701][T25856] Bluetooth: hci0: command tx timeout [ 843.315145][T30984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12033'. [ 843.343064][T30771] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.343311][T30771] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.343570][T30771] bridge_slave_0: entered allmulticast mode [ 843.347409][T30771] bridge_slave_0: entered promiscuous mode [ 843.383444][T30771] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.390155][T30771] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.390411][T30771] bridge_slave_1: entered allmulticast mode [ 843.416168][T30771] bridge_slave_1: entered promiscuous mode [ 843.585411][T30771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.602320][T30771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.726442][T30771] team0: Port device team_slave_0 added [ 843.848712][T25856] Bluetooth: hci0: command tx timeout [ 843.899651][T30771] team0: Port device team_slave_1 added [ 844.566736][ T13] bridge_slave_1: left allmulticast mode [ 844.567024][ T13] bridge_slave_1: left promiscuous mode [ 844.693619][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.889275][ T13] bridge_slave_0: left allmulticast mode [ 844.889317][ T13] bridge_slave_0: left promiscuous mode [ 844.889790][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.109301][T25856] Bluetooth: hci0: command tx timeout [ 848.683060][ T13] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 848.901377][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 850.290213][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.428674][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.540052][ T13] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 850.611300][ T13] bond0 (unregistering): Released all slaves [ 850.649083][ T13] bond1 (unregistering): Released all slaves [ 850.686428][ T13] bond2 (unregistering): Released all slaves [ 850.725706][ T13] bond3 (unregistering): Released all slaves [ 850.787682][T30771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.787694][T30771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.787712][T30771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.207257][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 851.221008][T30771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.221025][T30771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.221051][T30771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.453568][ T13] tipc: Disabling bearer [ 851.473924][ T13] tipc: Left network mode [ 851.805398][T30771] hsr_slave_0: entered promiscuous mode [ 851.811675][T30771] hsr_slave_1: entered promiscuous mode [ 851.874727][T30771] debugfs: 'hsr0' already exists in 'hsr' [ 851.874760][T30771] Cannot create hsr debugfs directory [ 852.051890][ T13] IPVS: stopping backup sync thread 27599 ... [ 854.264685][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 854.693184][T31348] console message test [ 854.700521][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 854.725075][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 854.725175][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 855.662774][T31367] input: syz1 as /devices/virtual/input/input37 [ 855.662816][T31367] input: failed to attach handler leds to device input37, error: -6 [ 856.695633][T25856] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 856.697114][T31403] netlink: 'syz.4.12221': attribute type 5 has an invalid length. [ 858.054163][T31441] ieee802154 phy0 wpan0: encryption failed: -22 [ 858.065323][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 859.090310][T31473] program syz.4.12248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 860.134518][T31489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12255'. [ 860.134549][T31489] bridge_slave_0: default FDB implementation only supports local addresses [ 860.443292][T31509] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12263'. [ 860.607992][ T822] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 860.768067][ T822] usb 2-1: Using ep0 maxpacket: 8 [ 860.774435][ T822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.774465][ T822] usb 2-1: config 0 has no interfaces? [ 860.778650][ T822] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 860.778684][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.778707][ T822] usb 2-1: Product: syz [ 860.825825][ T822] usb 2-1: Manufacturer: syz [ 860.825850][ T822] usb 2-1: SerialNumber: syz [ 860.840544][ T37] audit: type=1400 audit(1070.238:414): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="l" requested=r pid=31520 comm="syz.4.12271" path="/2060/file1" dev="tmpfs" ino=10391 [ 860.903028][ T822] usb 2-1: config 0 descriptor?? [ 861.104537][T25856] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 861.104915][T25856] Bluetooth: hci3: Injecting HCI hardware error event [ 861.109800][ T5642] Bluetooth: hci3: hardware error 0x00 [ 861.458402][T31541] i2c i2c-0: delete_device: Extra parameters [ 861.912584][T31503] netlink: 136 bytes leftover after parsing attributes in process `syz.1.12262'. [ 861.912614][T31503] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 861.926133][T29900] usb 2-1: USB disconnect, device number 76 [ 862.083540][T31556] pimreg: tun_chr_ioctl cmd 1074025677 [ 862.083717][T31556] pimreg: linktype set to 804 [ 862.728984][T31578] program syz.1.12291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 863.442573][T31593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12296'. [ 863.631298][ T5642] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 863.767566][T31606] sg_write: data in/out 331740/136 bytes for SCSI command 0x0-- guessing data in; [ 863.767566][T31606] program syz.3.12301 not setting count and/or reply_len properly [ 863.795434][ T13] hsr_slave_0: left promiscuous mode [ 863.803539][T31609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12302'. [ 863.841992][ T13] hsr_slave_1: left promiscuous mode [ 863.932494][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.932762][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.027063][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.027094][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.349690][ T1450] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 864.526507][ T13] veth1_macvtap: left promiscuous mode [ 864.552168][ T13] veth0_macvtap: left promiscuous mode [ 864.558508][ T13] veth1_vlan: left promiscuous mode [ 864.574707][ T13] veth0_vlan: left promiscuous mode [ 865.911022][ T37] audit: type=1400 audit(1074.915:415): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=31677 comm="syz.3.12326" daddr=::ffff:172.20.20.26 dest=20003 [ 868.186430][ T13] team0 (unregistering): Port device team_slave_1 removed [ 868.275037][ T13] team0 (unregistering): Port device team_slave_0 removed [ 870.352370][T29900] kernel read not supported for file /vcs (pid: 29900 comm: kworker/0:2) [ 871.347231][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 871.347528][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 873.378789][T30771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 873.468846][T30771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 873.470002][T30771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 873.836089][T30771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 873.877813][T30771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 874.030222][T31883] trusted_key: encrypted_key: insufficient parameters specified [ 874.228086][T30771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.241220][T30771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 874.463286][T30771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.523037][ T31] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 874.697743][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 874.700118][ T31] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 874.700148][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.700169][ T31] usb 4-1: config 0 has no interface number 0 [ 874.742480][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 874.742513][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.742535][ T31] usb 4-1: Product: syz [ 874.742551][ T31] usb 4-1: Manufacturer: syz [ 874.742567][ T31] usb 4-1: SerialNumber: syz [ 874.795960][ T31] usb 4-1: config 0 descriptor?? [ 874.821404][ T31] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 874.821439][ T31] uvcvideo 4-1:0.105: No valid video chain found. [ 875.023910][ T822] usb 4-1: USB disconnect, device number 86 [ 875.426633][T30771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.636661][T30771] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.775555][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.775769][ T1450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.811554][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.811706][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.291615][T31959] program syz.4.12440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 878.364532][T30771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.512698][T32025] 9p: Unknown uid 00000000004294967295 [ 878.616666][T30771] veth0_vlan: entered promiscuous mode [ 878.647121][T30771] veth1_vlan: entered promiscuous mode [ 878.831878][T30771] veth0_macvtap: entered promiscuous mode [ 878.951213][T30771] veth1_macvtap: entered promiscuous mode [ 878.992322][T32040] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12472'. [ 879.067680][T30771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.116902][T32042] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12473'. [ 879.116941][T32042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12473'. [ 879.151898][T30771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.008125][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.008519][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.008962][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.039858][T31547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.765144][ T5586] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 880.780607][T32068] gfs2: not a GFS2 filesystem [ 880.981160][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.981326][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.085007][ T5586] usb 2-1: Using ep0 maxpacket: 16 [ 881.095419][ T5586] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.095455][ T5586] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.095478][ T5586] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 881.095503][ T5586] usb 2-1: config 0 interface 0 has no altsetting 0 [ 881.095537][ T5586] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 881.095559][ T5586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.184881][ T5586] usb 2-1: config 0 descriptor?? [ 881.685321][ T5586] hid (null): report_id 2325293152 is invalid [ 881.939970][T32065] usb 2-1: USB disconnect, device number 77 [ 882.134805][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.134829][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.474007][T32139] bridge0: port 2(bridge_slave_1) entered listening state [ 883.522843][T32139] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.001452][T32174] 9p: Bad value for 'dfltgid' [ 884.001475][T32174] 9p: Bad value for 'dfltgid' [ 884.039937][T32065] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 884.111860][T32178] vxcan0: tx address claim with dest, not broadcast [ 884.151875][T32181] loop5: detected capacity change from 0 to 7 [ 884.213163][T32065] usb 4-1: Using ep0 maxpacket: 8 [ 884.215251][T32065] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.215278][T32065] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 884.217656][T32065] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 884.217687][T32065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.217707][T32065] usb 4-1: Product: syz [ 884.217719][T32065] usb 4-1: Manufacturer: syz [ 884.217730][T32065] usb 4-1: SerialNumber: syz [ 884.409469][T32065] usb 4-1: config 0 descriptor?? [ 884.544234][ C0] blk_print_req_error: 10 callbacks suppressed [ 884.544251][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 884.567891][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 884.567983][ C0] buffer_io_error: 10 callbacks suppressed [ 884.567996][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 884.568139][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 884.568203][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 884.568315][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 884.568379][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 884.568500][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 884.568564][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 884.568797][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 884.568861][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 884.569043][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 884.569106][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 884.569294][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 884.569356][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 884.569433][T32181] ldm_validate_partition_table(): Disk read failed. [ 884.569539][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 884.569603][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 884.569784][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 884.569848][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 884.570050][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 884.570314][T32181] Dev loop5: unable to read RDB block 0 [ 884.583293][T32181] loop5: unable to read partition table [ 884.583638][T32181] loop5: partition table beyond EOD, truncated [ 884.583674][T32181] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 884.683945][T32159] netlink: 192 bytes leftover after parsing attributes in process `syz.3.12524'. [ 884.683970][T32159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12524'. [ 884.683982][T32159] tc_dump_action: action bad kind [ 884.698333][T32065] usb 4-1: USB disconnect, device number 87 [ 885.546405][ T5743] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 885.719882][ T5743] usb 2-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 885.719917][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.655305][T32261] netlink: 'syz.0.12570': attribute type 10 has an invalid length. [ 886.655333][T32261] netlink: 'syz.0.12570': attribute type 4 has an invalid length. [ 886.655348][T32261] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12570'. [ 886.666192][T32261] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 887.154678][ T5743] usb 2-1: 1:1: cannot set freq 48000 to ep 0x81 [ 887.765764][T32290] CIFS: bad ip= option (1270.0.1) [ 887.766402][T32290] CIFS: Attempting to mount (null) [ 887.945886][ T5743] usb 2-1: USB disconnect, device number 78 [ 888.168385][T32296] misc userio: Begin command sent, but we're already running [ 888.551470][T32290] CIFS: VFS: Error connecting to socket. Aborting operation. [ 888.551532][T32290] CIFS: VFS: cifs_mount failed w/return code = -111 [ 889.515218][T32331] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.541765][ T37] audit: type=1400 audit(1096.716:416): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=32336 comm="syz.1.12604" daddr=::ffff:172.20.20.32 dest=20003 [ 890.743662][T32368] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.12618'. [ 890.806473][T32367] i2c i2c-0: new_device: Can't parse I2C address [ 896.120841][T32512] sctp: [Deprecated]: syz.0.12679 (pid 32512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 896.120841][T32512] Use struct sctp_sack_info instead [ 897.968320][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 898.888920][T32579] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12714'. [ 898.925981][T32573] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 899.828553][ T5586] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 900.019570][ T5586] usb 4-1: Using ep0 maxpacket: 16 [ 900.037007][ T5586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.037047][ T5586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.037072][ T5586] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 900.037119][ T5586] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 900.037143][ T5586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.114363][ T5586] usb 4-1: config 0 descriptor?? [ 900.575513][ T5586] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 900.599168][ T5586] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 900.599207][ T5586] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 900.599234][ T5586] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 900.599260][ T5586] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 900.599287][ T5586] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 900.599313][ T5586] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 900.599340][ T5586] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 900.599366][ T5586] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 900.599392][ T5586] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 900.599418][ T5586] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 900.811708][ T5586] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 900.811733][ T5586] microsoft 0003:045E:07DA.000E: no inputs found [ 900.811742][ T5586] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 901.057334][ T8085] usb 4-1: USB disconnect, device number 88 [ 901.220958][T32636] fido_id[32636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 902.493486][T25856] block nbd0: Receive control failed (result -32) [ 902.516831][ T5636] block nbd0: Receive control failed (result -32) [ 903.427776][ T37] audit: type=1326 audit(1109.521:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32685 comm="syz.4.12763" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f1fe8e0d9 code=0x0 [ 903.839046][ T37] audit: type=1326 audit(1109.909:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32703 comm="syz.3.12773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 903.839780][ T37] audit: type=1326 audit(1109.909:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32703 comm="syz.3.12773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 903.842678][ T37] audit: type=1326 audit(1109.909:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32703 comm="syz.3.12773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 903.843205][ T37] audit: type=1326 audit(1109.918:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32703 comm="syz.3.12773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 903.869456][ T37] audit: type=1326 audit(1109.936:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32703 comm="syz.3.12773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 903.869514][ T37] audit: type=1326 audit(1109.936:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32703 comm="syz.3.12773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 903.869559][ T37] audit: type=1326 audit(1109.936:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32703 comm="syz.3.12773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 903.878234][ T37] audit: type=1326 audit(1109.936:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32703 comm="syz.3.12773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 903.878287][ T37] audit: type=1326 audit(1109.946:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32703 comm="syz.3.12773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 903.931321][T32704] device-mapper: ioctl: Invalid ioctl structure: name o, dev 6f70796d00000000 [ 904.580242][ T5586] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 904.756033][ T5586] usb 2-1: Using ep0 maxpacket: 32 [ 904.759230][ T5586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.759265][ T5586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.759381][ T5586] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 904.759408][ T5586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.835320][ T5586] usb 2-1: config 0 descriptor?? [ 905.363137][ T5586] ft260 0003:0403:6030.000F: item fetching failed at offset 0/2 [ 905.367606][ T5586] ft260 0003:0403:6030.000F: failed to parse HID [ 905.403178][ T5586] ft260 0003:0403:6030.000F: probe with driver ft260 failed with error -22 [ 905.548615][T32764] netlink: Invalid conntrack timeout [ 905.548651][T32764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 905.648640][ T8085] usb 2-1: USB disconnect, device number 79 [ 906.742252][ T333] tipc: Started in network mode [ 906.742288][ T333] tipc: Node identity 0010000000000000002, cluster identity 1 [ 908.245951][ T394] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 908.245951][ T394] The task syz.1.12846 (394) triggered the difference, watch for misbehavior. [ 908.671986][ T407] loop4: detected capacity change from 0 to 7 [ 908.779468][ T407] Dev loop4: unable to read RDB block 7 [ 908.779507][ T407] loop4: AHDI p1 p2 [ 908.779530][ T407] loop4: partition table partially beyond EOD, truncated [ 908.780575][ T407] loop4: p1 start 1835360114 is beyond EOD, truncated [ 909.363791][ T422] ima: policy update failed [ 909.364258][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 909.364273][ T37] audit: type=1802 audit(1115.001:437): pid=422 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.0.12861" res=0 errno=0 [ 909.558388][ T421] geneve0: entered promiscuous mode [ 909.922051][ T445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12871'. [ 910.346005][ T458] 9p: Bad value for 'rfdno' [ 910.597055][ T466] kvm: user requested TSC rate below hardware speed [ 911.373462][ T496] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 911.818402][ T37] audit: type=1326 audit(1117.262:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=511 comm="syz.4.12896" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f1fe8e0d9 code=0x0 [ 912.272339][ T37] audit: type=1400 audit(1117.612:439): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="%${" object="_" requested=w pid=524 comm="syz.0.12902" daddr=fe80::aa dest=3618 netif=wpan0 [ 913.076183][ T548] Invalid logical block size (120) [ 915.541367][T32070] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 915.701299][T32070] usb 4-1: Using ep0 maxpacket: 16 [ 915.704737][T32070] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.704800][T32070] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 915.704827][T32070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.763870][T32070] usb 4-1: config 0 descriptor?? [ 916.002204][ T621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.003449][ T621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.012379][ T8085] usb 4-1: USB disconnect, device number 89 [ 916.492375][ T662] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12958'. [ 919.381646][ T760] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 919.403584][ T752] bridge0: port 1(vlan2) entered blocking state [ 919.403743][ T752] bridge0: port 1(vlan2) entered disabled state [ 919.403966][ T752] vlan2: entered allmulticast mode [ 919.404002][ T752] syz_tun: entered allmulticast mode [ 919.455943][ T752] vlan2: entered promiscuous mode [ 919.455969][ T752] syz_tun: entered promiscuous mode [ 919.791635][ T771] type: 10 invalid [ 919.904457][ T778] loop5: detected capacity change from 0 to 7 [ 919.954624][ T778] Dev loop5: unable to read RDB block 7 [ 919.954673][ T778] loop5: unable to read partition table [ 919.954924][ T778] loop5: partition table beyond EOD, truncated [ 919.954969][ T778] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 920.348220][ T778] Dev loop5: unable to read RDB block 7 [ 920.348266][ T778] loop5: unable to read partition table [ 920.348510][ T778] loop5: partition table beyond EOD, truncated [ 920.348532][ T778] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 920.527252][ T798] smc: adding net device syzkaller1 with user defined pnetid SYZ0 [ 920.935390][ T795] smc: removing net device syzkaller1 with user defined pnetid SYZ0 [ 921.231607][ T830] loop6: detected capacity change from 0 to 1 [ 921.289639][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 921.289720][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 921.321854][ T37] audit: type=1400 audit(1126.026:440): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=831 comm="syz.3.13033" dest=20002 [ 921.440274][ T830] Dev loop6: unable to read RDB block 1 [ 921.440329][ T830] loop6: unable to read partition table [ 921.440568][ T830] loop6: partition table beyond EOD, truncated [ 921.440607][ T830] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 921.520008][ C1] blk_print_req_error: 11 callbacks suppressed [ 921.520031][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 924.979923][ T934] Bluetooth: MGMT ver 1.23 [ 925.783455][ T933] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 925.786034][ T933] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 926.693816][ T172] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.693859][ T172] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.057606][ T933] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 927.059471][ T933] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 927.179750][ T5642] Bluetooth: hci0: command 0x0405 tx timeout [ 927.179966][ T5636] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 927.353386][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 927.467157][ T933] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 927.467318][ T933] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 927.577167][ T933] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 928.383306][ T172] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 928.383347][ T172] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.262722][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 929.408273][ T172] bridge0: port 4(netdevsim1) entered disabled state [ 929.558206][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 929.606769][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 929.618753][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 929.620720][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 929.679576][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 929.681631][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 929.694356][ T5642] Bluetooth: hci0: command 0x0405 tx timeout [ 930.647185][ T172] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 930.647292][ T172] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 930.664628][ T172] bridge0: port 4(netdevsim1) entered disabled state [ 930.949837][ T1075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13123'. [ 931.013107][ T1085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13123'. [ 931.181472][ T172] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 931.181512][ T172] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.520356][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 931.707858][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 931.940600][T32065] kernel read not supported for file /video9 (pid: 32065 comm: kworker/0:6) [ 931.951735][ T5636] Bluetooth: hci0: command 0x0405 tx timeout [ 932.311203][ T5636] Bluetooth: hci4: command tx timeout [ 932.766621][ T172] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 932.766660][ T172] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.387942][ T1031] virt_wifi0 speed is unknown, defaulting to 1000 [ 934.177943][ T1182] cifs: Bad value for 'source' [ 934.215060][ T5636] Bluetooth: hci0: command 0x0405 tx timeout [ 934.573572][ T5636] Bluetooth: hci4: command tx timeout [ 934.723266][ T37] audit: type=1326 audit(1138.398:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1197 comm="syz.0.13164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3787e0d9 code=0x7ffc0000 [ 934.723325][ T37] audit: type=1326 audit(1138.398:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1197 comm="syz.0.13164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3787e0d9 code=0x7ffc0000 [ 934.734497][ T37] audit: type=1326 audit(1138.407:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1197 comm="syz.0.13164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3787e0d9 code=0x7ffc0000 [ 934.734558][ T37] audit: type=1326 audit(1138.407:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1197 comm="syz.0.13164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3787e0d9 code=0x7ffc0000 [ 934.734606][ T37] audit: type=1326 audit(1138.407:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1197 comm="syz.0.13164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdc3787e0d9 code=0x7ffc0000 [ 934.734653][ T37] audit: type=1326 audit(1138.407:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1197 comm="syz.0.13164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3787e0d9 code=0x7ffc0000 [ 934.734702][ T37] audit: type=1326 audit(1138.407:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1197 comm="syz.0.13164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3787e0d9 code=0x7ffc0000 [ 934.734751][ T37] audit: type=1326 audit(1138.407:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1197 comm="syz.0.13164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3787e0d9 code=0x7ffc0000 [ 934.734799][ T37] audit: type=1326 audit(1138.407:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1197 comm="syz.0.13164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc3787e0d9 code=0x7ffc0000 [ 934.734848][ T37] audit: type=1326 audit(1138.407:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1197 comm="syz.0.13164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3787e0d9 code=0x7ffc0000 [ 935.017031][ T5743] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 935.204003][ T5743] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 935.204038][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.257232][ T5743] usb 4-1: NFC: intf ffff88805f191000 id ffffffff8ebb9580 [ 935.451167][ T5743] nfcmrvl 4-1:1.0: NFC: registered with nci successfully [ 935.506267][ T1217] team0: Device ipvlan2 failed to register rx_handler [ 935.818512][ T5743] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 936.019332][ T5743] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.019364][ T5743] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 936.019387][ T5743] usb 2-1: config 1 has no interface number 0 [ 936.019437][ T5743] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 936.019467][ T5743] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 936.019496][ T5743] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 936.019532][ T5743] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 936.019560][ T5743] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 936.113602][ T5743] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 936.113636][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.113659][ T5743] usb 2-1: Product: syz [ 936.113674][ T5743] usb 2-1: Manufacturer: syz [ 936.113690][ T5743] usb 2-1: SerialNumber: syz [ 936.168057][ T1223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 936.341652][ T8085] usb 4-1: USB disconnect, device number 90 [ 936.379437][ T8085] usb 4-1: NFC: intf ffff88805f191000 [ 936.395690][ T1223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 936.653202][ T1223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 936.834279][ T5636] Bluetooth: hci4: command tx timeout [ 937.106205][ T1223] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 937.122830][ T5743] cdc_ncm 2-1:1.1: bind() failure [ 937.417172][ T5743] usb 2-1: USB disconnect, device number 80 [ 938.300806][ T1271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13191'. [ 938.711359][ T172] team_slave_1: left promiscuous mode [ 938.776876][ T172] bridge0: port 3(team_slave_1) entered disabled state [ 939.070394][ T5636] Bluetooth: hci4: command tx timeout [ 939.267575][ T172] bridge_slave_1: left allmulticast mode [ 939.267617][ T172] bridge_slave_1: left promiscuous mode [ 939.268998][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.788894][ T172] bridge_slave_0: left allmulticast mode [ 939.788936][ T172] bridge_slave_0: left promiscuous mode [ 939.790880][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.357066][ T172] pimreg: left allmulticast mode [ 940.357399][ T172] ip6tnl0: left allmulticast mode [ 947.431118][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.537515][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.598066][ T172] bond0 (unregistering): Released all slaves [ 947.662623][ T172] bond1 (unregistering): Released all slaves [ 948.362541][ T2249] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.387432][ T1407] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.389608][ T1450] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.389654][ T1450] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.474625][ T172] : left promiscuous mode [ 950.572069][ T37] kauditd_printk_skb: 55 callbacks suppressed [ 950.572089][ T37] audit: type=1400 audit(1153.021:506): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=1460 comm="syz.0.13274" daddr=::ffff:100.1.1.1 dest=20000 [ 951.263651][ T1439] nvme nvme0: rdma_resolve_addr failed (-19). [ 951.878524][ T172] tipc: Left network mode [ 952.728158][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.818206][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.876856][ T1031] bridge_slave_0: entered allmulticast mode [ 952.889580][ T1031] bridge_slave_0: entered promiscuous mode [ 953.151647][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 953.154499][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.154660][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.155387][ T1031] bridge_slave_1: entered allmulticast mode [ 953.189468][ T1031] bridge_slave_1: entered promiscuous mode [ 953.409850][ T172] IPVS: stopping backup sync thread 23949 ... [ 953.718794][ T1031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.663795][ T8085] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 955.688806][ T1031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.833180][ T8085] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.833219][ T8085] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.833244][ T8085] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 955.833291][ T8085] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 955.833317][ T8085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.858246][ T8085] usb 4-1: config 0 descriptor?? [ 956.439913][ T8085] plantronics 0003:047F:FFFF.0010: unbalanced collection at end of report description [ 956.582039][ T8085] plantronics 0003:047F:FFFF.0010: parse failed [ 956.582161][ T8085] plantronics 0003:047F:FFFF.0010: probe with driver plantronics failed with error -22 [ 956.645037][ T8085] usb 4-1: USB disconnect, device number 91 [ 956.940143][ T1552] loop8: detected capacity change from 0 to 7 [ 957.169361][ T1552] Dev loop8: unable to read RDB block 7 [ 957.173713][ T1552] loop8: unable to read partition table [ 957.173946][ T1552] loop8: partition table beyond EOD, truncated [ 957.173983][ T1552] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 957.387875][ T1031] team0: Port device team_slave_0 added [ 957.397885][ T1031] team0: Port device team_slave_1 added [ 957.575215][ T1031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.575234][ T1031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.575264][ T1031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.800155][ T822] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 957.808946][ T1565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13313'. [ 957.809002][ T1565] netlink: 'syz.3.13313': attribute type 7 has an invalid length. [ 957.809018][ T1565] netlink: 'syz.3.13313': attribute type 8 has an invalid length. [ 957.809032][ T1565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13313'. [ 957.966322][ T822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 957.968269][ T822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.980090][ T822] usb 2-1: string descriptor 0 read error: -22 [ 957.980246][ T822] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 957.980282][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.299091][ T822] usb 2-1: USB disconnect, device number 81 [ 959.209868][ T37] audit: type=1326 audit(1160.992:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1583 comm="syz.1.13320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f07ee0d9 code=0x7ffc0000 [ 959.223242][ T37] audit: type=1326 audit(1160.992:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1583 comm="syz.1.13320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f07ee0d9 code=0x7ffc0000 [ 959.223294][ T37] audit: type=1326 audit(1161.001:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1583 comm="syz.1.13320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f07ee0d9 code=0x7ffc0000 [ 959.223661][ T37] audit: type=1326 audit(1161.001:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1583 comm="syz.1.13320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fb2f07ee0d9 code=0x7ffc0000 [ 959.223972][ T37] audit: type=1326 audit(1161.001:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1583 comm="syz.1.13320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f07ee0d9 code=0x7ffc0000 [ 959.226825][ T37] audit: type=1326 audit(1161.001:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1583 comm="syz.1.13320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f07ee0d9 code=0x7ffc0000 [ 959.226871][ T37] audit: type=1326 audit(1161.001:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1583 comm="syz.1.13320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f07ee0d9 code=0x7ffc0000 [ 959.227650][ T37] audit: type=1326 audit(1161.001:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1583 comm="syz.1.13320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb2f07ee0d9 code=0x7ffc0000 [ 959.227911][ T37] audit: type=1326 audit(1161.001:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1583 comm="syz.1.13320" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb2f07ee0d9 code=0x7ffc0000 [ 959.455587][ T1031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.455601][ T1031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.455618][ T1031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.510121][ T1565] erspan0: entered promiscuous mode [ 959.512062][ T1565] gretap0: entered promiscuous mode [ 959.526263][ T1565] gretap0: left promiscuous mode [ 959.593213][ T1565] erspan0: left promiscuous mode [ 960.213433][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 960.534623][ T1605] sctp: [Deprecated]: syz.1.13327 (pid 1605) Use of int in max_burst socket option deprecated. [ 960.534623][ T1605] Use struct sctp_assoc_value instead [ 961.614436][ T1625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13335'. [ 961.854424][ T1031] hsr_slave_0: entered promiscuous mode [ 961.862150][ T1031] hsr_slave_1: entered promiscuous mode [ 961.863428][ T1031] debugfs: 'hsr0' already exists in 'hsr' [ 961.863457][ T1031] Cannot create hsr debugfs directory [ 962.174954][ T1631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13339'. [ 962.536902][ T822] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 962.705390][ T822] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 962.705548][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.705573][ T822] usb 2-1: Product: syz [ 962.705589][ T822] usb 2-1: Manufacturer: syz [ 962.705606][ T822] usb 2-1: SerialNumber: syz [ 962.770703][ T822] usb 2-1: config 0 descriptor?? [ 962.824060][ T822] ch341 2-1:0.0: ch341-uart converter detected [ 963.580024][ T172] hsr_slave_0: left promiscuous mode [ 963.985653][ T172] hsr_slave_1: left promiscuous mode [ 964.007355][ T822] ch341-uart ttyUSB0: failed to read break control: -71 [ 964.007503][ T822] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 964.074200][ T822] usb 2-1: USB disconnect, device number 82 [ 964.090123][ T822] ch341 2-1:0.0: device disconnected [ 964.162925][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.162961][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.293423][ T5947] udevd[5947]: setting owner of /dev/bus/usb/002/082 to uid=0, gid=0 failed: No such file or directory [ 964.619716][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.619746][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.462559][ T1678] loop8: detected capacity change from 0 to 7 [ 965.476032][ T1678] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 965.506032][ T1678] loop8: p1 start 1401545024 is beyond EOD, truncated [ 965.506065][ T1678] loop8: p2 start 1879513920 is beyond EOD, truncated [ 965.506084][ T1678] loop8: p3 start 2737222337 is beyond EOD, truncated [ 965.506103][ T1678] loop8: p4 start 1399688579 is beyond EOD, truncated [ 965.506121][ T1678] loop8: p5 start 1878206208 is beyond EOD, truncated [ 965.506139][ T1678] loop8: p6 start 3948687153 is beyond EOD, truncated [ 965.506157][ T1678] loop8: p7 start 1740591330 is beyond EOD, truncated [ 965.506173][ T1678] loop8: p8 start 3394965712 is beyond EOD, truncated [ 965.506191][ T1678] loop8: p9 start 99510641 is beyond EOD, truncated [ 965.506209][ T1678] loop8: p10 start 1318944454 is beyond EOD, truncated [ 965.506228][ T1678] loop8: p11 start 1842501597 is beyond EOD, truncated [ 965.506246][ T1678] loop8: p12 start 4293143335 is beyond EOD, truncated [ 966.622834][ T172] dummy0: left allmulticast mode [ 966.654762][ T172] veth0_macvtap: left promiscuous mode [ 966.720506][ T172] veth1_vlan: left promiscuous mode [ 966.857143][ T172] veth0_vlan: left promiscuous mode [ 972.064472][ T5743] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 972.228796][ T5743] usb 2-1: not running at top speed; connect to a high speed hub [ 972.230379][ T5743] usb 2-1: config 0 has no interfaces? [ 972.234420][ T5743] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 972.234451][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 972.234475][ T5743] usb 2-1: Product: syz [ 972.234491][ T5743] usb 2-1: Manufacturer: syz [ 972.251268][ T5743] usb 2-1: config 0 descriptor?? [ 972.510822][ T5743] usb 2-1: USB disconnect, device number 83 [ 972.547743][ T172] team0 (unregistering): Port device team_slave_0 removed [ 973.714987][ T1709] syzkaller1: entered promiscuous mode [ 973.715020][ T1709] syzkaller1: entered allmulticast mode [ 975.586541][ T1827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13430'. [ 976.799724][ T1845] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 976.799944][ T1845] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 976.890857][ T1845] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 976.891197][ T1845] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 976.891327][ T1845] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 977.469561][ T1845] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 977.908439][ T37] audit: type=1400 audit(1178.217:516): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%${" requested=w pid=1863 comm="syz.3.13440" daddr=::ffff:172.20.20.170 [ 979.035651][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 979.035698][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 979.125036][ T5636] Bluetooth: hci4: command 0x0c1a tx timeout [ 979.125276][ T5636] Bluetooth: hci0: command 0x0405 tx timeout [ 979.413320][ T8085] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 979.428464][ T1884] vxcan0: tx address claim with different name [ 979.491956][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 979.583285][ T8085] usb 2-1: Using ep0 maxpacket: 8 [ 979.586460][ T8085] usb 2-1: unable to get BOS descriptor or descriptor too short [ 979.603697][ T8085] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 141, changing to 11 [ 979.603736][ T8085] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 979.603766][ T8085] usb 2-1: config 1 interface 0 has no altsetting 0 [ 979.604605][ T8085] usb 2-1: language id specifier not provided by device, defaulting to English [ 979.655953][ T8085] usb 2-1: New USB device found, idVendor=046d, idProduct=c08d, bcdDevice= 0.40 [ 979.655988][ T8085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.656010][ T8085] usb 2-1: Product: syz [ 979.656026][ T8085] usb 2-1: Manufacturer: ꓍翪늌Ἅ雽㹨뫿ࡣ⯬奾끼먑〡韦楄‟폆憙頬䋒毃漋轉餑ㆲ餴桀ᕫ豹絪⌍诚䪙↓쏰񜞶䒠ٞ謊頝욨ዡﾗ夿 [ 979.656060][ T8085] usb 2-1: SerialNumber: syz [ 980.204197][ T8085] usbhid 2-1:1.0: can't add hid device: -71 [ 980.204335][ T8085] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 980.275313][ T8085] usb 2-1: USB disconnect, device number 84 [ 981.375348][ T5642] Bluetooth: hci4: command 0x0c1a tx timeout [ 981.602619][ T1922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13462'. [ 981.602650][ T1922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13462'. [ 983.630514][ T5642] Bluetooth: hci4: command 0x0c1a tx timeout [ 983.665826][ T5743] libceph: connect (1)[c::]:6789 error -101 [ 983.736775][ T5743] libceph: mon0 (1)[c::]:6789 connect error [ 983.758226][ T5743] libceph: connect (1)[c::]:6789 error -101 [ 983.758451][ T5743] libceph: mon0 (1)[c::]:6789 connect error [ 983.928340][ T1942] ceph: No mds server is up or the cluster is laggy [ 984.075450][ T5743] libceph: connect (1)[c::]:6789 error -101 [ 984.075674][ T5743] libceph: mon0 (1)[c::]:6789 connect error [ 984.110769][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 984.114912][ T1031] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 984.455927][ T1031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 984.461066][ T1031] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 984.666069][ T5743] libceph: connect (1)[c::]:6789 error -101 [ 984.666293][ T5743] libceph: mon0 (1)[c::]:6789 connect error [ 984.989403][ T1031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 985.049440][ T1031] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 985.378654][ T1031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 985.381940][ T1031] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 986.047591][ T1031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 986.298341][ T1998] loop5: detected capacity change from 0 to 7 [ 986.381107][ T1998] Dev loop5: unable to read RDB block 7 [ 986.381143][ T1998] loop5: AHDI p1 p2 p3 [ 986.381166][ T1998] loop5: partition table partially beyond EOD, truncated [ 986.398031][ T1998] loop5: p1 start 1818582900 is beyond EOD, truncated [ 986.398060][ T1998] loop5: p3 start 335544320 is beyond EOD, truncated [ 987.398024][ T2017] loop8: detected capacity change from 0 to 7 [ 987.411657][ T2017] Dev loop8: unable to read RDB block 7 [ 987.411744][ T2017] loop8: unable to read partition table [ 987.411984][ T2017] loop8: partition table beyond EOD, truncated [ 987.412005][ T2017] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 987.884801][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.884884][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.599790][ T1031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.874385][ T1031] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.222781][T32070] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 989.260703][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.260856][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.514137][T32070] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 989.514178][T32070] usb 4-1: config 0 interface 0 has no altsetting 0 [ 989.514215][T32070] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 989.514241][T32070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.569888][T32070] usb 4-1: config 0 descriptor?? [ 989.571554][ T2047] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 990.154614][T32070] razer 0003:1532:010D.0011: unknown main item tag 0x0 [ 990.154654][T32070] razer 0003:1532:010D.0011: unknown main item tag 0x0 [ 990.154681][T32070] razer 0003:1532:010D.0011: unknown main item tag 0x0 [ 990.154706][T32070] razer 0003:1532:010D.0011: unknown main item tag 0x0 [ 990.154748][T32070] razer 0003:1532:010D.0011: unknown main item tag 0x0 [ 990.482267][T32070] razer 0003:1532:010D.0011: unknown main item tag 0x0 [ 990.482302][T32070] razer 0003:1532:010D.0011: unknown main item tag 0x0 [ 990.482329][T32070] razer 0003:1532:010D.0011: unknown main item tag 0x0 [ 990.482355][T32070] razer 0003:1532:010D.0011: unknown main item tag 0x0 [ 990.482381][T32070] razer 0003:1532:010D.0011: unknown main item tag 0x0 [ 990.554326][ T2249] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.554511][ T2249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.701879][T32070] razer 0003:1532:010D.0011: hidraw0: USB HID v7f.fd Device [HID 1532:010d] on usb-dummy_hcd.3-1/input0 [ 990.956406][T32070] usb 4-1: USB disconnect, device number 92 [ 991.328082][ T2071] fido_id[2071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 991.859911][ T2075] virt_wifi0 speed is unknown, defaulting to 1000 [ 992.093748][ T37] audit: type=1326 audit(1191.327:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2084 comm="syz.3.13523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 992.135941][ T37] audit: type=1326 audit(1191.364:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2084 comm="syz.3.13523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 992.138536][ T37] audit: type=1326 audit(1191.364:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2084 comm="syz.3.13523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 992.187011][ T37] audit: type=1326 audit(1191.419:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2084 comm="syz.3.13523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 992.187070][ T37] audit: type=1326 audit(1191.419:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2084 comm="syz.3.13523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 992.193821][ T37] audit: type=1326 audit(1191.428:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2084 comm="syz.3.13523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 992.193880][ T37] audit: type=1326 audit(1191.428:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2084 comm="syz.3.13523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 992.214262][ T37] audit: type=1326 audit(1191.428:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2084 comm="syz.3.13523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 992.214322][ T37] audit: type=1326 audit(1191.437:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2084 comm="syz.3.13523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 992.214369][ T37] audit: type=1326 audit(1191.437:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2084 comm="syz.3.13523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7ac8e0d9 code=0x7ffc0000 [ 994.738364][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 994.787999][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 994.802266][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 994.809394][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 994.813783][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 996.887569][ T2146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13544'. [ 997.397356][ T2156] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 997.507543][ T5642] Bluetooth: hci5: command tx timeout [ 999.217134][ T2150] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13546'. [ 999.307275][ T2114] virt_wifi0 speed is unknown, defaulting to 1000 [ 999.626949][ T2193] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 999.762061][ T5642] Bluetooth: hci5: command tx timeout [ 1002.012976][ T5642] Bluetooth: hci5: command tx timeout [ 1002.641656][ T822] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 1002.897040][ T822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1002.910791][ T822] usb 4-1: config 100 has an invalid interface number: 173 but max is 0 [ 1002.910823][ T822] usb 4-1: config 100 has no interface number 0 [ 1002.910874][ T822] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 1002.910902][ T822] usb 4-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 64468, setting to 8 [ 1002.910932][ T822] usb 4-1: config 100 interface 173 has no altsetting 0 [ 1003.005111][ T822] usb 4-1: string descriptor 0 read error: -22 [ 1003.005283][ T822] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 1003.005312][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.084722][ T2232] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1003.084845][ T2232] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1003.107702][ T822] metro_usb 4-1:100.173: Metrologic USB to Serial converter detected [ 1003.204314][ T822] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1003.669677][ T2232] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 1003.688314][ C1] metro-usb ttyUSB0: metrousb_read_int_callback - failed submitting interrupt in urb, error code=-1 [ 1003.727788][ T822] usb 4-1: USB disconnect, device number 93 [ 1003.761391][ T822] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1003.767424][ T822] metro_usb 4-1:100.173: device disconnected [ 1004.270871][ T5642] Bluetooth: hci5: command tx timeout [ 1006.216945][ T2269] binder: 2267:2269 ioctl c0306201 0 returned -14 [ 1011.976016][ T8085] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1012.139491][ T8085] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1012.140970][ T8085] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1012.141088][ T8085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1012.141109][ T8085] usb 2-1: SerialNumber: syz [ 1013.838573][T32070] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1014.069229][T32070] usb 4-1: Using ep0 maxpacket: 8 [ 1014.087852][T32070] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.087912][T32070] usb 4-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1014.087940][T32070] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1014.112834][T32070] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1014.112865][T32070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.112885][T32070] usb 4-1: Product: syz [ 1014.112899][T32070] usb 4-1: Manufacturer: syz [ 1014.112914][T32070] usb 4-1: SerialNumber: syz [ 1014.479761][T32070] cdc_ether 4-1:1.0: bad CDC descriptors [ 1014.500530][T32070] usb 4-1: USB disconnect, device number 94 [ 1014.578415][ T8085] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1014.628216][ T8085] usb 2-1: USB disconnect, device number 85 [ 1014.758961][ T8085] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 1017.203149][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.203289][ T2114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.203567][ T2114] bridge_slave_0: entered allmulticast mode [ 1017.380669][ T2114] bridge_slave_0: entered promiscuous mode [ 1017.558951][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.570570][ T2114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.570844][ T2114] bridge_slave_1: entered allmulticast mode [ 1017.624408][ T2114] bridge_slave_1: entered promiscuous mode [ 1017.967606][ T2495] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1018.371716][ T2114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.425985][ T2114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.181356][ T2114] team0: Port device team_slave_0 added [ 1019.331896][ T2515] netlink: 'syz.3.13670': attribute type 4 has an invalid length. [ 1020.703058][ T2114] team0: Port device team_slave_1 added [ 1021.012045][ T2535] bridge0: left promiscuous mode [ 1021.377461][ T2535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.533835][ T2535] team0: Port device bridge0 removed [ 1021.560364][ T2535] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1022.588373][ T2114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.588394][ T2114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.588422][ T2114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.484916][ T2114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.484939][ T2114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.484971][ T2114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.083209][ T2114] hsr_slave_0: entered promiscuous mode [ 1026.086864][ T2114] hsr_slave_1: entered promiscuous mode [ 1026.103886][ T2114] debugfs: 'hsr0' already exists in 'hsr' [ 1026.103918][ T2114] Cannot create hsr debugfs directory [ 1028.063589][ T66] bridge_slave_1: left allmulticast mode [ 1028.063629][ T66] bridge_slave_1: left promiscuous mode [ 1028.063911][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.865847][ T66] bridge_slave_0: left allmulticast mode [ 1030.865887][ T66] bridge_slave_0: left promiscuous mode [ 1030.866150][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.714819][ T5642] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1037.966302][T29900] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1038.072545][ T2745] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13748'. [ 1038.150766][T29900] usb 4-1: Using ep0 maxpacket: 32 [ 1038.153630][T29900] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1038.153663][T29900] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1038.153689][T29900] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1038.157701][T29900] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1038.157735][T29900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.157757][T29900] usb 4-1: Product: syz [ 1038.157786][T29900] usb 4-1: Manufacturer: syz [ 1038.157802][T29900] usb 4-1: SerialNumber: syz [ 1038.219763][T29900] usb 4-1: config 0 descriptor?? [ 1039.711312][T29900] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 1039.711363][T29900] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 1040.387831][ T31] usb 4-1: USB disconnect, device number 95 [ 1044.973822][ T2776] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(0) [ 1045.287326][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1045.398396][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1045.430331][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1045.749143][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1045.751017][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1048.179626][ T5642] Bluetooth: hci4: command tx timeout [ 1049.318656][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.436660][ T5642] Bluetooth: hci4: command tx timeout [ 1050.498752][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.852998][ T66] bond0 (unregistering): Released all slaves [ 1052.653255][ T5642] Bluetooth: hci4: command tx timeout [ 1054.113263][ T2745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.493762][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.493859][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.924911][ T5642] Bluetooth: hci4: command tx timeout [ 1055.623677][T32070] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1055.817820][T32070] usb 4-1: Using ep0 maxpacket: 8 [ 1055.831217][T32070] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1055.831279][T32070] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1055.831303][T32070] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1055.831330][T32070] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1055.831356][T32070] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1055.831401][T32070] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1055.831426][T32070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.425637][T32070] usb 4-1: usb_control_msg returned -32 [ 1056.425696][T32070] usbtmc 4-1:16.0: can't read capabilities [ 1056.732683][ T5742] usb 4-1: USB disconnect, device number 96 [ 1057.395566][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1057.553335][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1057.560794][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1057.675159][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1057.782417][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1059.039636][ T13] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.042919][ T12] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.042971][ T12] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.073900][ T12] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.815401][ T5642] Bluetooth: hci6: command tx timeout [ 1061.506154][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1061.666922][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1061.671524][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1062.301138][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1062.303029][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1063.060366][ T5642] Bluetooth: hci6: command tx timeout [ 1065.227167][ T5642] Bluetooth: hci2: command tx timeout [ 1065.324838][ T5642] Bluetooth: hci6: command tx timeout [ 1067.485571][ T5642] Bluetooth: hci2: command tx timeout [ 1067.571839][ T5642] Bluetooth: hci6: command tx timeout [ 1068.033992][ T2843] virt_wifi0 speed is unknown, defaulting to 1000 [ 1069.736114][ T5642] Bluetooth: hci2: command tx timeout [ 1072.033617][ T5636] Bluetooth: hci2: command tx timeout [ 1072.611226][ T2777] virt_wifi0 speed is unknown, defaulting to 1000 [ 1072.713174][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1074.851212][ T2898] virt_wifi0 speed is unknown, defaulting to 1000 [ 1086.295039][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1088.890214][ T66] hsr_slave_0: left promiscuous mode [ 1089.158836][ T66] hsr_slave_1: left promiscuous mode [ 1089.170317][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.604889][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.690512][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1102.977847][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1111.275696][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1111.387209][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1111.444083][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1111.490449][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1111.509228][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1113.936649][ T2843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.936798][ T2843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.937062][ T2843] bridge_slave_0: entered allmulticast mode [ 1113.959334][ T5636] Bluetooth: hci0: command tx timeout [ 1114.016507][ T2843] bridge_slave_0: entered promiscuous mode [ 1114.392990][ T2843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.393201][ T2843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.393476][ T2843] bridge_slave_1: entered allmulticast mode [ 1114.430132][ T2843] bridge_slave_1: entered promiscuous mode [ 1116.218594][ T5636] Bluetooth: hci0: command tx timeout [ 1118.468491][ T5642] Bluetooth: hci0: command tx timeout [ 1120.722806][ T5642] Bluetooth: hci0: command tx timeout [ 1121.112728][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.112813][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.644312][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.644447][ T2898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.644732][ T2898] bridge_slave_0: entered allmulticast mode [ 1121.693910][ T2898] bridge_slave_0: entered promiscuous mode [ 1122.409237][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.409373][ T2898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.409646][ T2898] bridge_slave_1: entered allmulticast mode [ 1122.438914][ T2898] bridge_slave_1: entered promiscuous mode [ 1122.957581][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1123.022240][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1123.073788][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1123.087391][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1123.093175][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1123.536143][ T2898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.672280][ T2898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.503143][ T5636] Bluetooth: hci4: command tx timeout [ 1127.422460][ T3266] virt_wifi0 speed is unknown, defaulting to 1000 [ 1127.747175][ T5636] Bluetooth: hci4: command tx timeout [ 1129.710262][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1129.768898][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1129.790378][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1129.826213][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1129.836182][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1130.017766][ T5642] Bluetooth: hci4: command tx timeout [ 1132.280906][ T5642] Bluetooth: hci4: command tx timeout [ 1133.230632][ T5642] Bluetooth: hci5: command tx timeout [ 1135.556593][ T5642] Bluetooth: hci5: command tx timeout [ 1135.672769][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1137.805556][ T5642] Bluetooth: hci5: command tx timeout [ 1140.060003][ T5642] Bluetooth: hci5: command tx timeout [ 1140.113919][ T3347] virt_wifi0 speed is unknown, defaulting to 1000 [ 1145.181423][ T3395] virt_wifi0 speed is unknown, defaulting to 1000 [ 1150.804292][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1151.838390][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.838527][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.838776][ T3266] bridge_slave_0: entered allmulticast mode [ 1151.976317][ T3266] bridge_slave_0: entered promiscuous mode [ 1152.236358][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.236588][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.236858][ T3266] bridge_slave_1: entered allmulticast mode [ 1152.304371][ T3266] bridge_slave_1: entered promiscuous mode [ 1153.276330][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.536284][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.232655][ T3266] team0: Port device team_slave_0 added [ 1158.528129][ T3266] team0: Port device team_slave_1 added [ 1159.921683][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1160.171230][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.171373][ T3347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.171602][ T3347] bridge_slave_0: entered allmulticast mode [ 1160.182126][ T3347] bridge_slave_0: entered promiscuous mode [ 1160.195356][ T3347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.217797][ T3347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.218090][ T3347] bridge_slave_1: entered allmulticast mode [ 1160.223386][ T3347] bridge_slave_1: entered promiscuous mode [ 1160.251942][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.251961][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.251998][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.566929][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.566950][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.567005][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.568844][ T3347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.001302][ T3347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.081407][ T3347] team0: Port device team_slave_0 added [ 1166.377048][ T3266] hsr_slave_0: entered promiscuous mode [ 1166.386509][ T3266] hsr_slave_1: entered promiscuous mode [ 1166.412650][ T3266] debugfs: 'hsr0' already exists in 'hsr' [ 1166.412683][ T3266] Cannot create hsr debugfs directory [ 1166.491358][ T3347] team0: Port device team_slave_1 added [ 1170.762111][ T3347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.762130][ T3347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.762160][ T3347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.763455][ T3395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.763590][ T3395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.763838][ T3395] bridge_slave_0: entered allmulticast mode [ 1170.890742][ T3395] bridge_slave_0: entered promiscuous mode [ 1171.206511][ T3347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.206533][ T3347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.206564][ T3347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1171.718562][ T3395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.718718][ T3395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.718952][ T3395] bridge_slave_1: entered allmulticast mode [ 1171.748323][ T3395] bridge_slave_1: entered promiscuous mode [ 1173.115106][ T3395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.592662][ T3395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.066042][ T3347] hsr_slave_0: entered promiscuous mode [ 1174.144176][ T3347] hsr_slave_1: entered promiscuous mode [ 1174.164897][ T3347] debugfs: 'hsr0' already exists in 'hsr' [ 1174.164929][ T3347] Cannot create hsr debugfs directory [ 1175.848100][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1175.902390][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1175.913970][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1175.968587][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1175.969702][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1176.060527][ T3395] team0: Port device team_slave_0 added [ 1176.351898][ T3395] team0: Port device team_slave_1 added [ 1178.484214][ T5636] Bluetooth: hci2: command tx timeout [ 1179.681098][ T3395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.681135][ T3395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.681164][ T3395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.842992][ T3395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.843012][ T3395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.843043][ T3395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.773365][ T5636] Bluetooth: hci2: command tx timeout [ 1183.032512][ T3395] hsr_slave_0: entered promiscuous mode [ 1183.032643][ T5642] Bluetooth: hci2: command tx timeout [ 1183.057043][ T3395] hsr_slave_1: entered promiscuous mode [ 1183.135091][ T3395] debugfs: 'hsr0' already exists in 'hsr' [ 1183.135124][ T3395] Cannot create hsr debugfs directory [ 1185.237117][ T5642] Bluetooth: hci2: command tx timeout [ 1187.678614][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1187.680685][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.680766][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1191.109655][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1191.173777][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1191.194621][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1191.215215][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1191.305371][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1193.936168][ T5642] Bluetooth: hci0: command tx timeout [ 1195.759015][ T3710] virt_wifi0 speed is unknown, defaulting to 1000 [ 1196.163063][ T5642] Bluetooth: hci0: command tx timeout [ 1197.297559][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1197.480407][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1197.507147][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1197.605280][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1197.606245][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1198.417239][ T5642] Bluetooth: hci0: command tx timeout [ 1199.978338][ T5642] Bluetooth: hci6: command tx timeout [ 1200.677223][ T5642] Bluetooth: hci0: command tx timeout [ 1202.297672][ T5642] Bluetooth: hci6: command tx timeout [ 1204.498013][ T5642] Bluetooth: hci6: command tx timeout [ 1206.839680][ T5642] Bluetooth: hci6: command tx timeout [ 1212.949254][ T3787] virt_wifi0 speed is unknown, defaulting to 1000 [ 1217.345162][ T3826] virt_wifi0 speed is unknown, defaulting to 1000 [ 1224.225952][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.226097][ T3710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.226851][ T3710] bridge_slave_0: entered allmulticast mode [ 1224.255559][ T3710] bridge_slave_0: entered promiscuous mode [ 1225.067469][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.067614][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.067921][ T3710] bridge_slave_1: entered allmulticast mode [ 1225.136504][ T3710] bridge_slave_1: entered promiscuous mode [ 1227.632208][ T3710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.176131][ T3710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.671967][ T3710] team0: Port device team_slave_0 added [ 1231.120750][ T3710] team0: Port device team_slave_1 added [ 1232.736874][ T3710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.736893][ T3710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.736923][ T3710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.224651][ T3710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.224671][ T3710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.224701][ T3710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.754678][ T3787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.755496][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.755804][ T3787] bridge_slave_0: entered allmulticast mode [ 1236.774179][ T3787] bridge_slave_0: entered promiscuous mode [ 1237.415548][ T3710] hsr_slave_0: entered promiscuous mode [ 1237.429754][ T3710] hsr_slave_1: entered promiscuous mode [ 1237.433725][ T3710] debugfs: 'hsr0' already exists in 'hsr' [ 1237.433755][ T3710] Cannot create hsr debugfs directory [ 1237.434220][ T3787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.434352][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.434592][ T3787] bridge_slave_1: entered allmulticast mode [ 1237.451945][ T3787] bridge_slave_1: entered promiscuous mode [ 1238.377536][ T3787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.279084][ T3787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.752706][ T3826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.752849][ T3826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.753482][ T3826] bridge_slave_0: entered allmulticast mode [ 1239.872717][ T3826] bridge_slave_0: entered promiscuous mode [ 1239.982566][ T3826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.982724][ T3826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.982946][ T3826] bridge_slave_1: entered allmulticast mode [ 1240.030910][ T3826] bridge_slave_1: entered promiscuous mode [ 1240.070851][ T3787] team0: Port device team_slave_0 added [ 1240.590610][ T3787] team0: Port device team_slave_1 added [ 1241.488484][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1241.554019][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1241.626717][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1241.653984][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1241.681729][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1242.781604][ T3826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.993806][ T3826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.994839][ T3787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.994855][ T3787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.994884][ T3787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.115124][ T5642] Bluetooth: hci4: command tx timeout [ 1244.208427][ T3787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.208447][ T3787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.208477][ T3787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.922088][ T3826] team0: Port device team_slave_0 added [ 1244.960961][ T3826] team0: Port device team_slave_1 added [ 1246.371657][ T5642] Bluetooth: hci4: command tx timeout [ 1248.624062][ T5642] Bluetooth: hci4: command tx timeout [ 1250.917652][ T5642] Bluetooth: hci4: command tx timeout [ 1252.480507][ T3826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.480528][ T3826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.480556][ T3826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.504580][ T3826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.504598][ T3826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.504624][ T3826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.406822][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1254.406903][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1254.634795][ T3826] hsr_slave_0: entered promiscuous mode [ 1254.718604][ T3826] hsr_slave_1: entered promiscuous mode [ 1254.719703][ T3826] debugfs: 'hsr0' already exists in 'hsr' [ 1254.719726][ T3826] Cannot create hsr debugfs directory [ 1254.968863][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1255.541507][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1255.712895][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1255.743665][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1255.793527][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1257.245325][ T4112] virt_wifi0 speed is unknown, defaulting to 1000 [ 1258.086327][ T5642] Bluetooth: hci2: command tx timeout [ 1260.330323][ T5642] Bluetooth: hci2: command tx timeout [ 1262.584475][ T5642] Bluetooth: hci2: command tx timeout [ 1263.737044][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1264.153705][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1264.164751][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1264.168773][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1264.171679][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1264.843533][ T5636] Bluetooth: hci2: command tx timeout [ 1267.378855][ T5636] Bluetooth: hci0: command tx timeout [ 1269.611476][ T5636] Bluetooth: hci0: command tx timeout [ 1271.897717][ T5636] Bluetooth: hci0: command tx timeout [ 1274.117612][ T5636] Bluetooth: hci0: command tx timeout [ 1275.800928][ T4184] virt_wifi0 speed is unknown, defaulting to 1000 [ 1280.209697][ T4225] virt_wifi0 speed is unknown, defaulting to 1000 [ 1282.844757][ T4112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.845000][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.845337][ T4112] bridge_slave_0: entered allmulticast mode [ 1282.859068][ T4112] bridge_slave_0: entered promiscuous mode [ 1282.979315][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.979468][ T4112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.979752][ T4112] bridge_slave_1: entered allmulticast mode [ 1282.991753][ T4112] bridge_slave_1: entered promiscuous mode [ 1284.616253][ T4112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.040201][ T4112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.661339][ T4112] team0: Port device team_slave_0 added [ 1287.021031][ T4112] team0: Port device team_slave_1 added [ 1289.538035][ T4112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.538056][ T4112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.538087][ T4112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.485912][ T4112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.485933][ T4112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.485965][ T4112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.240718][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.240870][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.241181][ T4184] bridge_slave_0: entered allmulticast mode [ 1294.265734][ T4184] bridge_slave_0: entered promiscuous mode [ 1294.530200][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.530354][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.530630][ T4184] bridge_slave_1: entered allmulticast mode [ 1294.553767][ T4184] bridge_slave_1: entered promiscuous mode [ 1295.470113][ T4112] hsr_slave_0: entered promiscuous mode [ 1295.475157][ T4112] hsr_slave_1: entered promiscuous mode [ 1295.477907][ T4112] debugfs: 'hsr0' already exists in 'hsr' [ 1295.477937][ T4112] Cannot create hsr debugfs directory [ 1296.789802][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.442990][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.493387][ T4184] team0: Port device team_slave_0 added [ 1301.193754][ T4184] team0: Port device team_slave_1 added [ 1302.983702][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.983721][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.983752][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.184031][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.184051][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.184081][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1304.063842][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.064088][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.064363][ T4225] bridge_slave_0: entered allmulticast mode [ 1304.089596][ T4225] bridge_slave_0: entered promiscuous mode [ 1304.317546][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.317691][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.317980][ T4225] bridge_slave_1: entered allmulticast mode [ 1304.360221][ T4225] bridge_slave_1: entered promiscuous mode [ 1306.330493][ T4184] hsr_slave_0: entered promiscuous mode [ 1306.409266][ T4184] hsr_slave_1: entered promiscuous mode [ 1306.423353][ T4184] debugfs: 'hsr0' already exists in 'hsr' [ 1306.423384][ T4184] Cannot create hsr debugfs directory [ 1306.474274][ T4225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.619844][ T4225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.776152][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1309.001326][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1309.015189][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1309.376815][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1309.382014][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1310.805241][ T4225] team0: Port device team_slave_0 added [ 1311.252017][ T4225] team0: Port device team_slave_1 added [ 1312.097825][ T5642] Bluetooth: hci5: command tx timeout [ 1313.132333][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.132350][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.132375][ T4225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.315525][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.315545][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.315576][ T4225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.002030][ T5642] Bluetooth: hci5: command tx timeout [ 1317.213431][ T5642] Bluetooth: hci5: command tx timeout [ 1319.814590][ T5642] Bluetooth: hci5: command tx timeout [ 1320.869023][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1320.869102][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1322.748138][ T4225] hsr_slave_0: entered promiscuous mode [ 1322.796209][ T4225] hsr_slave_1: entered promiscuous mode [ 1322.800115][ T4225] debugfs: 'hsr0' already exists in 'hsr' [ 1322.800166][ T4225] Cannot create hsr debugfs directory [ 1323.672259][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1323.772144][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1323.777260][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1323.825298][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1323.837911][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1326.231273][ T5642] Bluetooth: hci4: command tx timeout [ 1327.489410][ T4459] virt_wifi0 speed is unknown, defaulting to 1000 [ 1328.233729][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1328.296213][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1328.309170][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1328.333196][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1328.351491][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1328.485840][ T5636] Bluetooth: hci4: command tx timeout [ 1330.775469][ T5642] Bluetooth: hci4: command tx timeout [ 1330.926710][ T5642] Bluetooth: hci6: command tx timeout [ 1333.006223][ T5642] Bluetooth: hci4: command tx timeout [ 1333.193394][ T5642] Bluetooth: hci6: command tx timeout [ 1335.433731][ T5642] Bluetooth: hci6: command tx timeout [ 1337.677449][ T5642] Bluetooth: hci6: command tx timeout [ 1343.070257][ T4520] virt_wifi0 speed is unknown, defaulting to 1000 [ 1345.579360][ T4552] virt_wifi0 speed is unknown, defaulting to 1000 [ 1350.997819][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.998053][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.002660][ T4459] bridge_slave_0: entered allmulticast mode [ 1351.014339][ T4459] bridge_slave_0: entered promiscuous mode [ 1354.025704][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.025865][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.026202][ T4459] bridge_slave_1: entered allmulticast mode [ 1354.032659][ T4459] bridge_slave_1: entered promiscuous mode [ 1355.832083][ T4459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.874123][ T4459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.013205][ T38] INFO: task syz-executor:3266 blocked for more than 143 seconds. [ 1359.013237][ T38] Tainted: G L syzkaller #0 [ 1359.013250][ T38] Blocked by coredump. [ 1359.013257][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1359.013267][ T38] task:syz-executor state:D stack:18248 pid:3266 tgid:3266 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1359.013328][ T38] Call Trace: [ 1359.013336][ T38] [ 1359.013351][ T38] __schedule+0x16dc/0x5500 [ 1359.013420][ T38] ? __pfx___schedule+0x10/0x10 [ 1359.013469][ T38] rt_mutex_schedule+0x76/0xf0 [ 1359.013497][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 1359.013551][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1359.013579][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1359.013605][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1359.013643][ T38] ? rcu_barrier+0x4c/0x530 [ 1359.013681][ T38] ? rcu_barrier+0x4c/0x530 [ 1359.013718][ T38] ? rcu_barrier+0x4c/0x530 [ 1359.013747][ T38] mutex_lock_nested+0x168/0x1d0 [ 1359.013769][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1359.013800][ T38] rcu_barrier+0x4c/0x530 [ 1359.013843][ T38] netdev_run_todo+0x2ff/0x10d0 [ 1359.013880][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 1359.013906][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1359.013937][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 1359.013960][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1359.014000][ T38] ? netdev_state_change+0x1bc/0x210 [ 1359.014031][ T38] tun_chr_close+0x13f/0x1c0 [ 1359.014052][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1359.014075][ T38] __fput+0x42a/0xa80 [ 1359.014110][ T38] task_work_run+0x1d9/0x270 [ 1359.014151][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1359.014176][ T38] ? do_exit+0x735/0x2360 [ 1359.014194][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1359.014221][ T38] ? put_net+0x191/0x260 [ 1359.014247][ T38] ? do_exit+0x735/0x2360 [ 1359.014273][ T38] do_exit+0x73a/0x2360 [ 1359.014294][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1359.014324][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1359.014362][ T38] ? __pfx_do_exit+0x10/0x10 [ 1359.014396][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1359.014420][ T38] ? rt_spi[ 1359.014420][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1359.014454][ T38] ? rt_spin_unlock+0x157/0x200 [ 1359.014482][ T38] do_group_exit+0x22d/0x2f0 [ 1359.014505][ T38] ? rt_spin_unlock+0x163/0x200 [ 1359.014534][ T38] get_signal+0x121b/0x12c0 [ 1359.014596][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 1359.014633][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1359.014663][ T38] ? kmem_cache_free+0x526/0x6c0 [ 1359.014712][ T38] exit_to_user_mode_loop+0x104/0x730 [ 1359.014736][ T38] ? rcu_is_watching+0x15/0xb0 [ 1359.014766][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.014792][ T38] do_syscall_64+0x353/0x580 [ 1359.014826][ T38] ? clear_bhb_loop+0x40/0x90 [ 1359.014855][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.014878][ T38] RIP: 0033:0x7f5735ebe90e [ 1359.014899][ T38] RSP: 002b:00007ffef8f5c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1359.014922][ T38] RAX: 0000000000000068 RBX: 0000555562971500 RCX: 00007f5735ebe90e [ 1359.014938][ T38] RDX: 0000000000000068 RSI: 00007f5736cb4670 RDI: 0000000000000003 [ 1359.014953][ T38] RBP: 0000000000000001 R08: 00007ffef8f5c144 R09: 000000000000000c [ 1359.014967][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1359.014982][ T38] R13: 0000000000000000 R14: 00007f5736cb4670 R15: 0000000000000000 [ 1359.015017][ T38] [ 1359.015062][ T38] [ 1359.015062][ T38] Showing all locks held in the system: [ 1359.015072][ T38] 7 locks held by kworker/1:0/31: [ 1359.015087][ T38] 1 lock held by khungtaskd/38: [ 1359.015099][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1359.015159][ T38] 5 locks held by kworker/u8:4/66: [ 1359.015172][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1359.015229][ T38] #1: ffffc9000151fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1359.015285][ T38] #2: ffffffff8f5a3a40 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1359.015340][ T38] #3: ffff888021b51978 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 1359.015390][ T38] #4: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1359.015450][ T38] 7 locks held by kworker/u8:6/150: [ 1359.015468][ T38] 6 locks held by kworker/u8:11/1450: [ 1359.015481][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1359.015538][ T38] #1: ffffc90006787c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1359.015605][ T38] #2: ffff88803a80c310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1359.015672][ T38] #3: ffff8880371d4520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1359.015733][ T38] #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1359.015784][ T38] #5: ffff8880b8636d10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0 [ 1359.015848][ T38] 1 lock held by dhcpcd/5257: [ 1359.015861][ T38] 2 locks held by getty/5353: [ 1359.015874][ T38] #0: ffff88823bed00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1359.015931][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1359.015982][ T38] 9 locks held by syz-executor/5633: [ 1359.015995][ T38] 1 lock held by syz-executor/5635: [ 1359.016008][ T38] 3 locks held by kworker/0:4/5648: [ 1359.016025][ T38] 3 locks held by kworker/u8:3/31547: [ 1359.016038][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1359.016093][ T38] #1: ffffc9000e1c7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1359.016149][ T38] #2: ffffffff8f5b25f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1359.016213][ T38] 7 locks held by kworker/u8:13/2821: [ 1359.016227][ T38] 1 lock held by syz-executor/3266: [ 1359.016239][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1359.016298][ T38] 1 lock held by syz-executor/3347: [ 1359.016310][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1359.016369][ T38] 1 lock held by syz-executor/3395: [ 1359.016382][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1359.016461][ T38] 1 lock held by syz-executor/3710: [ 1359.016474][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1359.016533][ T38] 1 lock held by syz-executor/3787: [ 1359.016554][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1359.016614][ T38] 3 locks held by kworker/u8:14/3796: [ 1359.016625][ T38] 1 lock held by syz-executor/3826: [ 1359.016637][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1359.220190][ T4459] team0: Port device team_slave_0 added [ 1359.250403][ T38] 1 lock held by syz-executor/4112: [ 1359.250423][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1359.250486][ T38] 1 lock held by syz-executor/4184: [ 1359.250498][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1359.250552][ T38] 1 lock held by syz-executor/4225: [ 1359.250563][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1359.250617][ T38] 1 lock held by syz-executor/4459: [ 1359.250628][ T38] #0: ffffffff8f5b25f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1359.250679][ T38] 3 locks held by syz-executor/4552: [ 1359.250692][ T38] 1 lock held by dhcpcd/4712: [ 1359.250703][ T38] #0: ffff88803cbae358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 1359.250750][ T38] 1 lock held by dhcpcd/4714: [ 1359.250761][ T38] 1 lock held by kworker/u8:2/4715: [ 1359.250774][ T38] [ 1359.250780][ T38] ============================================= [ 1359.250780][ T38] [ 1359.250789][ T38] NMI backtrace for cpu 1 [ 1359.250806][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1359.250833][ T38] Tainted: [L]=SOFTLOCKUP [ 1359.250840][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1359.250851][ T38] Call Trace: [ 1359.250860][ T38] [ 1359.250869][ T38] dump_stack_lvl+0xe8/0x150 [ 1359.250903][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1359.250927][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1359.250958][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1359.250984][ T38] sys_info+0x135/0x170 [ 1359.251003][ T38] watchdog+0xfd7/0x1030 [ 1359.251029][ T38] ? watchdog+0x1c7/0x1030 [ 1359.251063][ T38] kthread+0x388/0x470 [ 1359.251092][ T38] ? __pfx_watchdog+0x10/0x10 [ 1359.251108][ T38] ? __pfx_kthread+0x10/0x10 [ 1359.251137][ T38] ret_from_fork+0x514/0xb70 [ 1359.251169][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1359.251198][ T38] ? __switch_to+0xc89/0x1420 [ 1359.251225][ T38] ? __pfx_kthread+0x10/0x10 [ 1359.251254][ T38] ret_from_fork_asm+0x1a/0x30 [ 1359.251289][ T38] [ 1359.251297][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1359.251322][ C0] NMI backtrace for cpu 0 [ 1359.251341][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1359.251365][ C0] Tainted: [L]=SOFTLOCKUP [ 1359.251371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1359.251381][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1359.251408][ C0] Code: e8 be 2e 70 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f a2 d9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a 25 f2 05 cc 44 89 f9 80 e1 07 [ 1359.251422][ C0] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 1359.251438][ C0] RAX: 1ffffffff33c9c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1359.251450][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1359.251461][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1359.251473][ C0] R10: dffffc0000000000 R11: ffffffff8555aa50 R12: dffffc0000000000 [ 1359.251485][ C0] R13: 0000000000000000 R14: ffffffff99e4e300 R15: 0000000000000000 [ 1359.251497][ C0] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 1359.251512][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1359.251524][ C0] CR2: 00007f7664314e9c CR3: 00000000298d8000 CR4: 00000000003526f0 [ 1359.251547][ C0] Call Trace: [ 1359.251554][ C0] [ 1359.251562][ C0] wait_for_lsr+0x190/0x300 [ 1359.251589][ C0] serial8250_console_write+0x113a/0x1b40 [ 1359.251618][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1359.251642][ C0] ? console_flush_one_record+0xfa/0xb50 [ 1359.251662][ C0] ? console_flush_one_record+0x472/0xb50 [ 1359.251681][ C0] console_flush_one_record+0x642/0xb50 [ 1359.251701][ C0] ? console_flush_one_record+0xfa/0xb50 [ 1359.251719][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1359.251737][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1359.251762][ C0] legacy_kthread_func+0x1b6/0x250 [ 1359.251781][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1359.251797][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1359.251822][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1359.251845][ C0] ? __kthread_parkme+0x196/0x1f0 [ 1359.251869][ C0] kthread+0x388/0x470 [ 1359.251893][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1359.251909][ C0] ? __pfx_kthread+0x10/0x10 [ 1359.251933][ C0] ret_from_fork+0x514/0xb70 [ 1359.251959][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1359.251984][ C0] ? __switch_to+0xc89/0x1420 [ 1359.252007][ C0] ? __pfx_kthread+0x10/0x10 [ 1359.252031][ C0] ret_from_fork_asm+0x1a/0x30 [ 1359.252056][ C0] [ 1359.252320][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1359.252337][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1359.252362][ T38] Tainted: [L]=SOFTLOCKUP [ 1359.252374][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1359.252386][ T38] Call Trace: [ 1359.252393][ T38] [ 1359.252402][ T38] vpanic+0x56c/0xa60 [ 1359.252426][ T38] ? __pfx_vpanic+0x10/0x10 [ 1359.252454][ T38] panic+0xc5/0xd0 [ 1359.252473][ T38] ? __pfx_panic+0x10/0x10 [ 1359.252499][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 1359.252524][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 1359.252551][ T38] watchdog+0x1030/0x1030 [ 1359.252577][ T38] ? watchdog+0x1c7/0x1030 [ 1359.252602][ T38] kthread+0x388/0x470 [ 1359.252630][ T38] ? __pfx_watchdog+0x10/0x10 [ 1359.252647][ T38] ? __pfx_kthread+0x10/0x10 [ 1359.252677][ T38] ret_from_fork+0x514/0xb70 [ 1359.252709][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1359.252738][ T38] ? __switch_to+0xc89/0x1420 [ 1359.252766][ T38] ? __pfx_kthread+0x10/0x10 [ 1359.252795][ T38] ret_from_fork_asm+0x1a/0x30 [ 1359.252829][ T38] [ 1359.253100][ T38] Kernel Offset: disabled