last executing test programs: 4m12.899184663s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x10b8, 0x5, 0x4, 0x0, 0x7f}) 4m10.539138767s ago: executing program 0 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_misc(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0xc0844123, &(0x7f00000000c0)=0xf73f) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 4m6.076873986s ago: executing program 0 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f00000000c0)=0x402) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x60000002, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tmp\x00', 0x777) mount(0x0, &(0x7f0000000000)='./tmp\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') 4m5.792648298s ago: executing program 2 (id=3): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) r1 = socket(0x1e, 0x4, 0x0) poll(&(0x7f00000004c0)=[{r1, 0x200}], 0x1, 0x7f) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0x8, 0x4, 0x20, @local, @private1, 0x40, 0x80, 0x6, 0x8}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000010}], 0x1, 0x0) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4095, 0xfff}], 0x1}, 0x2) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x3) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 4m2.149853502s ago: executing program 2 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0xe00, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x840, 0x0) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m58.961179392s ago: executing program 2 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = fsopen(0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = fsopen(&(0x7f0000001580)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 3m57.41742779s ago: executing program 2 (id=19): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 3m54.250878864s ago: executing program 0 (id=20): socket$nl_route(0x10, 0x3, 0x0) unlink(0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket(0x8, 0x2, 0x0) setsockopt(r3, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r3, &(0x7f0000000300)=@generic={0x8, "ffff00002000"}, 0xc) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0x0, 0x80, @buffer={0x310, 0x0, 0x0}, &(0x7f0000000080), 0x0, 0x1, 0xe, 0xffffffffffffffff, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0xc008551c, &(0x7f0000000200)=ANY=[@ANYBLOB="0400000058"]) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x3, 0x80010, r0, 0x0) 3m41.509766379s ago: executing program 32 (id=19): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 3m36.359888934s ago: executing program 33 (id=20): socket$nl_route(0x10, 0x3, 0x0) unlink(0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket(0x8, 0x2, 0x0) setsockopt(r3, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r3, &(0x7f0000000300)=@generic={0x8, "ffff00002000"}, 0xc) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0x0, 0x80, @buffer={0x310, 0x0, 0x0}, &(0x7f0000000080), 0x0, 0x1, 0xe, 0xffffffffffffffff, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0xc008551c, &(0x7f0000000200)=ANY=[@ANYBLOB="0400000058"]) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x3, 0x80010, r0, 0x0) 6.952225938s ago: executing program 3 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 client1\n', 0x22) 6.714670833s ago: executing program 3 (id=409): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000200), 0x12) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f00000000c0), 0x12) 6.487196145s ago: executing program 3 (id=411): syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl(r0, 0xc4c85513, 0x0) 5.66786998s ago: executing program 4 (id=414): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000000)="550449f9307d0c705f3b8ea2607849", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = socket(0x2b, 0x1, 0xa0c7) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, 0x0, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) socket(0xa, 0x3, 0x3a) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) 4.198129785s ago: executing program 3 (id=416): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x4, "8500"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "0900c899"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000e00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.556576325s ago: executing program 4 (id=417): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r1}, 0x8) 2.966370549s ago: executing program 1 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='!H', 0x2) 2.884275716s ago: executing program 1 (id=419): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0xb01f, 0x5601}]) 2.2784418s ago: executing program 4 (id=420): syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) 2.21331605s ago: executing program 1 (id=421): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.973542722s ago: executing program 1 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x4002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x7fe81e5246626bb5) lseek(r0, 0x101, 0x1) getdents64(r0, 0xfffffffffffffffe, 0x4a) 1.696828378s ago: executing program 1 (id=424): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x32) tkill(r0, 0x16) 1.336887508s ago: executing program 1 (id=425): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0xb, 0xf0, "77f15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) 1.066879432s ago: executing program 3 (id=426): unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, 0x0, 0x0) 827.106708ms ago: executing program 4 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="2a3a6d6f643ae8", 0x7) 731.250353ms ago: executing program 4 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x4a) preadv(r0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f0000000600)=""/40, 0x28}, {&(0x7f0000000680)=""/20, 0x14}, {&(0x7f0000000700)=""/144, 0x90}], 0x6, 0x800000a, 0x200) 632.737644ms ago: executing program 4 (id=429): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsopen(&(0x7f0000000100)='nfs\x00', 0x0) 0s ago: executing program 3 (id=430): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r1, 0x6405) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 87.118084][ T31] cfg80211: failed to load regulatory.db [ 89.888678][ T5588] cgroup: Unknown subsys name 'net' [ 90.138851][ T5588] cgroup: Unknown subsys name 'cpuset' [ 90.203209][ T5588] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.216085][ T5588] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.226191][ T4915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.271489][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.279616][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.289886][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.293385][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.304520][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.311122][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.318170][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.320251][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.321559][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.326110][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.326952][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.333541][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.353581][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.363290][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.365461][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.367888][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.374431][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.377461][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.377777][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.378745][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.379518][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.380626][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.441837][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.481068][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.363614][ T60] Bluetooth: hci4: command tx timeout [ 98.444950][ T60] Bluetooth: hci0: command tx timeout [ 98.444969][ T5613] Bluetooth: hci2: command tx timeout [ 98.522526][ T60] Bluetooth: hci3: command tx timeout [ 98.522538][ T5613] Bluetooth: hci1: command tx timeout [ 99.115053][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.115995][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.116111][ T5607] bridge_slave_0: entered allmulticast mode [ 99.118408][ T5607] bridge_slave_0: entered promiscuous mode [ 99.121723][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.121859][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.124736][ T5606] bridge_slave_0: entered allmulticast mode [ 99.127436][ T5606] bridge_slave_0: entered promiscuous mode [ 99.194998][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.195135][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.195715][ T5606] bridge_slave_1: entered allmulticast mode [ 99.197748][ T5606] bridge_slave_1: entered promiscuous mode [ 99.199523][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.199631][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.199730][ T5607] bridge_slave_1: entered allmulticast mode [ 99.201345][ T5607] bridge_slave_1: entered promiscuous mode [ 99.203657][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.203806][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.204406][ T5610] bridge_slave_0: entered allmulticast mode [ 99.208450][ T5610] bridge_slave_0: entered promiscuous mode [ 99.231420][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.231552][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.232077][ T5609] bridge_slave_0: entered allmulticast mode [ 99.235764][ T5609] bridge_slave_0: entered promiscuous mode [ 99.280397][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.280522][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.281080][ T5610] bridge_slave_1: entered allmulticast mode [ 99.284645][ T5610] bridge_slave_1: entered promiscuous mode [ 99.308333][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.308522][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.309030][ T5609] bridge_slave_1: entered allmulticast mode [ 99.311811][ T5609] bridge_slave_1: entered promiscuous mode [ 99.408858][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.413152][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.435575][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.435738][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.436104][ T5608] bridge_slave_0: entered allmulticast mode [ 99.437852][ T5608] bridge_slave_0: entered promiscuous mode [ 99.471919][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.476186][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.485215][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.487377][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.487535][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.487704][ T5608] bridge_slave_1: entered allmulticast mode [ 99.490365][ T5608] bridge_slave_1: entered promiscuous mode [ 99.500950][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.544161][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.561716][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.636809][ T5606] team0: Port device team_slave_0 added [ 99.640756][ T5607] team0: Port device team_slave_0 added [ 99.668713][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.688513][ T5606] team0: Port device team_slave_1 added [ 99.690354][ T5607] team0: Port device team_slave_1 added [ 99.692170][ T5610] team0: Port device team_slave_0 added [ 99.696583][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.699526][ T5609] team0: Port device team_slave_0 added [ 99.749902][ T5609] team0: Port device team_slave_1 added [ 99.758449][ T5610] team0: Port device team_slave_1 added [ 99.828946][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.828961][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.828975][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.832031][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.832045][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.832060][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.846958][ T5608] team0: Port device team_slave_0 added [ 99.896343][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.896361][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.896384][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.898075][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.898088][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.898111][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.901537][ T5608] team0: Port device team_slave_1 added [ 99.903368][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.903381][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.903404][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.910639][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.910652][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.910666][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.985409][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.985427][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.985450][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.986861][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.986873][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.986910][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.059939][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.059958][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.059982][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.115458][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.115476][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.115500][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.226832][ T5607] hsr_slave_0: entered promiscuous mode [ 100.228554][ T5607] hsr_slave_1: entered promiscuous mode [ 100.243474][ T5606] hsr_slave_0: entered promiscuous mode [ 100.245030][ T5606] hsr_slave_1: entered promiscuous mode [ 100.246835][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 100.246947][ T5606] Cannot create hsr debugfs directory [ 100.316759][ T5609] hsr_slave_0: entered promiscuous mode [ 100.318070][ T5609] hsr_slave_1: entered promiscuous mode [ 100.318984][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 100.319007][ T5609] Cannot create hsr debugfs directory [ 100.336476][ T5610] hsr_slave_0: entered promiscuous mode [ 100.337797][ T5610] hsr_slave_1: entered promiscuous mode [ 100.338709][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 100.338732][ T5610] Cannot create hsr debugfs directory [ 100.442686][ T5613] Bluetooth: hci4: command tx timeout [ 100.475802][ T5608] hsr_slave_0: entered promiscuous mode [ 100.476738][ T5608] hsr_slave_1: entered promiscuous mode [ 100.477348][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 100.477370][ T5608] Cannot create hsr debugfs directory [ 100.522831][ T5613] Bluetooth: hci0: command tx timeout [ 100.522838][ T60] Bluetooth: hci2: command tx timeout [ 100.602574][ T5613] Bluetooth: hci3: command tx timeout [ 100.602609][ T60] Bluetooth: hci1: command tx timeout [ 101.623059][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.686511][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.700222][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.737084][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.740830][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.779687][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.801924][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.816897][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.935788][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.986063][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.990583][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.017318][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.021781][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.069168][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.090266][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.128629][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.289224][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.316003][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.334145][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.377808][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.395808][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.435783][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.484714][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.528542][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.532580][ T60] Bluetooth: hci4: command tx timeout [ 102.603623][ T60] Bluetooth: hci2: command tx timeout [ 102.613162][ T60] Bluetooth: hci0: command tx timeout [ 102.682843][ T60] Bluetooth: hci1: command tx timeout [ 102.686376][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.692601][ T60] Bluetooth: hci3: command tx timeout [ 102.739484][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.756242][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.776808][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.784924][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.806702][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.839027][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.870046][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.975710][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.026314][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.058431][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.080351][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.115730][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.119642][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.169219][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.187767][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.225734][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.282734][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.341546][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.341806][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.384165][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.425522][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.425701][ T1375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.548195][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.599637][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.599777][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.624490][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.668899][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.669400][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.790117][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.840243][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.848684][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.905494][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.956462][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.956646][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.121132][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.168405][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.186701][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.186840][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.260163][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.260380][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.341036][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.427352][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.427584][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.521041][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.521208][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.602719][ T60] Bluetooth: hci4: command tx timeout [ 104.682530][ T60] Bluetooth: hci0: command tx timeout [ 104.682570][ T60] Bluetooth: hci2: command tx timeout [ 104.762576][ T5613] Bluetooth: hci3: command tx timeout [ 104.762616][ T5613] Bluetooth: hci1: command tx timeout [ 104.942026][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.539007][ T5606] veth0_vlan: entered promiscuous mode [ 105.660845][ T5606] veth1_vlan: entered promiscuous mode [ 105.789463][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.021924][ T5606] veth0_macvtap: entered promiscuous mode [ 106.081061][ T5606] veth1_macvtap: entered promiscuous mode [ 106.125362][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.271896][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.313062][ T5609] veth0_vlan: entered promiscuous mode [ 106.339960][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.458557][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.461423][ T5609] veth1_vlan: entered promiscuous mode [ 106.612691][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.957725][ T5610] veth0_vlan: entered promiscuous mode [ 107.121352][ T5609] veth0_macvtap: entered promiscuous mode [ 107.188829][ T5610] veth1_vlan: entered promiscuous mode [ 107.200783][ T5609] veth1_macvtap: entered promiscuous mode [ 107.218101][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.218118][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.262563][ T5608] veth0_vlan: entered promiscuous mode [ 107.320760][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.320784][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.350539][ T5608] veth1_vlan: entered promiscuous mode [ 107.363712][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.417605][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.526073][ T5610] veth0_macvtap: entered promiscuous mode [ 107.577839][ T5607] veth0_vlan: entered promiscuous mode [ 107.596430][ T5610] veth1_macvtap: entered promiscuous mode [ 107.647049][ T5606] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.805026][ T5608] veth0_macvtap: entered promiscuous mode [ 107.833843][ T5607] veth1_vlan: entered promiscuous mode [ 107.910202][ T5608] veth1_macvtap: entered promiscuous mode [ 107.985029][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.164568][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.177986][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.178013][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.378381][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.470622][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.280015][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.280040][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.404564][ T5607] veth0_macvtap: entered promiscuous mode [ 109.667011][ T5607] veth1_macvtap: entered promiscuous mode [ 111.042406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.062414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.072401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.082402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.092412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.102406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.112403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.122411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.132400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.142401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.216863][ T5805] input: syz0 as /devices/virtual/input/input5 [ 113.385216][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.385243][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.550111][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.694032][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.064038][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.064060][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.349528][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.349555][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.140058][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.156950][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.564338][ T1341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.963308][ T1338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.959337][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.959364][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.458743][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.458768][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.545722][ T90] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.585514][ T1341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.586027][ T1341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.586561][ T1341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.586788][ T1341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.252297][ T1341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.388028][ T5840] capability: warning: `syz.1.12' uses deprecated v2 capabilities in a way that may be insecure [ 123.620548][ T1343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.983151][ T1447] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.020386][ T1341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.054584][ T1341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.162775][ T1341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.166111][ T1447] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.166579][ T1447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.182825][ T1447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.753253][ T1336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.979833][ T5856] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 127.032127][ T1336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.331055][ T5826] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.406221][ T1336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.470765][ T1331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.354380][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.921357][ T5880] jffs2: notice: (5880) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 133.309908][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.310012][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.330167][ T1345] IPVS: starting estimator thread 0... [ 133.434432][ T5882] IPVS: using max 7 ests per chain, 16800 per kthread [ 134.421618][ T5888] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 137.706235][ T5893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'. [ 137.818380][ T5893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'. [ 137.818622][ T5893] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 138.878320][ T5885] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 142.598335][ T5908] syz.3.25 (5908): drop_caches: 2 [ 148.487628][ T5928] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.356504][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.398379][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.430579][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.448610][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.449555][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.631364][ T5934] binder: 5933:5934 ioctl 4008550d 200000000000 returned -22 [ 151.191333][ T5613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.244475][ T5613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.245626][ T5613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.247658][ T5613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.248512][ T5613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.524211][ T5613] Bluetooth: hci5: command tx timeout [ 153.552880][ T5613] Bluetooth: hci6: command tx timeout [ 154.386419][ T5956] binder: 5955:5956 ioctl c00c6211 0 returned -14 [ 154.607733][ T5613] Bluetooth: hci5: command tx timeout [ 155.578821][ T5613] Bluetooth: hci6: command tx timeout [ 156.692712][ T5613] Bluetooth: hci5: command tx timeout [ 157.766840][ T5970] Bluetooth: MGMT ver 1.23 [ 158.788155][ T5613] Bluetooth: hci6: command tx timeout [ 158.788195][ T5613] Bluetooth: hci5: command tx timeout [ 159.876546][ T1347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.854040][ T60] Bluetooth: hci6: command tx timeout [ 160.990051][ T1347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.036203][ T5976] Zero length message leads to an empty skb [ 162.330924][ T5983] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 169.020479][ T5999] isofs_fill_super: bread failed, dev=nbd4, iso_blknum=16, block=32 [ 172.678570][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.47'. [ 173.129622][ T37] audit: type=1326 audit(1789209460.855:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847c67e159 code=0x7ffc0000 [ 173.129965][ T37] audit: type=1326 audit(1789209460.855:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847c67e159 code=0x7ffc0000 [ 173.187668][ T37] audit: type=1326 audit(1789209460.865:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847c67e159 code=0x7ffc0000 [ 173.353727][ T37] audit: type=1326 audit(1789209460.875:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847c67e159 code=0x7ffc0000 [ 173.354109][ T37] audit: type=1326 audit(1789209460.875:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f847c67e159 code=0x7ffc0000 [ 173.354425][ T37] audit: type=1326 audit(1789209460.885:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847c67e159 code=0x7ffc0000 [ 173.354723][ T37] audit: type=1326 audit(1789209460.885:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847c67e159 code=0x7ffc0000 [ 173.355028][ T37] audit: type=1326 audit(1789209460.885:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847c67e159 code=0x7ffc0000 [ 173.355316][ T37] audit: type=1326 audit(1789209460.885:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847c67e159 code=0x7ffc0000 [ 173.355625][ T37] audit: type=1326 audit(1789209460.885:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.4.47" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f847c67e159 code=0x7ffc0000 [ 174.108984][ T1347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.093652][ T36] kernel write not supported for file /62/net/ip_vs_stats (pid: 36 comm: kworker/1:1) [ 178.683043][ T6022] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 179.158648][ T1347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.476598][ T6096] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 194.811564][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.811644][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.832499][ T193] IPVS: starting estimator thread 0... [ 197.939604][ T6109] IPVS: using max 14 ests per chain, 33600 per kthread [ 198.054343][ T1347] bridge_slave_1: left allmulticast mode [ 198.054501][ T1347] bridge_slave_1: left promiscuous mode [ 198.071391][ T1347] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.451114][ T1347] bridge_slave_0: left allmulticast mode [ 198.451157][ T1347] bridge_slave_0: left promiscuous mode [ 198.451877][ T1347] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.234209][ T5736] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 201.437380][ T5736] usb 5-1: Using ep0 maxpacket: 32 [ 201.440635][ T5736] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 201.469803][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.469843][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.469889][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.393495][ T5736] usb 5-1: config 0 descriptor?? [ 202.509975][ T5736] hub 5-1:0.0: USB hub found [ 205.600611][ T37] kauditd_printk_skb: 154 callbacks suppressed [ 205.600632][ T37] audit: type=1326 audit(1789209492.884:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.3.69" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64e9fee159 code=0x0 [ 206.430541][ T5736] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 206.593553][ T5736] usbhid 5-1:0.0: can't add hid device: -71 [ 206.661897][ T5736] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.776771][ T5736] usb 5-1: USB disconnect, device number 2 [ 207.038843][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.043967][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.077255][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.084220][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.090631][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.270272][ T1347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.415473][ T1347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.686420][ T6151] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 207.788780][ T1347] bond0 (unregistering): Released all slaves [ 207.998570][ T4928] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 208.850483][ T6160] overlay: Unknown parameter 'fsmagic' [ 209.754744][ T5613] Bluetooth: hci2: command tx timeout [ 209.783856][ T4928] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.844071][ T4928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.844146][ T4928] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 209.883851][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.884011][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.884229][ T5938] bridge_slave_0: entered allmulticast mode [ 209.922004][ T4928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 209.922036][ T4928] usb 2-1: SerialNumber: syz [ 210.111769][ T5938] bridge_slave_0: entered promiscuous mode [ 210.204238][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.204388][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.204592][ T5938] bridge_slave_1: entered allmulticast mode [ 210.244104][ T5938] bridge_slave_1: entered promiscuous mode [ 210.345236][ T4928] usb 2-1: No union descriptors [ 210.723310][ T5729] usb 2-1: USB disconnect, device number 3 [ 210.726537][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.841923][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.011719][ T5613] Bluetooth: hci2: command tx timeout [ 213.461285][ T5729] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 214.265715][ T5613] Bluetooth: hci2: command tx timeout [ 214.314886][ T5729] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.316440][ T5729] usb 2-1: not running at top speed; connect to a high speed hub [ 214.316478][ T5729] usb 2-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 214.352817][ T5729] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.352849][ T5729] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 214.352920][ T5729] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 216.313869][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.369945][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.374067][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.396276][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.398638][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.497934][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.526934][ T60] Bluetooth: hci2: command tx timeout [ 216.603557][ T5729] usb 2-1: can't set config #1, error -71 [ 216.639094][ T5729] usb 2-1: USB disconnect, device number 4 [ 219.079361][ T60] Bluetooth: hci3: command tx timeout [ 221.372878][ T60] Bluetooth: hci3: command tx timeout [ 223.793973][ T60] Bluetooth: hci3: command tx timeout [ 223.830459][ T6225] fuse: Bad value for 'fd' [ 224.494237][ T5736] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 224.703816][ T5736] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 224.716377][ T5736] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 224.716412][ T5736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 224.744359][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.744392][ T5736] usb 4-1: Product: syz [ 224.744409][ T5736] usb 4-1: Manufacturer: syz [ 224.744425][ T5736] usb 4-1: SerialNumber: syz [ 225.764896][ T5736] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.764962][ T5736] usb 4-1: MIDIStreaming interface descriptor not found [ 226.148028][ T4915] Bluetooth: hci4: command 0x0406 tx timeout [ 226.148079][ T4915] Bluetooth: hci1: command 0x0406 tx timeout [ 226.148105][ T4915] Bluetooth: hci3: command tx timeout [ 226.336749][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.87'. [ 226.336780][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.87'. [ 229.074513][ T6259] ubi0: attaching mtd0 [ 229.138823][ T6259] ubi0: scanning is finished [ 229.138895][ T6259] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 229.584599][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 230.256184][ T6259] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 231.356250][ T5729] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 231.551566][ T5729] usb 5-1: Using ep0 maxpacket: 32 [ 231.552511][ T5729] usb 5-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.5e [ 231.554128][ T5729] usb 5-1: config 5 has an invalid interface number: 132 but max is 0 [ 231.554157][ T5729] usb 5-1: config 5 has no interface number 0 [ 231.554191][ T5729] usb 5-1: config 5 interface 132 has no altsetting 0 [ 231.557402][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.557429][ T5729] usb 5-1: Product: syz [ 231.557446][ T5729] usb 5-1: Manufacturer: syz [ 231.557462][ T5729] usb 5-1: SerialNumber: syz [ 233.546093][ T1347] hsr_slave_0: left promiscuous mode [ 233.672797][ T1347] hsr_slave_1: left promiscuous mode [ 233.674936][ T1347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.674999][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.682342][ T5736] usb 4-1: USB disconnect, device number 3 [ 233.749762][ T1347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.749794][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.798411][ T5729] uvcvideo 5-1:5.132: Found UVC 0.00 device syz (19ab:1000) [ 233.798453][ T5729] uvcvideo 5-1:5.132: No valid video chain found. [ 233.890835][ T1347] veth1_macvtap: left promiscuous mode [ 233.891027][ T1347] veth0_macvtap: left promiscuous mode [ 233.891207][ T1347] veth1_vlan: left promiscuous mode [ 233.891426][ T1347] veth0_vlan: left promiscuous mode [ 233.986462][ T5729] usb 5-1: USB disconnect, device number 3 [ 234.192803][ T4928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 234.449293][ T4928] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.450272][ T4928] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.450289][ T4928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.450300][ T4928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.450329][ T4928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.456242][ T4928] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.456268][ T4928] usb 2-1: Product: syz [ 234.456281][ T4928] usb 2-1: Manufacturer: syz [ 234.974584][ T4928] cdc_wdm 2-1:1.0: skipping garbage [ 234.974610][ T4928] cdc_wdm 2-1:1.0: skipping garbage [ 235.038889][ T1347] team0 (unregistering): Port device team_slave_1 removed [ 235.111999][ T1347] team0 (unregistering): Port device team_slave_0 removed [ 235.465321][ T36] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 235.644650][ T36] usb 5-1: No LPM exit latency info found, disabling LPM. [ 235.644712][ T36] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=41.d7 [ 235.646318][ T36] usb 5-1: config 127 has an invalid interface number: 152 but max is 0 [ 235.646347][ T36] usb 5-1: config 127 has no interface number 0 [ 235.646381][ T36] usb 5-1: config 127 interface 152 has no altsetting 0 [ 235.673011][ T36] usb 5-1: string descriptor 0 read error: -22 [ 235.673176][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.747909][ T4928] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 235.747935][ T4928] cdc_wdm 2-1:1.0: Unknown control protocol [ 236.078503][ T36] cypress_m8 5-1:127.152: HID->COM RS232 Adapter converter detected [ 236.192628][ T4928] usb 2-1: USB disconnect, device number 5 [ 236.360804][ T36] cyphidcom ttyUSB0: required endpoint is missing [ 236.542208][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 236.764990][ T36] usb 5-1: USB disconnect, device number 4 [ 236.845513][ T36] cypress_m8 5-1:127.152: device disconnected [ 238.522162][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.522361][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.522570][ T6145] bridge_slave_0: entered allmulticast mode [ 238.578589][ T6145] bridge_slave_0: entered promiscuous mode [ 238.667571][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.667727][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.668655][ T6145] bridge_slave_1: entered allmulticast mode [ 238.684150][ T6145] bridge_slave_1: entered promiscuous mode [ 239.219631][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.382543][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.684459][ T6145] team0: Port device team_slave_0 added [ 239.706892][ T6145] team0: Port device team_slave_1 added [ 240.700779][ T6377] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 241.704493][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.704514][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.704540][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.747527][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 241.838161][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.838182][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.838211][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.432627][ T6396] Bluetooth: ISO socket layer initialized [ 244.463539][ T5613] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 244.557437][ T1347] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.253098][ T6398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.307094][ T6412] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 251.967518][ T1347] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.986080][ T6429] comedi comedi4: bad chanlist[1]=0x00000410 chan=1040 range length=2 [ 252.101370][ T6145] hsr_slave_0: entered promiscuous mode [ 252.102852][ T6145] hsr_slave_1: entered promiscuous mode [ 252.103869][ T6145] debugfs: 'hsr0' already exists in 'hsr' [ 252.103912][ T6145] Cannot create hsr debugfs directory [ 252.231705][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.231926][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.232141][ T6183] bridge_slave_0: entered allmulticast mode [ 252.235263][ T6183] bridge_slave_0: entered promiscuous mode [ 252.417644][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.417790][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.418029][ T6183] bridge_slave_1: entered allmulticast mode [ 252.429332][ T6183] bridge_slave_1: entered promiscuous mode [ 255.138353][ T1347] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.833413][ T6445] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 256.911038][ T6183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.127258][ T6183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.930726][ T1347] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.510066][ T6183] team0: Port device team_slave_0 added [ 259.866441][ T6183] team0: Port device team_slave_1 added [ 259.959540][ T6491] comedi comedi0: comedi_parport: I/O base address not correctly aligned [ 260.148860][ T5710] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 260.378854][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 260.380002][ T5710] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 260.382656][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.382713][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.460287][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.460308][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.460336][ T6183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.601714][ T5710] usb 2-1: config 0 descriptor?? [ 260.665414][ T5710] hub 2-1:0.0: USB hub found [ 260.693587][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.693606][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.693634][ T6183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.856841][ T5710] hub 2-1:0.0: 1 port detected [ 261.087613][ T5710] hub 2-1:0.0: config failed, can't get hub status (err -5) [ 261.469516][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.502028][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.564503][ T6509] netlink: 'syz.3.158': attribute type 3 has an invalid length. [ 261.574184][ T6488] netlink: 'syz.1.150': attribute type 16 has an invalid length. [ 261.574208][ T6488] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.150'. [ 261.738429][ T5710] usbhid 2-1:0.0: can't add hid device: -71 [ 261.738560][ T5710] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 261.937982][ T5710] usb 2-1: USB disconnect, device number 6 [ 262.168774][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 262.223279][ T6183] hsr_slave_0: entered promiscuous mode [ 262.224922][ T6183] hsr_slave_1: entered promiscuous mode [ 262.226022][ T6183] debugfs: 'hsr0' already exists in 'hsr' [ 262.226048][ T6183] Cannot create hsr debugfs directory [ 262.262327][ T5736] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 263.529913][ T5736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 263.530014][ T5736] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 263.616063][ T5736] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 263.644671][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.644704][ T5736] usb 4-1: Product: syz [ 263.644720][ T5736] usb 4-1: Manufacturer: syz [ 263.644735][ T5736] usb 4-1: SerialNumber: syz [ 264.155549][ T5736] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 264.217752][ T5736] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 264.310163][ T5736] usb 4-1: failed to enable PITCH for EP 0x82 [ 265.527131][ T5826] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 265.632254][ T6552] comedi: No check for data length of config insn id 1999 is implemented [ 265.632269][ T6552] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 265.632277][ T6552] comedi: Assuming n=15 is correct [ 265.735225][ T5826] usb 2-1: Using ep0 maxpacket: 8 [ 265.830144][ T5826] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.830188][ T5826] usb 2-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 265.831737][ T5826] usb 2-1: config 2 has an invalid interface number: 99 but max is 0 [ 265.831766][ T5826] usb 2-1: config 2 has no interface number 0 [ 265.831809][ T5826] usb 2-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 265.831830][ T5826] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 265.831849][ T5826] usb 2-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 265.831862][ T5826] usb 2-1: config 2 interface 99 has no altsetting 0 [ 265.839715][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.839743][ T5826] usb 2-1: Product: syz [ 265.839757][ T5826] usb 2-1: Manufacturer: syz [ 265.839771][ T5826] usb 2-1: SerialNumber: syz [ 266.356800][ T5736] usb 4-1: USB disconnect, device number 4 [ 266.740045][ T5826] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.99/input/input6 [ 267.330390][ C1] xpad 2-1:2.99: xpad_irq_in - usb_submit_urb failed with result -1 [ 267.374254][ T6568] netlink: 'syz.1.183': attribute type 2 has an invalid length. [ 267.374272][ T6568] netlink: 232 bytes leftover after parsing attributes in process `syz.1.183'. [ 267.448981][ T1347] bridge_slave_1: left allmulticast mode [ 267.449096][ T1347] bridge_slave_1: left promiscuous mode [ 267.491306][ T1347] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.944262][ T5826] usb 2-1: USB disconnect, device number 7 [ 267.944438][ C0] xpad 2-1:2.99: xpad_irq_in - usb_submit_urb failed with result -19 [ 267.944904][ T1347] bridge_slave_0: left allmulticast mode [ 267.944934][ T1347] bridge_slave_0: left promiscuous mode [ 267.987222][ T1347] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.542853][ T6583] udevd[6583]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.667329][ T4928] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 268.740941][ T1347] bridge_slave_1: left allmulticast mode [ 268.740970][ T1347] bridge_slave_1: left promiscuous mode [ 268.741172][ T1347] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.831179][ T4928] usb 5-1: Using ep0 maxpacket: 8 [ 268.832250][ T4928] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 268.833900][ T4928] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 268.836775][ T4928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.836793][ T4928] usb 5-1: Product: syz [ 268.836802][ T4928] usb 5-1: Manufacturer: syz [ 268.836811][ T4928] usb 5-1: SerialNumber: syz [ 268.864827][ T4928] usb 5-1: config 0 descriptor?? [ 268.945676][ T4928] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 268.945734][ T4928] usb 5-1: setting power ON [ 268.946045][ T4928] dvb-usb: bulk message failed: -22 (2/0) [ 269.049836][ T1347] bridge_slave_0: left allmulticast mode [ 269.049865][ T1347] bridge_slave_0: left promiscuous mode [ 269.050135][ T1347] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.327942][ T4928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.329776][ T4928] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 269.329865][ T4928] usb 5-1: media controller created [ 269.549825][ T4928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.866786][ T4928] usb 5-1: selecting invalid altsetting 6 [ 269.866816][ T4928] usb 5-1: digital interface selection failed (-22) [ 269.866834][ T4928] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 269.868023][ T4928] usb 5-1: setting power OFF [ 269.868191][ T4928] dvb-usb: bulk message failed: -22 (2/0) [ 269.868210][ T4928] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 269.868221][ T4928] (NULL device *): no alternate interface [ 270.170397][ T4928] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 270.199488][ T4928] usb 5-1: USB disconnect, device number 5 [ 270.597226][ T1347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.781672][ T1347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.849001][ T1347] bond0 (unregistering): Released all slaves [ 272.882383][ T1347] bond0 (unregistering): Released all slaves [ 272.955738][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.988582][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.057408][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.076964][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.085732][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.794540][ T1347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.880760][ T1347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.910707][ T1347] bond0 (unregistering): Released all slaves [ 275.386674][ T5613] Bluetooth: hci5: command tx timeout [ 277.667320][ T5613] Bluetooth: hci5: command tx timeout [ 277.722483][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 278.322536][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.353153][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.364813][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.387611][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.403023][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.665550][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 278.665607][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.217'. [ 279.935056][ T5613] Bluetooth: hci5: command tx timeout [ 280.693694][ T5613] Bluetooth: hci2: command tx timeout [ 280.828485][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 281.014856][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 281.015752][ T10] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 281.040058][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.084688][ T10] usb 2-1: config 0 descriptor?? [ 282.244751][ T5613] Bluetooth: hci5: command tx timeout [ 282.286769][ T1347] hsr_slave_0: left promiscuous mode [ 282.320873][ T10] as10x_usb: device has been detected [ 282.321929][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 282.344572][ T1347] hsr_slave_1: left promiscuous mode [ 282.351107][ T1347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.351140][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.419566][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 282.436158][ T1347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.436190][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.692754][ T1347] veth1_macvtap: left promiscuous mode [ 282.692832][ T1347] veth0_macvtap: left promiscuous mode [ 282.766214][ T1347] veth1_vlan: left promiscuous mode [ 282.766439][ T1347] veth0_vlan: left promiscuous mode [ 282.852090][ T6710] netdevsim netdevsim3: loading /lib/firmware// failed with error -22 [ 282.852122][ T6710] netdevsim netdevsim3: Direct firmware load for / failed with error -22 [ 282.852136][ T6710] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 282.940491][ T5613] Bluetooth: hci2: command tx timeout [ 284.370142][ T10] as10x_usb: error during firmware upload part1 [ 284.370917][ T10] Registered device nBox DVB-T Dongle [ 284.507059][ T10] usb 2-1: USB disconnect, device number 8 [ 284.713658][ T6716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.018404][ T10] Unregistered device nBox DVB-T Dongle [ 285.030586][ T10] as10x_usb: device has been disconnected [ 285.183909][ T5613] Bluetooth: hci2: command tx timeout [ 287.438227][ T5613] Bluetooth: hci2: command tx timeout [ 289.795151][ T1347] team0 (unregistering): Port device team_slave_1 removed [ 289.819844][ T6747] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 289.857007][ T1347] team0 (unregistering): Port device team_slave_0 removed [ 296.108385][ T5616] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 296.276069][ T5616] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 296.277846][ T5616] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.277879][ T5616] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 296.277921][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.372475][ T5616] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 298.368392][ T5826] usb 4-1: USB disconnect, device number 5 [ 298.466073][ T5826] idmouse 4-1:1.0: disconnected [ 299.547197][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 301.484544][ T6822] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 305.777586][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.777674][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.777836][ T6607] bridge_slave_0: entered allmulticast mode [ 306.326683][ T6863] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 307.610015][ T6607] bridge_slave_0: entered promiscuous mode [ 307.950604][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.952705][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.952936][ T6607] bridge_slave_1: entered allmulticast mode [ 308.162278][ T6607] bridge_slave_1: entered promiscuous mode [ 308.459979][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.553790][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.093377][ T6607] team0: Port device team_slave_0 added [ 309.342538][ T6607] team0: Port device team_slave_1 added [ 309.799088][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.799109][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.799137][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.843788][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.843805][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.843828][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.034991][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.035134][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.035370][ T6669] bridge_slave_0: entered allmulticast mode [ 310.057184][ T6669] bridge_slave_0: entered promiscuous mode [ 310.103476][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.103777][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.104086][ T6669] bridge_slave_1: entered allmulticast mode [ 310.162113][ T6669] bridge_slave_1: entered promiscuous mode [ 310.556226][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 310.717783][ T5616] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 310.756411][ T6607] hsr_slave_0: entered promiscuous mode [ 310.757792][ T6607] hsr_slave_1: entered promiscuous mode [ 310.758733][ T6607] debugfs: 'hsr0' already exists in 'hsr' [ 310.758760][ T6607] Cannot create hsr debugfs directory [ 310.791297][ T6669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.806639][ T6669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.887468][ T5616] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 310.896054][ T5616] usb 4-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 310.896089][ T5616] usb 4-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.896116][ T5616] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.896149][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.927422][ T5616] usb 4-1: config 0 descriptor?? [ 310.934429][ T6899] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.082214][ T6669] team0: Port device team_slave_0 added [ 311.218135][ T6669] team0: Port device team_slave_1 added [ 311.861134][ T6909] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 312.959443][ T5616] ortek 0003:1223:3F07.0001: unknown main item tag 0x3 [ 312.959490][ T5616] ortek 0003:1223:3F07.0001: unknown main item tag 0x6 [ 312.959520][ T5616] ortek 0003:1223:3F07.0001: global environment stack underflow [ 312.959529][ T5616] ortek 0003:1223:3F07.0001: item 0 2 1 11 parsing failed [ 312.960197][ T5616] ortek 0003:1223:3F07.0001: probe with driver ortek failed with error -22 [ 313.034727][ T5616] usb 4-1: USB disconnect, device number 6 [ 313.487444][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.487480][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.487507][ T6669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.552251][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.552269][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.552294][ T6669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.311118][ T6669] hsr_slave_0: entered promiscuous mode [ 314.338266][ T6669] hsr_slave_1: entered promiscuous mode [ 314.342680][ T6669] debugfs: 'hsr0' already exists in 'hsr' [ 314.342708][ T6669] Cannot create hsr debugfs directory [ 314.436986][ T5616] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 316.005563][ T5616] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 316.010580][ T5616] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 316.010609][ T5616] usb 4-1: config 1 has no interface number 0 [ 316.010652][ T5616] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 316.010676][ T5616] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 316.010700][ T5616] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.028415][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.028445][ T5616] usb 4-1: Product: syz [ 316.028461][ T5616] usb 4-1: Manufacturer: syz [ 316.028487][ T5616] usb 4-1: SerialNumber: syz [ 316.044400][ T6921] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 316.349871][ T6921] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.592761][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 317.775341][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 317.775373][ T6931] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 318.141905][ T5616] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 318.189070][ T5616] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 318.189173][ T5616] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 318.202181][ T5616] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 318.202210][ T5616] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 318.324229][ T5616] usb 4-1: USB disconnect, device number 7 [ 318.334866][ T5616] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 318.448991][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 318.824408][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 318.833987][ T5616] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 318.840763][ T6770] udevd[6770]: setting mode of /dev/bus/usb/004/007 to 020664 failed: No such file or directory [ 318.840947][ T6770] udevd[6770]: setting owner of /dev/bus/usb/004/007 to uid=0, gid=0 failed: No such file or directory [ 319.009681][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 319.012393][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.012429][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.012472][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.699465][ T10] hid-sensor-hub 0003:8086:0000.0002: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.1-1/input0 [ 320.370437][ T10] usb 2-1: USB disconnect, device number 9 [ 320.439312][ T1347] bridge_slave_1: left allmulticast mode [ 320.439348][ T1347] bridge_slave_1: left promiscuous mode [ 320.439624][ T1347] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.717742][ T1347] bridge_slave_0: left allmulticast mode [ 321.717786][ T1347] bridge_slave_0: left promiscuous mode [ 321.718713][ T1347] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.032584][ T1347] bridge_slave_1: left allmulticast mode [ 322.032624][ T1347] bridge_slave_1: left promiscuous mode [ 322.032896][ T1347] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.175092][ T1347] bridge_slave_0: left allmulticast mode [ 322.175133][ T1347] bridge_slave_0: left promiscuous mode [ 322.175395][ T1347] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.672426][ T1347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.759158][ T1347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.826304][ T1347] bond0 (unregistering): Released all slaves [ 323.149926][ T1347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.235909][ T1347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.302792][ T1347] bond0 (unregistering): Released all slaves [ 323.589915][ T7005] netlink: 248 bytes leftover after parsing attributes in process `syz.4.300'. [ 323.589946][ T7005] netlink: 52 bytes leftover after parsing attributes in process `syz.4.300'. [ 324.126039][ T7007] syz.3.299 (7007) used greatest stack depth: 18816 bytes left [ 324.808540][ T1347] hsr_slave_0: left promiscuous mode [ 324.851395][ T1347] hsr_slave_1: left promiscuous mode [ 324.852922][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.910060][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.316184][ T1347] hsr_slave_0: left promiscuous mode [ 325.713864][ T5736] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 326.064143][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 326.118539][ T5736] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 326.185480][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.185517][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.185558][ T5736] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 326.185621][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.187554][ T1347] hsr_slave_1: left promiscuous mode [ 326.188532][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.190893][ T5736] usb 4-1: config 0 descriptor?? [ 326.427933][ T1347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.718759][ T5736] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input7 [ 327.097545][ T5736] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input8 [ 327.436499][ T5736] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 327.452986][ T1347] team0 (unregistering): Port device team_slave_1 removed [ 327.551590][ T1347] team0 (unregistering): Port device team_slave_0 removed [ 327.678209][ T5736] usb 4-1: USB disconnect, device number 8 [ 327.941903][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.941953][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.503028][ T1347] team0 (unregistering): Port device team_slave_1 removed [ 328.568052][ T1347] team0 (unregistering): Port device team_slave_0 removed [ 328.930150][ T7059] program syz.3.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.652891][ T5826] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 329.968067][ T5826] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 329.969999][ T5826] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 329.970033][ T5826] usb 2-1: config 0 interface 0 has no altsetting 0 [ 329.970068][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.101584][ T5826] usb 2-1: config 0 descriptor?? [ 330.719303][ T5826] nintendo 0003:057E:2009.0004: unknown main item tag 0x1 [ 330.719343][ T5826] nintendo 0003:057E:2009.0004: unknown main item tag 0x2 [ 330.804002][ T5826] nintendo 0003:057E:2009.0004: hidraw0: USB HID v90.01 Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0 [ 330.942335][ T5736] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 331.054095][ T5826] nintendo 0003:057E:2009.0004: Failed to get joycon info; ret=-38 [ 331.054126][ T5826] nintendo 0003:057E:2009.0004: Failed to retrieve controller info; ret=-38 [ 331.054146][ T5826] nintendo 0003:057E:2009.0004: Failed to initialize controller; ret=-38 [ 331.136993][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 331.137898][ T5736] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 331.142124][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.142161][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.142209][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.216582][ T5736] usb 4-1: config 0 descriptor?? [ 331.271837][ T5736] hub 4-1:0.0: USB hub found [ 331.311617][ T5826] nintendo 0003:057E:2009.0004: probe - fail = -38 [ 331.311804][ T5826] nintendo 0003:057E:2009.0004: probe with driver nintendo failed with error -38 [ 331.420870][ T7081] usb 2-1: USB disconnect, device number 10 [ 331.452493][ T5736] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 332.694414][ T5736] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 332.838269][ T6607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.081705][ T5736] usb 4-1: USB disconnect, device number 9 [ 333.198582][ T7119] syz.1.330: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 333.203394][ T7119] CPU: 0 UID: 0 PID: 7119 Comm: syz.1.330 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.203430][ T7119] Tainted: [L]=SOFTLOCKUP [ 333.203439][ T7119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.203453][ T7119] Call Trace: [ 333.203462][ T7119] [ 333.203472][ T7119] dump_stack_lvl+0xe8/0x150 [ 333.203515][ T7119] warn_alloc+0x24d/0x270 [ 333.203553][ T7119] ? __pfx_warn_alloc+0x10/0x10 [ 333.203581][ T7119] ? xsk_setsockopt+0x52a/0x960 [ 333.203608][ T7119] ? __x64_sys_setsockopt+0x143/0x1b0 [ 333.203675][ T7119] __vmalloc_node_range_noprof+0x127/0x1540 [ 333.203738][ T7119] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 333.203768][ T7119] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 333.203800][ T7119] ? xskq_create+0x56/0x220 [ 333.203834][ T7119] xskq_create+0x148/0x220 [ 333.203863][ T7119] ? xsk_init_queue+0x8a/0xe0 [ 333.203893][ T7119] xsk_init_queue+0x8a/0xe0 [ 333.203925][ T7119] xsk_setsockopt+0x52a/0x960 [ 333.203955][ T7119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 333.203997][ T7119] ? __fget_files+0x2a/0x420 [ 333.204021][ T7119] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 333.204043][ T7119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 333.204072][ T7119] do_sock_setsockopt+0x17c/0x1b0 [ 333.204114][ T7119] __x64_sys_setsockopt+0x143/0x1b0 [ 333.204155][ T7119] do_syscall_64+0x166/0x520 [ 333.204185][ T7119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.204209][ T7119] ? clear_bhb_loop+0x70/0xc0 [ 333.204237][ T7119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.204260][ T7119] RIP: 0033:0x7fa9beffe159 [ 333.204282][ T7119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.204301][ T7119] RSP: 002b:00007fa9bd214028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.204325][ T7119] RAX: ffffffffffffffda RBX: 00007fa9bf286180 RCX: 00007fa9beffe159 [ 333.204342][ T7119] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 333.204356][ T7119] RBP: 00007fa9bf09503b R08: 0000000000000004 R09: 0000000000000000 [ 333.204371][ T7119] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.204385][ T7119] R13: 00007fa9bf286218 R14: 00007fa9bf286180 R15: 00007ffd2b1bf758 [ 333.204422][ T7119] [ 333.204458][ T7119] Mem-Info: [ 333.205470][ T7119] active_anon:195 inactive_anon:8800 isolated_anon:0 [ 333.205470][ T7119] active_file:25971 inactive_file:35848 isolated_file:0 [ 333.205470][ T7119] unevictable:0 dirty:53 writeback:0 [ 333.205470][ T7119] slab_reclaimable:11803 slab_unreclaimable:99433 [ 333.205470][ T7119] mapped:32808 shmem:3396 pagetables:1345 [ 333.205470][ T7119] sec_pagetables:0 bounce:0 [ 333.205470][ T7119] kernel_misc_reclaimable:0 [ 333.205470][ T7119] free:1306833 free_pcp:5763 free_cma:0 [ 333.205560][ T7119] Node 0 active_anon:780kB inactive_anon:35200kB active_file:103680kB inactive_file:143392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131232kB dirty:212kB writeback:0kB shmem:13584kB kernel_stack:13468kB pagetables:5216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 333.205642][ T7119] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 333.205729][ T7119] Node 0 DMA free:15328kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 333.205902][ T7119] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 333.206130][ T7119] Node 0 DMA32 free:1275140kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:780kB inactive_anon:35200kB active_file:103680kB inactive_file:143392kB unevictable:0kB writepending:212kB zspages:0kB present:3129332kB managed:2558784kB mlocked:0kB bounce:0kB free_pcp:23044kB local_pcp:13452kB free_cma:0kB [ 333.206259][ T7119] lowmem_reserve[]: 0 0 1 1 1 [ 333.206480][ T7119] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 333.206594][ T7119] lowmem_reserve[]: 0 0 0 0 0 [ 333.206833][ T7119] Node 1 Normal free:3936864kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 333.206948][ T7119] lowmem_reserve[]: 0 0 0 0 0 [ 333.207167][ T7119] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 333.209361][ T7119] Node 0 DMA32: 242*4kB (UM) 145*8kB (UM) 60*16kB (UME) 317*32kB (UME) 378*64kB (UME) 278*128kB (UME) 152*256kB (UME) 76*512kB (UME) 40*1024kB (UME) 13*2048kB (ME) 258*4096kB (UM) = 1275184kB [ 333.210235][ T7119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 333.210741][ T7119] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 8*16kB (UM) 11*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (M) = 3936864kB [ 333.211551][ T7119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.211594][ T7119] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.211636][ T7119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.211699][ T7119] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 333.211743][ T7119] 65212 total pagecache pages [ 333.211777][ T7119] 0 pages in swap cache [ 333.211810][ T7119] Free swap = 124996kB [ 333.211844][ T7119] Total swap = 124996kB [ 333.211879][ T7119] 2097051 pages RAM [ 333.211912][ T7119] 0 pages HighMem/MovableOnly [ 333.211946][ T7119] 425286 pages reserved [ 333.211979][ T7119] 0 pages cma reserved [ 333.928852][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.946655][ T6607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 334.696186][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.984041][ T6607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 335.116721][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.152778][ T7128] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 335.155366][ T6607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 335.194001][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.635572][ T6669] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 335.690372][ T6669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.714039][ T6669] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 335.738123][ T6669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.778487][ T6669] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 335.805424][ T6669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.877515][ T6669] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 335.912305][ T6669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.937287][ T5616] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 336.109627][ T5616] usb 5-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 336.143698][ T5616] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 336.143740][ T5616] usb 5-1: config 0 interface 0 has no altsetting 0 [ 336.143777][ T5616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.201629][ T5616] usb 5-1: config 0 descriptor?? [ 336.216847][ T7143] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 336.534979][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.705423][ T5616] hid (null): unknown global tag 0x6a [ 336.712735][ T5616] hid (null): invalid report_count 42952 [ 336.712771][ T5616] hid (null): unknown global tag 0x39 [ 336.779497][ T5616] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 336.779538][ T5616] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 336.779585][ T5616] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 336.779611][ T5616] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 336.779636][ T5616] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 336.779669][ T5616] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 336.779695][ T5616] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 336.779721][ T5616] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 336.779746][ T5616] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 336.779772][ T5616] razer 0003:1532:010D.0006: unknown main item tag 0x0 [ 336.782093][ T5616] razer 0003:1532:010D.0006: unexpected long global item [ 336.850707][ T6607] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.869863][ T5616] razer 0003:1532:010D.0006: probe with driver razer failed with error -22 [ 336.991410][ T5736] usb 5-1: USB disconnect, device number 6 [ 336.992404][ T1447] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.012331][ T1447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.157985][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.158218][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.322748][ T6669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.577438][ T6669] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.626025][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.626264][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.789576][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.789747][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.076976][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.115108][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.128762][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.150347][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.183093][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.596747][ T7188] pimreg: tun_chr_ioctl cmd 1074025677 [ 339.596885][ T7188] pimreg: linktype set to 1 [ 340.372793][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.344'. [ 341.292793][ T5826] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 341.453577][ T5613] Bluetooth: hci3: command tx timeout [ 341.455080][ T5826] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 341.456713][ T5826] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 341.460991][ T5826] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 341.466293][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.466322][ T5826] usb 4-1: Product: syz [ 341.466338][ T5826] usb 4-1: Manufacturer: syz [ 341.466353][ T5826] usb 4-1: SerialNumber: syz [ 341.578595][ T5826] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 341.630102][ T5826] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 341.643554][ T6669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.656708][ T5826] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 343.332084][ T7230] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 343.333683][ T7230] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 343.333732][ T7230] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 343.336436][ T7230] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 343.404418][ T5623] usb 4-1: USB disconnect, device number 10 [ 343.702930][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.716730][ T5615] Bluetooth: hci3: command tx timeout [ 343.787343][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.790583][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.823692][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.845769][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.997954][ T5623] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 344.079170][ T5623] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 344.085840][ T5623] ti_usb_3410_5052 4-1:2.0: device disconnected [ 344.707401][ T5623] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 344.870562][ T5623] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 344.878717][ T5623] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 344.878777][ T5623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.934418][ T5623] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 345.097837][ T5616] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 345.516143][ T5616] usb 5-1: Using ep0 maxpacket: 16 [ 345.547047][ T5616] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 345.548307][ T5616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.548339][ T5616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.548361][ T5616] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 345.548388][ T5616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.556552][ T5616] usb 5-1: config 0 descriptor?? [ 345.973165][ T5613] Bluetooth: hci3: command tx timeout [ 346.057775][ T5623] stv0680 4-1:4.0: Could not get descriptor 0200 [ 346.222133][ T5613] Bluetooth: hci5: command tx timeout [ 346.281196][ T5623] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 346.281224][ T5623] stv0680 4-1:4.0: last error: 9, command = 0xe [ 346.300823][ T5616] hid_parser_main: 47 callbacks suppressed [ 346.300905][ T5616] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 346.300934][ T5616] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 346.300958][ T5616] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 346.300981][ T5616] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 346.301005][ T5616] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 346.301029][ T5616] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 346.301052][ T5616] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 346.301075][ T5616] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 346.301098][ T5616] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 346.301130][ T5616] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 346.392712][ T5616] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input9 [ 346.425337][ T5623] usb 4-1: USB disconnect, device number 11 [ 346.983208][ T5616] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 347.032699][ T5616] usb 5-1: USB disconnect, device number 7 [ 347.429444][ T7316] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 347.492474][ T7310] fido_id[7310]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 348.232573][ T5613] Bluetooth: hci3: command tx timeout [ 348.488709][ T5613] Bluetooth: hci5: command tx timeout [ 348.866829][ T1329] bridge_slave_1: left allmulticast mode [ 348.866872][ T1329] bridge_slave_1: left promiscuous mode [ 348.867160][ T1329] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.033692][ T1329] bridge_slave_0: left allmulticast mode [ 349.033733][ T1329] bridge_slave_0: left promiscuous mode [ 349.034041][ T1329] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.222008][ T1329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.287380][ T1329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.334671][ T1329] bond0 (unregistering): Released all slaves [ 350.407552][ T5623] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 350.600592][ T5623] usb 5-1: Using ep0 maxpacket: 32 [ 350.603115][ T5623] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 350.604473][ T5623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.648371][ T5623] usb 5-1: config 0 descriptor?? [ 350.692750][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.692913][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.693128][ T7181] bridge_slave_0: entered allmulticast mode [ 350.695875][ T7181] bridge_slave_0: entered promiscuous mode [ 350.732001][ T5613] Bluetooth: hci5: command tx timeout [ 350.910500][ T5623] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 350.920904][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.921038][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.921216][ T7181] bridge_slave_1: entered allmulticast mode [ 350.923867][ T7181] bridge_slave_1: entered promiscuous mode [ 350.957930][ T5623] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.961005][ T5623] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 350.961112][ T5623] usb 5-1: media controller created [ 351.080154][ T7391] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32 [ 351.202545][ T5623] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.584715][ T5623] az6027: usb out operation failed. (-71) [ 351.585282][ T5623] az6027: usb out operation failed. (-71) [ 351.585296][ T5623] stb0899_attach: Driver disabled by Kconfig [ 351.585366][ T5623] az6027: no front-end attached [ 351.585366][ T5623] [ 351.619584][ T5623] az6027: usb out operation failed. (-71) [ 351.619611][ T5623] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 351.787107][ T5623] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 351.831374][ T1329] hsr_slave_0: left promiscuous mode [ 351.880186][ T1329] hsr_slave_1: left promiscuous mode [ 351.904023][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.929111][ T5623] dvb-usb: schedule remote query interval to 400 msecs. [ 351.929138][ T5623] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 352.103561][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.116768][ T5623] usb 5-1: USB disconnect, device number 8 [ 352.985030][ T5613] Bluetooth: hci5: command tx timeout [ 353.665299][ T5623] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 356.034143][ T1329] team0 (unregistering): Port device team_slave_1 removed [ 356.099093][ T1329] team0 (unregistering): Port device team_slave_0 removed [ 356.366377][ T7436] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 359.478548][ T7181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.498725][ T7181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.791337][ T7181] team0: Port device team_slave_0 added [ 359.920657][ T7181] team0: Port device team_slave_1 added [ 360.040332][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 360.097995][ T7181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.098016][ T7181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.098043][ T7181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.129757][ T7181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.129777][ T7181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.129804][ T7181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.290457][ T10] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 360.292043][ T10] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 360.292073][ T10] usb 4-1: config 1 has no interface number 0 [ 360.295324][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.295352][ T10] usb 4-1: Product: syz [ 360.295368][ T10] usb 4-1: Manufacturer: syz [ 360.295384][ T10] usb 4-1: SerialNumber: syz [ 360.376178][ T10] usb 4-1: 3:0 : does not exist [ 360.376208][ T10] usb 4-1: 3:0 : does not exist [ 360.731852][ T7485] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 360.751878][ T7181] hsr_slave_0: entered promiscuous mode [ 360.775245][ T7181] hsr_slave_1: entered promiscuous mode [ 360.782699][ T7181] debugfs: 'hsr0' already exists in 'hsr' [ 360.782726][ T7181] Cannot create hsr debugfs directory [ 362.481588][ T10] usb 4-1: USB disconnect, device number 12 [ 362.926981][ T7504] sctp: [Deprecated]: syz.4.417 (pid 7504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.926981][ T7504] Use struct sctp_sack_info instead [ 363.196395][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.196747][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.196967][ T7270] bridge_slave_0: entered allmulticast mode [ 363.204723][ T7270] bridge_slave_0: entered promiscuous mode [ 363.256057][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.256204][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.256401][ T7270] bridge_slave_1: entered allmulticast mode [ 363.286110][ T7270] bridge_slave_1: entered promiscuous mode [ 363.441304][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 363.469310][ T7270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.547499][ T7270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.595059][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 363.596010][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.597594][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.597623][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.597644][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.597684][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.677440][ T10] usb 4-1: config 0 descriptor?? [ 364.208181][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input11 [ 364.356372][ T10] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 364.420137][ T10] usb 4-1: USB disconnect, device number 13 [ 364.607213][ T7529] fido_id[7529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 365.030990][ T7270] team0: Port device team_slave_0 added [ 365.103966][ T7270] team0: Port device team_slave_1 added [ 365.841146][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.841168][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.841206][ T7270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.847143][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.847161][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.847201][ T7270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.540950][ T7270] hsr_slave_0: entered promiscuous mode [ 366.541795][ T7270] hsr_slave_1: entered promiscuous mode [ 366.542389][ T7270] debugfs: 'hsr0' already exists in 'hsr' [ 366.542428][ T7270] Cannot create hsr debugfs directory [ 368.128782][ T1329] bridge_slave_1: left allmulticast mode [ 368.128826][ T1329] bridge_slave_1: left promiscuous mode [ 368.129125][ T1329] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.311383][ T1329] bridge_slave_0: left allmulticast mode [ 368.311411][ T1329] bridge_slave_0: left promiscuous mode [ 368.311593][ T1329] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.101661][ T1329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.187965][ T1329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.211018][ T1329] bond0 (unregistering): Released all slaves [ 369.891865][ T1329] hsr_slave_0: left promiscuous mode [ 369.935289][ T1329] hsr_slave_1: left promiscuous mode [ 369.936781][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.959053][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.477840][ T1329] team0 (unregistering): Port device team_slave_1 removed [ 370.501302][ T1329] team0 (unregistering): Port device team_slave_0 removed [ 370.698605][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 372.509050][ T7181] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 372.557284][ T7181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.593696][ T7181] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 372.621998][ T7181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.637260][ T7181] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 372.682944][ T7181] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.804203][ T7181] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 372.859019][ T7181] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.065620][ T7270] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 373.094103][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.095481][ T7270] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 373.145819][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.164587][ T7270] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 373.189828][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.193573][ T7270] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 373.244559][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.389769][ T7181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.439565][ T7181] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.442873][ T7270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.471028][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.471282][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.502673][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.502850][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.508362][ T7270] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.528359][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.528563][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.564183][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.564275][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.546585][ T7181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.615416][ T7270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.009149][ T7181] veth0_vlan: entered promiscuous mode [ 375.047972][ T7181] veth1_vlan: entered promiscuous mode [ 375.156670][ T7270] veth0_vlan: entered promiscuous mode [ 375.158263][ T7181] veth0_macvtap: entered promiscuous mode [ 375.182842][ T7181] veth1_macvtap: entered promiscuous mode [ 375.201988][ T7270] veth1_vlan: entered promiscuous mode [ 375.245334][ T7181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.276388][ T7181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.380604][ T7270] veth0_macvtap: entered promiscuous mode [ 375.442506][ T87] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.456057][ T7270] veth1_macvtap: entered promiscuous mode [ 375.737289][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.827802][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.120977][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.121001][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.589874][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.589893][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.596875][ T1340] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.679143][ T1340] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.690084][ T1342] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.693403][ T1346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.693648][ T1346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.693861][ T1346] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.694343][ T1346] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.999892][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.999919][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.132994][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.133019][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.519476][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.519546][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.105854][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.105934][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.454489][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 480.010535][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 526.996051][ T38] INFO: task kworker/u8:17:1339 blocked in I/O wait for more than 143 seconds. [ 526.996085][ T38] Tainted: G L syzkaller #0 [ 526.996097][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 526.996107][ T38] task:kworker/u8:17 state:D stack:17344 pid:1339 tgid:1339 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 526.996167][ T38] Workqueue: writeback wb_workfn (flush-8:0) [ 526.996324][ T38] Call Trace: [ 526.996385][ T38] [ 526.996443][ T38] __schedule+0x16d9/0x5700 [ 526.996613][ T38] ? blk_mq_flush_plug_list+0x415/0x540 [ 526.996726][ T38] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 526.996776][ T38] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 526.996806][ T38] ? __blk_flush_plug+0x416/0x4d0 [ 526.996840][ T38] ? __pfx___schedule+0x10/0x10 [ 526.996876][ T38] ? schedule+0x90/0x2b0 [ 526.996906][ T38] schedule+0x164/0x2b0 [ 526.996937][ T38] io_schedule+0x80/0xe0 [ 526.996968][ T38] rq_qos_wait+0x269/0x360 [ 526.996993][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 526.997046][ T38] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 526.997074][ T38] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 526.997100][ T38] ? __pfx_rq_qos_wait+0x10/0x10 [ 526.997120][ T38] ? reacquire_held_locks+0x117/0x1a0 [ 526.997184][ T38] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 526.997212][ T38] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 526.997251][ T38] ? rt_spin_unlock+0x159/0x200 [ 526.997283][ T38] wbt_wait+0x326/0x550 [ 526.997316][ T38] ? __pfx_wbt_wait+0x10/0x10 [ 526.997348][ T38] ? __pfx_dd_bio_merge+0x10/0x10 [ 526.997381][ T38] ? __pfx_wbt_wait+0x10/0x10 [ 526.997411][ T38] __rq_qos_throttle+0x6b/0xb0 [ 526.997455][ T38] blk_mq_submit_bio+0x154a/0x2aa0 [ 526.997483][ T38] ? blk_mq_submit_bio+0x2fd/0x2aa0 [ 526.997511][ T38] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 526.998258][ T38] ? blk_cgroup_bio_start+0x5d7/0x670 [ 526.998295][ T38] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 526.998326][ T38] ? __submit_bio+0x7e/0x340 [ 526.998352][ T38] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 526.998395][ T38] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 526.998434][ T38] ? submit_bio_noacct+0x108c/0x1c00 [ 526.998483][ T38] ext4_bio_write_folio+0xf90/0x1780 [ 526.998550][ T38] mpage_process_page_bufs+0x6bd/0x8a0 [ 526.998588][ T38] mpage_prepare_extent_to_map+0xf92/0x1890 [ 526.998615][ T38] ? wb_writeback+0x42f/0xad0 [ 526.998662][ T38] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 526.998731][ T38] ? kmem_cache_alloc_noprof+0x3c6/0x690 [ 526.998780][ T38] ? ext4_init_io_end+0x29/0x130 [ 526.998800][ T38] ? ext4_init_io_end+0x29/0x130 [ 526.998834][ T38] ext4_do_writepages+0xb8d/0x4770 [ 526.998874][ T38] ? unwind_next_frame+0x8f/0x2550 [ 526.998940][ T38] ? stack_trace_save+0xa9/0x100 [ 526.998990][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 526.999018][ T38] ? kasan_save_track+0x3e/0x80 [ 526.999081][ T38] ? __pfx_ext4_do_writepages+0x10/0x10 [ 526.999116][ T38] ? __lock_acquire+0x747/0x2de0 [ 526.999158][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 526.999221][ T38] ? lock_acquire+0x115/0x350 [ 526.999274][ T38] ext4_writepages+0x241/0x3b0 [ 526.999306][ T38] ? __pfx_ext4_writepages+0x10/0x10 [ 526.999353][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 526.999384][ T38] ? __pfx_ext4_writepages+0x10/0x10 [ 526.999414][ T38] do_writepages+0x338/0x560 [ 526.999476][ T38] ? reacquire_held_locks+0x117/0x1a0 [ 526.999508][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 526.999544][ T38] __writeback_single_inode+0x136/0x1230 [ 526.999572][ T38] ? rt_spin_unlock+0x165/0x200 [ 526.999600][ T38] writeback_sb_inodes+0x9db/0x1ab0 [ 526.999653][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 526.999717][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 526.999758][ T38] __writeback_inodes_wb+0x114/0x240 [ 526.999791][ T38] wb_writeback+0x42f/0xad0 [ 526.999817][ T38] ? queue_io+0x1e1/0x450 [ 526.999846][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 526.999887][ T38] wb_workfn+0xc98/0x10f0 [ 526.999941][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 527.000000][ T38] ? lock_acquire+0x115/0x350 [ 527.000038][ T38] ? rcu_is_watching+0x16/0xb0 [ 527.000089][ T38] ? process_scheduled_works+0x97a/0x1630 [ 527.000128][ T38] process_scheduled_works+0xc3d/0x1630 [ 527.000195][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 527.000233][ T38] ? assign_work+0x3cf/0x5d0 [ 527.000268][ T38] worker_thread+0xa47/0xfb0 [ 527.000331][ T38] kthread+0x38b/0x470 [ 527.000356][ T38] ? __pfx_worker_thread+0x10/0x10 [ 527.000384][ T38] ? __pfx_kthread+0x10/0x10 [ 527.000409][ T38] ret_from_fork+0x514/0xb70 [ 527.000461][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 527.000483][ T38] ? __switch_to+0xc89/0x1420 [ 527.000519][ T38] ? __pfx_kthread+0x10/0x10 [ 527.000543][ T38] ret_from_fork_asm+0x1a/0x30 [ 527.000603][ T38] [ 527.000700][ T38] INFO: task syz-executor:5588 blocked in I/O wait for more than 143 seconds. [ 527.000721][ T38] Tainted: G L syzkaller #0 [ 527.000734][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 527.000744][ T38] task:syz-executor state:D stack:21760 pid:5588 tgid:5588 ppid:5587 task_flags:0x440100 flags:0x00080000 [ 527.000807][ T38] Call Trace: [ 527.000815][ T38] [ 527.000829][ T38] __schedule+0x16d9/0x5700 [ 527.000893][ T38] ? __pfx___schedule+0x10/0x10 [ 527.000932][ T38] ? schedule+0x90/0x2b0 [ 527.000964][ T38] schedule+0x164/0x2b0 [ 527.001005][ T38] io_schedule+0x80/0xe0 [ 527.001036][ T38] bit_wait_io+0x11/0xd0 [ 527.001077][ T38] __wait_on_bit+0xac/0x2f0 [ 527.001107][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 527.001140][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 527.001173][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 527.001203][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 527.001238][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 527.001285][ T38] do_get_write_access+0x671/0x1090 [ 527.001346][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 527.001377][ T38] __ext4_journal_get_write_access+0xf1/0x620 [ 527.001411][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 527.001438][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 527.001478][ T38] ext4_reserve_inode_write+0x294/0x360 [ 527.001515][ T38] __ext4_mark_inode_dirty+0x146/0x7b0 [ 527.001559][ T38] ext4_dirty_inode+0xd0/0x110 [ 527.001585][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 527.001610][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 527.001649][ T38] file_update_time_flags+0x39f/0x450 [ 527.001700][ T38] ext4_page_mkwrite+0x225/0x1150 [ 527.001738][ T38] ? reacquire_held_locks+0x117/0x1a0 [ 527.001774][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 527.001812][ T38] do_page_mkwrite+0x14a/0x310 [ 527.001850][ T38] do_wp_page+0x20a7/0x3d20 [ 527.001896][ T38] ? preempt_count_add+0x6a/0x140 [ 527.001926][ T38] ? __pfx_do_wp_page+0x10/0x10 [ 527.001950][ T38] ? rt_spin_lock+0x2d0/0x400 [ 527.001977][ T38] ? __pfx_rt_spin_lock+0x10/0x10 [ 527.002006][ T38] ? pte_offset_map_rw_nolock+0xea/0x160 [ 527.002037][ T38] handle_mm_fault+0xd69/0x28c0 [ 527.002079][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 527.002119][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 527.002144][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 527.002174][ T38] ? __pfx_set_user_sigmask+0x10/0x10 [ 527.002244][ T38] do_user_addr_fault+0xa4f/0x1340 [ 527.002282][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 527.002309][ T38] exc_page_fault+0x6a/0xc0 [ 527.002349][ T38] asm_exc_page_fault+0x26/0x30 [ 527.002397][ T38] RIP: 0033:0x7efe64ebc6e2 [ 527.002418][ T38] RSP: 002b:00007ffdd7cf6040 EFLAGS: 00010202 [ 527.002464][ T38] RAX: 00007efe62ee8000 RBX: 000055557a6c98a0 RCX: 0000000000000002 [ 527.002478][ T38] RDX: 00000000000023fe RSI: 000055557a6bb288 RDI: 0000000000000004 [ 527.002489][ T38] RBP: 00007ffdd7cf6540 R08: 000055557a6bb298 R09: 000000000000009e [ 527.002497][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdd7cf6380 [ 527.002506][ T38] R13: 00007ffdd7cf6170 R14: 585858582e7a7973 R15: 00007ffdd7cf60c0 [ 527.002526][ T38] [ 527.002554][ T38] INFO: task syz.4.429:7547 blocked in I/O wait for more than 143 seconds. [ 527.002569][ T38] Tainted: G L syzkaller #0 [ 527.002576][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 527.002581][ T38] task:syz.4.429 state:D stack:24872 pid:7547 tgid:7547 ppid:5607 task_flags:0x440040 flags:0x00080002 [ 527.002613][ T38] Call Trace: [ 527.002617][ T38] [ 527.002624][ T38] __schedule+0x16d9/0x5700 [ 527.002657][ T38] ? __pfx___schedule+0x10/0x10 [ 527.002678][ T38] ? schedule+0x90/0x2b0 [ 527.002696][ T38] schedule+0x164/0x2b0 [ 527.002712][ T38] io_schedule+0x80/0xe0 [ 527.002729][ T38] bit_wait_io+0x11/0xd0 [ 527.002746][ T38] __wait_on_bit+0xac/0x2f0 [ 527.002763][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 527.002781][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 527.002799][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 527.002815][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 527.002834][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 527.002853][ T38] do_get_write_access+0x671/0x1090 [ 527.002878][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 527.002895][ T38] __ext4_journal_get_write_access+0xf1/0x620 [ 527.002912][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 527.002927][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 527.002948][ T38] ext4_reserve_inode_write+0x294/0x360 [ 527.002968][ T38] __ext4_mark_inode_dirty+0x146/0x7b0 [ 527.002992][ T38] ext4_dirty_inode+0xd0/0x110 [ 527.003006][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 527.003019][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 527.003039][ T38] file_update_time_flags+0x39f/0x450 [ 527.003065][ T38] ext4_page_mkwrite+0x225/0x1150 [ 527.003086][ T38] ? __pfx_filemap_fault+0x10/0x10 [ 527.003102][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 527.003119][ T38] ? lock_acquire+0x115/0x350 [ 527.003136][ T38] do_page_mkwrite+0x14a/0x310 [ 527.003157][ T38] do_pte_missing+0x734/0x28f0 [ 527.003179][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 527.003197][ T38] handle_mm_fault+0xf64/0x28c0 [ 527.003215][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 527.003236][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 527.003250][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 527.003266][ T38] ? __pfx_do_futex+0x10/0x10 [ 527.003308][ T38] do_user_addr_fault+0xa4f/0x1340 [ 527.003327][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 527.003342][ T38] exc_page_fault+0x6a/0xc0 [ 527.003360][ T38] asm_exc_page_fault+0x26/0x30 [ 527.003372][ T38] RIP: 0033:0x7f847c5527a9 [ 527.003383][ T38] RSP: 002b:00007fff604c0610 EFLAGS: 00010202 [ 527.003393][ T38] RAX: 0000001b33621000 RBX: ffffffff8b4f816f RCX: 0000001b33620ff8 [ 527.003403][ T38] RDX: 0000001b3302421c RSI: 0000000000000008 RDI: 00007f847d435720 [ 527.003411][ T38] RBP: 0000000000000019 R08: 00007f847c8f0000 R09: 00007f847c8f2000 [ 527.003419][ T38] R10: 000000008b4f8173 R11: 0000000000000003 R12: 00007f847c906038 [ 527.003427][ T38] R13: 0000000000000018 R14: ffffffff8b4f8f9c R15: 00007f847d435720 [ 527.003437][ T38] ? trace_ma_read+0x3c/0x1e0 [ 527.003485][ T38] ? mas_erase+0x44f/0x8f0 [ 527.003509][ T38] [ 527.003514][ T38] INFO: task syz.3.430:7550 blocked in I/O wait for more than 143 seconds. [ 527.003525][ T38] Tainted: G L syzkaller #0 [ 527.003531][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 527.003536][ T38] task:syz.3.430 state:D stack:26920 pid:7550 tgid:7550 ppid:5610 task_flags:0x440040 flags:0x00080002 [ 527.003572][ T38] Call Trace: [ 527.003576][ T38] [ 527.003583][ T38] __schedule+0x16d9/0x5700 [ 527.003615][ T38] ? __pfx___schedule+0x10/0x10 [ 527.003636][ T38] ? schedule+0x90/0x2b0 [ 527.003653][ T38] schedule+0x164/0x2b0 [ 527.003670][ T38] io_schedule+0x80/0xe0 [ 527.003686][ T38] bit_wait_io+0x11/0xd0 [ 527.003704][ T38] __wait_on_bit+0xac/0x2f0 [ 527.003720][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 527.003738][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 527.003756][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 527.003772][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 527.003791][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 527.003810][ T38] do_get_write_access+0x671/0x1090 [ 527.003835][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 527.003852][ T38] __ext4_journal_get_write_access+0xf1/0x620 [ 527.003870][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 527.003884][ T38] ? jbd2__journal_start+0x145/0x5d0 [ 527.003902][ T38] ext4_reserve_inode_write+0x294/0x360 [ 527.003921][ T38] __ext4_mark_inode_dirty+0x146/0x7b0 [ 527.003945][ T38] ext4_dirty_inode+0xd0/0x110 [ 527.003959][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 527.003973][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 527.003989][ T38] ? mnt_get_write_access+0x26a/0x2d0 [ 527.004005][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 527.004025][ T38] touch_atime+0x568/0x670 [ 527.004040][ T38] ? ext4_file_mmap_prepare+0x286/0x460 [ 527.004068][ T38] ext4_file_mmap_prepare+0x286/0x460 [ 527.004091][ T38] mmap_region+0xe9f/0x2240 [ 527.004114][ T38] ? __pfx_mmap_region+0x10/0x10 [ 527.004129][ T38] ? try_to_take_rt_mutex+0x842/0xb00 [ 527.004144][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 527.004161][ T38] ? __lock_acquire+0x747/0x2de0 [ 527.004231][ T38] ? mt_find+0x186/0x630 [ 527.004251][ T38] ? mt_find+0x5ff/0x630 [ 527.004270][ T38] ? mt_find+0x186/0x630 [ 527.004287][ T38] ? __pfx_mt_find+0x10/0x10 [ 527.004309][ T38] ? bpf_lsm_mmap_addr+0x9/0x50 [ 527.004328][ T38] ? security_mmap_addr+0x71/0x240 [ 527.004354][ T38] ? shmem_mapping+0xd/0x50 [ 527.004366][ T38] ? memfd_check_seals_mmap+0xcb/0x230 [ 527.004387][ T38] do_mmap+0xe0e/0x1310 [ 527.004407][ T38] ? __pfx_do_mmap+0x10/0x10 [ 527.004425][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 527.004445][ T38] ? rwbase_write_lock+0x550/0x720 [ 527.004470][ T38] vm_mmap_pgoff+0x275/0x4e0 [ 527.004489][ T38] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 527.004506][ T38] ? __fget_files+0x2a/0x420 [ 527.004518][ T38] ? __fget_files+0x3a8/0x420 [ 527.004531][ T38] ? __fget_files+0x2a/0x420 [ 527.004546][ T38] ksys_mmap_pgoff+0x4a6/0x720 [ 527.004564][ T38] ? __x64_sys_mmap+0x7f/0x140 [ 527.004580][ T38] do_syscall_64+0x166/0x520 [ 527.004613][ T38] ? trace_irq_disable+0x3b/0x140 [ 527.004638][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.004651][ T38] ? clear_bhb_loop+0x70/0xc0 [ 527.004667][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.004679][ T38] RIP: 0033:0x7f64e9fedec2 [ 527.004690][ T38] RSP: 002b:00007ffd6319dd48 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 527.004702][ T38] RAX: ffffffffffffffda RBX: 0000001b32f64000 RCX: 00007f64e9fedec2 [ 527.004712][ T38] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32f64000 [ 527.004720][ T38] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 527.004728][ T38] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000083 [ 527.004735][ T38] R13: 00000000000927c0 R14: 0000000000056013 R15: 00007ffd6319e020 [ 527.004754][ T38] [ 527.004764][ T38] [ 527.004764][ T38] Showing all locks held in the system: [ 527.004789][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 527.004814][ T38] #0: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 527.004881][ T38] locks held by kworker/u8:17/1339: 4, on CPU#0: [ 527.004890][ T38] #0: ffff88801ee97938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 527.004926][ T38] #1: ffffc900070afc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 527.004960][ T38] #2: ffff8880373000e0 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 527.004995][ T38] #3: ffff8880372dcd98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 527.005042][ T38] locks held by getty/5354: 2, on CPU#1: [ 527.005050][ T38] #0: ffff8880298f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 527.005120][ T38] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 527.005175][ T38] locks held by syz-executor/5588: 3, on CPU#1: [ 527.005183][ T38] #0: ffff8880366d7948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 527.005217][ T38] #1: ffff888037300688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 527.005249][ T38] #2: ffff88803730cbb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 527.005287][ T38] locks held by syz.4.429/7547: 3, on CPU#0: [ 527.005295][ T38] #0: ffff8880271eabc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 527.005328][ T38] #1: ffff888037300688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 527.005359][ T38] #2: ffff88803730cbb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 527.005388][ T38] locks held by syz.3.430/7550: 3, on CPU#0: [ 527.005396][ T38] #0: ffff88803b789f30 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 527.005426][ T38] #1: ffff888037300510 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 527.005465][ T38] #2: ffff88803730cbb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 527.005495][ T38] [ 527.005498][ T38] ============================================= [ 527.005498][ T38] [ 527.005504][ T38] NMI backtrace for cpu 1 [ 527.005516][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 527.005533][ T38] Tainted: [L]=SOFTLOCKUP [ 527.005538][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.005545][ T38] Call Trace: [ 527.005550][ T38] [ 527.005555][ T38] dump_stack_lvl+0xe8/0x150 [ 527.005577][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 527.005610][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 527.005638][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 527.005654][ T38] sys_info+0x135/0x170 [ 527.005665][ T38] watchdog+0xfd7/0x1030 [ 527.005685][ T38] ? watchdog+0x1c7/0x1030 [ 527.005703][ T38] kthread+0x38b/0x470 [ 527.005716][ T38] ? __pfx_watchdog+0x10/0x10 [ 527.005730][ T38] ? __pfx_kthread+0x10/0x10 [ 527.005743][ T38] ret_from_fork+0x514/0xb70 [ 527.005756][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 527.005769][ T38] ? __switch_to+0xc89/0x1420 [ 527.005787][ T38] ? __pfx_kthread+0x10/0x10 [ 527.005800][ T38] ret_from_fork_asm+0x1a/0x30 [ 527.005819][ T38] [ 527.005824][ T38] Sending NMI from CPU 1 to CPUs 0: [ 527.005874][ C0] NMI backtrace for cpu 0 [ 527.005892][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 527.005915][ C0] Tainted: [L]=SOFTLOCKUP [ 527.005921][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.005930][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 527.005956][ C0] Code: ac 61 02 e9 93 d8 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 cc 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 527.005971][ C0] RSP: 0018:ffffffff8de07ca0 EFLAGS: 00000242 [ 527.005987][ C0] RAX: 0000000000368619 RBX: ffffffff819a8000 RCX: 8000000000000001 [ 527.006001][ C0] RDX: 0000000000000001 RSI: ffffffff8d8cb696 RDI: ffffffff8bcc2a80 [ 527.006013][ C0] RBP: ffffffff8de07d78 R08: ffff8880b8633e9b R09: 1ffff110170c67d3 [ 527.006027][ C0] R10: dffffc0000000000 R11: ffffed10170c67d4 R12: 0000000000000000 [ 527.006039][ C0] R13: 1ffffffff1bdedf8 R14: 1ffffffff1bc0f9c R15: dffffc0000000000 [ 527.006052][ C0] FS: 0000000000000000(0000) GS:ffff888125bce000(0000) knlGS:0000000000000000 [ 527.006067][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.006079][ C0] CR2: 0000562d75316168 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 527.006096][ C0] Call Trace: [ 527.006103][ C0] [ 527.006109][ C0] default_idle+0x9/0x20 [ 527.006136][ C0] default_idle_call+0x72/0xb0 [ 527.006161][ C0] do_idle+0x2e0/0x540 [ 527.006183][ C0] ? __pfx_do_idle+0x10/0x10 [ 527.006206][ C0] ? do_idle+0x5/0x540 [ 527.006226][ C0] cpu_startup_entry+0x43/0x60 [ 527.006247][ C0] rest_init+0x378/0x3a0 [ 527.006263][ C0] ? __pfx_rest_init+0x10/0x10 [ 527.006282][ C0] ? __pfx_kernel_init+0x10/0x10 [ 527.006299][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 527.006358][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 527.006396][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 527.006419][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 527.006511][ C0] start_kernel+0x392/0x3e0 [ 527.006578][ C0] x86_64_start_reservations+0x24/0x30 [ 527.006658][ C0] x86_64_start_kernel+0x137/0x1b0 [ 527.006677][ C0] common_startup_64+0x13e/0x157 [ 527.006704][ C0] [ 527.006883][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 529.023196][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 529.034422][ T38] Tainted: [L]=SOFTLOCKUP [ 529.038749][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.048848][ T38] Call Trace: [ 529.052144][ T38] [ 529.055089][ T38] vpanic+0x56d/0xa60 [ 529.059082][ T38] ? __pfx___schedule+0x10/0x10 [ 529.063945][ T38] ? __pfx_vpanic+0x10/0x10 [ 529.068472][ T38] panic+0xc5/0xd0 [ 529.072206][ T38] ? __pfx_panic+0x10/0x10 [ 529.076624][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 529.082113][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 529.087525][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 529.093714][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 529.099879][ T38] watchdog+0x1030/0x1030 [ 529.104233][ T38] ? watchdog+0x1c7/0x1030 [ 529.108663][ T38] kthread+0x38b/0x470 [ 529.112828][ T38] ? __pfx_watchdog+0x10/0x10 [ 529.117514][ T38] ? __pfx_kthread+0x10/0x10 [ 529.122123][ T38] ret_from_fork+0x514/0xb70 [ 529.126735][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 529.131889][ T38] ? __switch_to+0xc89/0x1420 [ 529.136604][ T38] ? __pfx_kthread+0x10/0x10 [ 529.141208][ T38] ret_from_fork_asm+0x1a/0x30 [ 529.145999][ T38] [ 529.149310][ T38] Kernel Offset: disabled [ 529.153666][ T38] Rebooting in 86400 seconds..