last executing test programs: 8.905208995s ago: executing program 0 (id=260): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x100) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e24, @private=0xa010100}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) 8.756313034s ago: executing program 3 (id=263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) readahead(0xffffffffffffffff, 0x6, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x9}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}, 0x0, 0x0, 0x1e, 0x0, "3f9c4c403fb2292c42675dd3a9fe9379c36b8e76c2fa00005088ebe5facc1a8517e6a5e4128f79dd1a59cca90ce3e1b85253f099e56bc82c2c0e2a62b1a005de77ce420e56a79695134f51a32b379cd2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0xc88}}, 0x0, 0x0, 0xa, 0x0, "25c633e7eb9cc056ed394ba71b6e5d7bf4d988ea7c340885973233ddc0946fbd53f014e2854b661b3f9f55a7e67ba35c3537ea83c3817a08930cf99a34dfc5e167b887734921da2397b9cc8b1e235b95"}, 0xd8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "a30b3b68af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000e00000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 8.710555492s ago: executing program 0 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x40040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='schedstat\x00') preadv(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x1, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x3) 7.043081803s ago: executing program 3 (id=265): getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000600), 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 6.323295019s ago: executing program 0 (id=267): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bind$packet(r0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001740)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) 4.891872656s ago: executing program 3 (id=271): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x48000047, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8840) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8b1, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x221c, 0x134d, 0x16, 0x0, 0x0) 4.890267204s ago: executing program 0 (id=272): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r1, 0x7fffffff, 0x12, 0x0, 0x0, @ib={0x1b, 0x8, 0x6, {"78c36cbe7e38dade0099fe4e9d908e9b"}, 0xffff, 0x1ff, 0xfffffffeffffffff}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0xd8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x1, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x1, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x0, 0x1bc}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 4.004909048s ago: executing program 3 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x12, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.808115005s ago: executing program 1 (id=276): r0 = fanotify_init(0x200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e07022d0c"], 0xa) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x10000000000002d7) r2 = io_uring_setup(0x5e0, &(0x7f0000000340)={0x0, 0xafd7, 0x0, 0x0, 0x2d2}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x5}, 0x1) fanotify_mark(r0, 0x455, 0x8000053, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 3.589657963s ago: executing program 1 (id=279): recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000440)=""/135, 0x0, 0x7000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 3.360079418s ago: executing program 0 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) ioctl(r0, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r0, 0xc058560f, &(0x7f0000000700)="0000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400000000000000002c0100"/84) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 3.203558969s ago: executing program 1 (id=283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 3.070764218s ago: executing program 1 (id=284): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0x5, 0x0) eventfd2(0x0, 0x80001) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) close(0x4) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.905883573s ago: executing program 4 (id=285): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) accept4$unix(r0, 0x0, 0x0, 0x80800) 2.691969731s ago: executing program 2 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000500)="000000a0", 0x4, 0x10) pwrite64(r1, &(0x7f0000000600)='\nBTO', 0x4, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='dwc2-pci\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='0000:00:03.0\x00', 0xc) 2.623110385s ago: executing program 4 (id=287): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendto(r2, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x2) close(r1) close(r2) recvfrom(r1, &(0x7f0000000480), 0x100, 0x100, 0x0, 0x0) 2.523888225s ago: executing program 4 (id=288): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0xee01, r1, r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000800)={'dvmrp1\x00', 0x0}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x5, 0x29, 0x7, 0xf7}, 'syz1\x00', 0x54}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_emit_ethernet(0x520, &(0x7f00000002c0)=ANY=[], 0x0) 2.510745836s ago: executing program 2 (id=289): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80001) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 2.188309276s ago: executing program 4 (id=290): openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x8000000000000001}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0xc, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 2.180312821s ago: executing program 1 (id=291): write(0xffffffffffffffff, &(0x7f0000000440)='4', 0x1) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x5d) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) r1 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0x891c1, 0x0, 0x101, 0x10a}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006"], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 1.974121281s ago: executing program 3 (id=292): socket$nl_generic(0x10, 0x3, 0x10) close(0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xefa9, 0x800, 0x43, 0x161}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_clone3(0x0, 0x0) read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0xfffffd24) 1.502069391s ago: executing program 0 (id=293): r0 = syz_usb_connect(0x0, 0x6c, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109025a00030100c0000904000000010100000904010000010200000904010101010200000b2402010203180144ac00070501010002010904020000010200000904020101010200000b2402010203180144ac0007058201000201"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000200)={0x2}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000600), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000700), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000800), 0x2, 0x0) 1.403842741s ago: executing program 2 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') 1.333601122s ago: executing program 1 (id=295): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) dup3(0xffffffffffffffff, r2, 0x0) write(r2, 0x0, 0x0) 1.078728424s ago: executing program 2 (id=296): socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x3a) bind$phonet(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) epoll_create(0x752) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 1.078406726s ago: executing program 4 (id=297): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xb963, 0xa9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SET_CHILD_SUBREAPER(0x4f, 0x0) connect$unix(r2, 0x0, 0x0) 784.948909ms ago: executing program 2 (id=298): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x444, &(0x7f0000000800)="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", 0xfe, 0x27, 0x8, 0x6, 0x4c6f, 0x2, 0x5, 'syz0\x00'}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 546.638241ms ago: executing program 4 (id=299): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 52.702269ms ago: executing program 3 (id=300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=301): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 75.935439][ T5582] cgroup: Unknown subsys name 'net' [ 76.155777][ T5582] cgroup: Unknown subsys name 'cpuset' [ 76.221952][ T5582] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.270444][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.054617][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.067756][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.080761][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.083851][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.084799][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.085859][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.086983][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.087221][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.098206][ T4911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.099319][ T4911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.138424][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.187176][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.197233][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.201508][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.211692][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.222844][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.224155][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.225118][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.227455][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.229658][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.286006][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.312849][ T4911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.320354][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.336296][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.345243][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.212324][ T59] Bluetooth: hci0: command tx timeout [ 84.212330][ T5605] Bluetooth: hci3: command tx timeout [ 84.292563][ T59] Bluetooth: hci1: command tx timeout [ 84.371084][ T59] Bluetooth: hci2: command tx timeout [ 84.454742][ T59] Bluetooth: hci4: command tx timeout [ 84.960825][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.962711][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.962902][ T5598] bridge_slave_0: entered allmulticast mode [ 84.966468][ T5598] bridge_slave_0: entered promiscuous mode [ 84.970152][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.970320][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.970465][ T5597] bridge_slave_0: entered allmulticast mode [ 84.976758][ T5597] bridge_slave_0: entered promiscuous mode [ 85.037316][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.037426][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.037570][ T5598] bridge_slave_1: entered allmulticast mode [ 85.039261][ T5598] bridge_slave_1: entered promiscuous mode [ 85.040104][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.040199][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.040291][ T5597] bridge_slave_1: entered allmulticast mode [ 85.043998][ T5597] bridge_slave_1: entered promiscuous mode [ 85.096665][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.096767][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.097219][ T5599] bridge_slave_0: entered allmulticast mode [ 85.098855][ T5599] bridge_slave_0: entered promiscuous mode [ 85.102396][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.102519][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.102684][ T5595] bridge_slave_0: entered allmulticast mode [ 85.106137][ T5595] bridge_slave_0: entered promiscuous mode [ 85.148697][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.148808][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.148949][ T5596] bridge_slave_0: entered allmulticast mode [ 85.152400][ T5596] bridge_slave_0: entered promiscuous mode [ 85.156982][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.157102][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.157260][ T5599] bridge_slave_1: entered allmulticast mode [ 85.163448][ T5599] bridge_slave_1: entered promiscuous mode [ 85.166053][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.166162][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.166609][ T5595] bridge_slave_1: entered allmulticast mode [ 85.169211][ T5595] bridge_slave_1: entered promiscuous mode [ 85.217561][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.217668][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.218132][ T5596] bridge_slave_1: entered allmulticast mode [ 85.220745][ T5596] bridge_slave_1: entered promiscuous mode [ 85.268922][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.275414][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.322615][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.324629][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.347919][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.358138][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.389464][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.392296][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.395395][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.433635][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.460711][ T5598] team0: Port device team_slave_0 added [ 85.468182][ T5597] team0: Port device team_slave_0 added [ 85.511456][ T5598] team0: Port device team_slave_1 added [ 85.513763][ T5597] team0: Port device team_slave_1 added [ 85.531272][ T5599] team0: Port device team_slave_0 added [ 85.535065][ T5595] team0: Port device team_slave_0 added [ 85.565544][ T5596] team0: Port device team_slave_0 added [ 85.567455][ T5599] team0: Port device team_slave_1 added [ 85.569018][ T5595] team0: Port device team_slave_1 added [ 85.601694][ T5596] team0: Port device team_slave_1 added [ 85.627319][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.627329][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.627342][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.629428][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.629442][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.629465][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.722183][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.722199][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.722221][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.725172][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.725186][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.725208][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.746451][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.746468][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.746500][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.747683][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.747695][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.747717][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.782657][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.782673][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.782696][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.785380][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.785392][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.785415][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.786626][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.786637][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.786656][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.798564][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.798579][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.798602][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.997862][ T5597] hsr_slave_0: entered promiscuous mode [ 86.000117][ T5597] hsr_slave_1: entered promiscuous mode [ 86.016133][ T5598] hsr_slave_0: entered promiscuous mode [ 86.017410][ T5598] hsr_slave_1: entered promiscuous mode [ 86.018298][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 86.018391][ T5598] Cannot create hsr debugfs directory [ 86.116251][ T5599] hsr_slave_0: entered promiscuous mode [ 86.117539][ T5599] hsr_slave_1: entered promiscuous mode [ 86.118438][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 86.118458][ T5599] Cannot create hsr debugfs directory [ 86.130332][ T5595] hsr_slave_0: entered promiscuous mode [ 86.131867][ T5595] hsr_slave_1: entered promiscuous mode [ 86.132722][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 86.132743][ T5595] Cannot create hsr debugfs directory [ 86.146982][ T5596] hsr_slave_0: entered promiscuous mode [ 86.148277][ T5596] hsr_slave_1: entered promiscuous mode [ 86.149155][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 86.149177][ T5596] Cannot create hsr debugfs directory [ 86.291271][ T59] Bluetooth: hci3: command tx timeout [ 86.291282][ T5605] Bluetooth: hci0: command tx timeout [ 86.371122][ T59] Bluetooth: hci1: command tx timeout [ 86.451289][ T59] Bluetooth: hci2: command tx timeout [ 86.531213][ T59] Bluetooth: hci4: command tx timeout [ 86.856204][ T10] cfg80211: failed to load regulatory.db [ 87.518407][ T5598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.555810][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.559056][ T5598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.585741][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.599904][ T5598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.655000][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.676066][ T5598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.716103][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.819159][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.857862][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.869216][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.900167][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.908632][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.934956][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.956852][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.995671][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.128589][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.155643][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.159307][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.185943][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.189825][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.225151][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.248595][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.285757][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.371167][ T59] Bluetooth: hci3: command tx timeout [ 88.371955][ T59] Bluetooth: hci0: command tx timeout [ 88.429976][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.451249][ T59] Bluetooth: hci1: command tx timeout [ 88.456089][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.474167][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.503750][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.519661][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.531157][ T59] Bluetooth: hci2: command tx timeout [ 88.553522][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.576162][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.605598][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.612948][ T59] Bluetooth: hci4: command tx timeout [ 88.779533][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.780729][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.816946][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.823132][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.864859][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.868349][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.894272][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.911255][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.934643][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.995536][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.013369][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.049800][ T2171] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.049939][ T2171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.092199][ T2171] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.092699][ T2171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.158978][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.193471][ T2171] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.193589][ T2171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.197884][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.254794][ T2171] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.254885][ T2171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.328939][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.379107][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.382731][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.387988][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.438460][ T2171] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.438556][ T2171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.569447][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.625937][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.626141][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.659466][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.724857][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.724930][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.859811][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.944324][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.948852][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.043327][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.046608][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.453533][ T5605] Bluetooth: hci3: command tx timeout [ 90.453574][ T59] Bluetooth: hci0: command tx timeout [ 90.532499][ T59] Bluetooth: hci1: command tx timeout [ 90.603166][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.611128][ T59] Bluetooth: hci2: command tx timeout [ 90.691110][ T59] Bluetooth: hci4: command tx timeout [ 90.867748][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.005636][ T5598] veth0_vlan: entered promiscuous mode [ 91.083140][ T5598] veth1_vlan: entered promiscuous mode [ 91.297936][ T5597] veth0_vlan: entered promiscuous mode [ 91.351754][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.386796][ T5598] veth0_macvtap: entered promiscuous mode [ 91.415178][ T5597] veth1_vlan: entered promiscuous mode [ 91.483665][ T5598] veth1_macvtap: entered promiscuous mode [ 91.545634][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.605623][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.608397][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.652747][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.681808][ T5597] veth0_macvtap: entered promiscuous mode [ 91.727109][ T5597] veth1_macvtap: entered promiscuous mode [ 91.934326][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.988248][ T5596] veth0_vlan: entered promiscuous mode [ 92.088224][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.146496][ T5596] veth1_vlan: entered promiscuous mode [ 92.155803][ T5595] veth0_vlan: entered promiscuous mode [ 92.282849][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.282875][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.310225][ T5595] veth1_vlan: entered promiscuous mode [ 92.431151][ T5599] veth0_vlan: entered promiscuous mode [ 92.632889][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.632907][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.639811][ T5599] veth1_vlan: entered promiscuous mode [ 92.704515][ T5596] veth0_macvtap: entered promiscuous mode [ 92.706514][ T2171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.706531][ T2171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.797707][ T5596] veth1_macvtap: entered promiscuous mode [ 92.859917][ T5595] veth0_macvtap: entered promiscuous mode [ 92.878757][ T2171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.878775][ T2171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.910453][ T5595] veth1_macvtap: entered promiscuous mode [ 92.978520][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.050535][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.074638][ T5599] veth0_macvtap: entered promiscuous mode [ 93.118645][ T5599] veth1_macvtap: entered promiscuous mode [ 93.137526][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.195054][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.364505][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.434290][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.729339][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.927172][ T5797] netlink: 'syz.3.6': attribute type 2 has an invalid length. [ 93.927193][ T5797] netlink: 1279 bytes leftover after parsing attributes in process `syz.3.6'. [ 94.353906][ T3279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.353927][ T3279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.795273][ T5806] netlink: 'syz.3.9': attribute type 10 has an invalid length. [ 94.866583][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.884804][ T5806] bond0: (slave team0): Enslaving as an active interface with an up link [ 94.982235][ T2171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.982253][ T2171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.366824][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.366841][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.507102][ T648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.507118][ T648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.829759][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.829777][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.981971][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.038325][ T3412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.038342][ T3412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.157751][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.158054][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.158481][ T153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.158845][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.231264][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.281963][ T153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.283152][ T153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.283328][ T153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.284270][ T153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.284470][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.284638][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.285085][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.285266][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.288848][ T153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.382850][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.383256][ T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.383627][ T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.383996][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.387931][ T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.781170][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 97.871994][ T5733] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.063592][ T5840] nbd3: detected capacity change from 0 to 8 [ 98.111322][ T5733] usb 1-1: Using ep0 maxpacket: 8 [ 98.154300][ T5733] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 98.154347][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.154368][ T5733] usb 1-1: Product: syz [ 98.154385][ T5733] usb 1-1: Manufacturer: syz [ 98.154401][ T5733] usb 1-1: SerialNumber: syz [ 98.246010][ T5842] block nbd3: shutting down sockets [ 98.319156][ T5733] usb 1-1: config 0 descriptor?? [ 98.370466][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.370575][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 98.413868][ T63] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.413901][ T63] Buffer I/O error on dev nbd3, logical block 0, async page read [ 98.415171][ T63] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.415198][ T63] Buffer I/O error on dev nbd3, logical block 0, async page read [ 98.415323][ T63] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.415345][ T63] Buffer I/O error on dev nbd3, logical block 0, async page read [ 98.415454][ T63] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.415475][ T63] Buffer I/O error on dev nbd3, logical block 0, async page read [ 98.415670][ T63] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.415692][ T63] Buffer I/O error on dev nbd3, logical block 0, async page read [ 98.438989][ T63] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.439016][ T63] Buffer I/O error on dev nbd3, logical block 0, async page read [ 98.444231][ T56] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.444270][ T56] Buffer I/O error on dev nbd3, logical block 0, async page read [ 98.444321][ T5827] ldm_validate_partition_table(): Disk read failed. [ 98.444415][ T56] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.444438][ T56] Buffer I/O error on dev nbd3, logical block 0, async page read [ 98.444635][ T56] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 98.444657][ T56] Buffer I/O error on dev nbd3, logical block 0, async page read [ 98.446279][ T5827] Dev nbd3: unable to read RDB block 0 [ 98.447752][ T5827] nbd3: unable to read partition table [ 98.447961][ T5827] nbd3: partition table beyond EOD, truncated [ 98.514520][ T5827] ldm_validate_partition_table(): Disk read failed. [ 98.515061][ T5827] Dev nbd3: unable to read RDB block 0 [ 98.519475][ T5827] nbd3: unable to read partition table [ 98.519688][ T5827] nbd3: partition table beyond EOD, truncated [ 98.688269][ T5733] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 99.337893][ T5733] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 99.436369][ T5733] usb 1-1: USB disconnect, device number 2 [ 101.084026][ T5874] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 101.084066][ T5874] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 101.084106][ T5874] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 101.234434][ T5732] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 101.291811][ T5874] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.338662][ T5880] fido_id[5880]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.593008][ T5874] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 103.486310][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 103.567483][ T5897] ceph: No mds server is up or the cluster is laggy [ 103.609736][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 104.003468][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 104.513172][ T5584] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 104.917718][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.747837][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.949742][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 105.949773][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 105.949794][ T10] usb 2-1: config 220 has no interface number 2 [ 105.949858][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 105.949883][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 105.949900][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 105.949917][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 105.984173][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 105.984204][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.984222][ T10] usb 2-1: Product: syz [ 105.984235][ T10] usb 2-1: Manufacturer: syz [ 105.984249][ T10] usb 2-1: SerialNumber: syz [ 106.020666][ T5933] CIFS: Attempting to mount //127.0.0.1/share [ 106.710657][ T10] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 106.710710][ T10] uvcvideo 2-1:220.0: No valid video chain found. [ 106.710904][ T10] usb 2-1: selecting invalid altsetting 0 [ 106.772664][ T5933] CIFS: VFS: Error connecting to socket. Aborting operation. [ 106.772840][ T5933] CIFS: VFS: cifs_mount failed w/return code = -4 [ 106.887000][ T10] usb 2-1: selecting invalid altsetting 0 [ 106.887042][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 106.961153][ T5604] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.138569][ T10] usb 2-1: USB disconnect, device number 2 [ 107.161552][ T5604] usb 1-1: Using ep0 maxpacket: 32 [ 107.165708][ T5604] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 107.165740][ T5604] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.165761][ T5604] usb 1-1: config 0 has no interface number 0 [ 107.165827][ T5604] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.167877][ T5604] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 107.167907][ T5604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.167929][ T5604] usb 1-1: Product: syz [ 107.167946][ T5604] usb 1-1: Manufacturer: syz [ 107.167961][ T5604] usb 1-1: SerialNumber: syz [ 107.291350][ T5584] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.384970][ T5604] usb 1-1: config 0 descriptor?? [ 107.443463][ T5584] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.443495][ T5584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.448967][ T5604] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 107.449097][ T5604] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 107.594237][ T5604] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 107.747749][ T5584] usb 3-1: config 0 descriptor?? [ 107.918520][ T5584] cp210x 3-1:0.0: cp210x converter detected [ 108.047040][ T5604] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 108.266712][ T5963] loop4: detected capacity change from 0 to 7 [ 108.284128][ T5604] usb 1-1: USB disconnect, device number 3 [ 108.285586][ T5604] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 108.401792][ T5584] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 108.666738][ T5963] loop4: [ 108.666761][ T5963] loop4: partition table partially beyond EOD, truncated [ 108.910195][ T5584] usb 3-1: cp210x converter now attached to ttyUSB0 [ 109.062564][ T5584] usb 3-1: USB disconnect, device number 2 [ 109.431536][ T10] IPVS: starting estimator thread 0... [ 109.499695][ T5584] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.510378][ T5584] cp210x 3-1:0.0: device disconnected [ 109.521186][ T5986] IPVS: using max 8 ests per chain, 19200 per kthread [ 110.201378][ T5725] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.372138][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.372187][ T5725] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.372210][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.448123][ T5725] usb 3-1: config 0 descriptor?? [ 110.695312][ T5725] usbhid 3-1:0.0: can't add hid device: -71 [ 110.695445][ T5725] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 110.843869][ T5725] usb 3-1: USB disconnect, device number 3 [ 111.142487][ T5604] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 111.293443][ T5604] usb 1-1: not running at top speed; connect to a high speed hub [ 111.296628][ T5604] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.296681][ T5604] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 111.296703][ T5604] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 111.347772][ T5604] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 111.347791][ T5604] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 111.347801][ T5604] usb 1-1: Product: syz [ 111.347808][ T5604] usb 1-1: Manufacturer: syz [ 111.365105][ T5725] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.428833][ T5604] sisusb 1-1:1.0: Invalid USB2VGA device [ 111.428868][ T5604] sisusb 1-1:1.0: probe with driver sisusb failed with error -22 [ 111.555777][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.555825][ T5725] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 111.555848][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.601426][ T5725] usb 3-1: config 0 descriptor?? [ 112.294960][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.295576][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.373178][ T6042] mmap: syz.1.80 (6042) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.492051][ T5725] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 112.545439][ T5725] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 112.924520][ T6055] netlink: 'syz.3.84': attribute type 4 has an invalid length. [ 112.956673][ T6055] netlink: 'syz.3.84': attribute type 4 has an invalid length. [ 113.691445][ T5725] usb 3-1: USB disconnect, device number 4 [ 113.691530][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 113.944346][ T5604] usb 1-1: USB disconnect, device number 4 [ 114.646439][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.685477][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.812402][ T5725] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.840361][ T36] audit: type=1326 audit(1785901453.482:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.0.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6796bee019 code=0x7ffc0000 [ 114.840406][ T36] audit: type=1326 audit(1785901453.482:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.0.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6796bee019 code=0x7ffc0000 [ 114.840442][ T36] audit: type=1326 audit(1785901453.482:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.0.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6796bee019 code=0x7ffc0000 [ 114.840540][ T36] audit: type=1326 audit(1785901453.482:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.0.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6796bee019 code=0x7ffc0000 [ 114.843583][ T36] audit: type=1326 audit(1785901453.482:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.0.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6796bee019 code=0x7ffc0000 [ 114.843627][ T36] audit: type=1326 audit(1785901453.482:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.0.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6796bee019 code=0x7ffc0000 [ 114.853102][ T36] audit: type=1326 audit(1785901453.502:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.0.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6796bee019 code=0x7ffc0000 [ 114.853148][ T36] audit: type=1326 audit(1785901453.502:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.0.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6796bee019 code=0x7ffc0000 [ 114.853184][ T36] audit: type=1326 audit(1785901453.502:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.0.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6796bee019 code=0x7ffc0000 [ 114.853220][ T36] audit: type=1326 audit(1785901453.502:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6079 comm="syz.0.92" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6796bee019 code=0x7ffc0000 [ 115.111005][ T5725] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.111056][ T5725] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 115.111078][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.149315][ T5725] usb 3-1: config 0 descriptor?? [ 115.179930][ T5725] pwc: Askey VC010 type 2 USB webcam detected. [ 115.601064][ T5725] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.728373][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 116.691108][ T5790] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.710216][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.737076][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.843600][ T5790] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 116.843631][ T5790] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 116.843654][ T5790] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 116.847019][ T5790] usb 2-1: New USB device found, idVendor=10b8, idProduct=0bc7, bcdDevice= 1.00 [ 116.847050][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.847069][ T5790] usb 2-1: Product: syz [ 116.847082][ T5790] usb 2-1: Manufacturer: syz [ 116.847096][ T5790] usb 2-1: SerialNumber: syz [ 116.927177][ T6100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.927514][ T6100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.927909][ T6100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.939748][ T5790] dvb-usb: found a 'DiBcom USB2.0 DVB-T reference design (MOD3000P)' in warm state. [ 116.989873][ T5790] dvb-usb: bulk message failed: -71 (3/0) [ 117.112566][ T5790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.115862][ T5790] dvbdev: DVB: registering new adapter (DiBcom USB2.0 DVB-T reference design (MOD3000P)) [ 117.115959][ T5790] usb 2-1: media controller created [ 117.221892][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.324687][ T5790] dvb-usb: bulk message failed: -71 (6/0) [ 117.330776][ T5790] dvb-usb: bulk message failed: -71 (6/0) [ 117.343264][ T5790] dvb-usb: no frontend was attached by 'DiBcom USB2.0 DVB-T reference design (MOD3000P)' [ 117.366815][ T5790] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 117.384350][ T5790] dvb-usb: schedule remote query interval to 150 msecs. [ 117.384382][ T5790] dvb-usb: DiBcom USB2.0 DVB-T reference design (MOD3000P) successfully initialized and connected. [ 117.573744][ T5790] dvb-usb: bulk message failed: -71 (1/0) [ 117.573796][ T5790] dvb-usb: error while querying for an remote control event. [ 117.737579][ T198] dvb-usb: bulk message failed: -71 (1/0) [ 117.737608][ T198] dvb-usb: error while querying for an remote control event. [ 117.896754][ T198] dvb-usb: bulk message failed: -71 (1/0) [ 117.896784][ T198] dvb-usb: error while querying for an remote control event. [ 118.051369][ T198] dvb-usb: bulk message failed: -71 (1/0) [ 118.051399][ T198] dvb-usb: error while querying for an remote control event. [ 118.229415][ T198] usb 2-1: USB disconnect, device number 3 [ 118.289320][ T5790] dvb-usb: bulk message failed: -19 (1/0) [ 118.289348][ T5790] dvb-usb: error while querying for an remote control event. [ 118.538434][ T198] dvb-usb: DiBcom USB2.0 DVB-T reference design (M successfully deinitialized and disconnected. [ 119.513585][ T9] syz1: Port: 1 Link DOWN [ 119.932064][ T1320] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.932113][ T1320] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.932147][ T1320] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.935753][ T1320] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.185571][ T5725] pwc: recv_control_msg error -71 req 02 val 2700 [ 120.191215][ T5725] pwc: recv_control_msg error -71 req 02 val 2c00 [ 120.191928][ T5725] pwc: recv_control_msg error -71 req 04 val 1000 [ 120.192374][ T5725] pwc: recv_control_msg error -71 req 04 val 1300 [ 120.192927][ T5725] pwc: recv_control_msg error -71 req 04 val 1400 [ 120.196987][ T5725] pwc: recv_control_msg error -71 req 02 val 2000 [ 120.197451][ T5725] pwc: recv_control_msg error -71 req 02 val 2100 [ 120.197966][ T5725] pwc: recv_control_msg error -71 req 04 val 1500 [ 120.198495][ T5725] pwc: recv_control_msg error -71 req 02 val 2500 [ 120.200794][ T5725] pwc: recv_control_msg error -71 req 02 val 2400 [ 120.206212][ T5725] pwc: recv_control_msg error -71 req 02 val 2600 [ 120.207711][ T5725] pwc: recv_control_msg error -71 req 02 val 2900 [ 120.208248][ T5725] pwc: recv_control_msg error -71 req 02 val 2800 [ 120.209233][ T5725] pwc: recv_control_msg error -71 req 04 val 1100 [ 120.217254][ T5725] pwc: recv_control_msg error -71 req 04 val 1200 [ 120.319543][ T5725] pwc: Registered as video103. [ 120.335437][ T5725] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 120.534669][ T5725] usb 3-1: USB disconnect, device number 5 [ 122.187864][ T5725] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 122.386275][ T5725] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.386323][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 122.386345][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 122.386368][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 122.386440][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 122.392943][ T5725] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 122.392972][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 122.392992][ T5725] usb 3-1: Product: syz [ 122.393005][ T5725] usb 3-1: Manufacturer: syz [ 122.393019][ T5725] usb 3-1: SerialNumber: syz [ 122.470066][ T5725] usb 3-1: config 0 descriptor?? [ 122.668566][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.123'. [ 122.730630][ T5725] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 122.730656][ T5725] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 122.936938][ T5725] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 122.936965][ T5725] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 122.936986][ T5725] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 123.144328][ T5725] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 123.973740][ T5725] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 123.974087][ T5725] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 124.060716][ T5725] usb 3-1: USB disconnect, device number 6 [ 124.610894][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 124.761202][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.304937][ T6225] warning: `syz.0.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.402112][ T6222] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 127.920760][ T6241] faux_driver vkms: [drm] Unknown color mode 25660; guessing buffer size. [ 128.445278][ T59] Bluetooth: hci3: connection err: -111 [ 128.501297][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 128.501755][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 128.546717][ T6248] ceph: No mds server is up or the cluster is laggy [ 129.117175][ T6271] Bluetooth: MGMT ver 1.23 [ 129.120103][ T6271] Bluetooth: hci0: unsupported parameter 255 [ 129.120123][ T6271] Bluetooth: hci0: unsupported parameter 768 [ 129.120145][ T6271] Bluetooth: hci0: unsupported parameter 255 [ 129.120156][ T6271] Bluetooth: hci0: unsupported parameter 768 [ 129.771903][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.901083][ T5870] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.921070][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 129.945844][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 129.945872][ T10] usb 5-1: config 0 has no interface number 0 [ 129.945983][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.946006][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 129.946031][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.946058][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.946098][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 129.946119][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.082197][ T10] usb 5-1: config 0 descriptor?? [ 130.086977][ T6292] (NULL device *): [drm] Primary plane not found [ 130.095645][ T6294] syz.0.163 (6294) used greatest stack depth: 19616 bytes left [ 130.144246][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 130.144299][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 130.144340][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.293927][ T6301] netlink: 'syz.1.165': attribute type 2 has an invalid length. [ 130.293948][ T6301] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 130.293960][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 130.367119][ T5870] usb 4-1: config 0 descriptor?? [ 130.378445][ T6284] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 130.442576][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 130.486914][ T10] usb 5-1: USB disconnect, device number 2 [ 130.701722][ T5584] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 130.736145][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 130.808541][ T5870] hid (null): bogus close delimiter [ 130.822350][ T5732] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.844778][ T5870] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 130.844816][ T5870] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 130.844843][ T5870] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 130.844870][ T5870] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 130.844896][ T5870] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 130.844922][ T5870] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 130.844948][ T5870] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 130.844974][ T5870] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 130.845000][ T5870] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 130.845026][ T5870] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x0 [ 130.845551][ T5870] logitech-djreceiver 0003:046D:C71F.0003: bogus close delimiter [ 130.845567][ T5870] logitech-djreceiver 0003:046D:C71F.0003: item 0 0 2 10 parsing failed [ 130.846368][ T5870] logitech-djreceiver 0003:046D:C71F.0003: logi_dj_probe: parse failed [ 130.846441][ T5870] logitech-djreceiver 0003:046D:C71F.0003: probe with driver logitech-djreceiver failed with error -22 [ 130.944408][ T6315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.973745][ T5584] usb 3-1: not running at top speed; connect to a high speed hub [ 130.981144][ T5584] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 130.981190][ T5584] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 130.981210][ T5584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.987274][ T5732] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 130.987300][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.987319][ T5732] usb 2-1: Product: syz [ 130.987331][ T5732] usb 2-1: Manufacturer: syz [ 130.987344][ T5732] usb 2-1: SerialNumber: syz [ 131.128039][ T822] usb 4-1: USB disconnect, device number 2 [ 131.192742][ T5584] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 132.045487][ T5584] videodev: could not get a free minor [ 132.045505][ T5584] uvcvideo 3-1:1.1: Failed to register meta-cap device (-23). [ 132.255914][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 132.255932][ T36] audit: type=1326 audit(1785901470.902:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6331 comm="syz.4.174" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd728cee019 code=0x7fc00000 [ 132.407868][ T50] usb 3-1: USB disconnect, device number 7 [ 132.466272][ T5732] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 132.466974][ T5732] kalmia 2-1:1.0: probe with driver kalmia failed with error -71 [ 132.562480][ T5732] usb 2-1: USB disconnect, device number 4 [ 132.947143][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947235][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.995068][ T36] audit: type=1326 audit(1785901471.632:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6331 comm="syz.4.174" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd728ce7d97 code=0x7fc00000 [ 133.557273][ T6354] binder: 6353:6354 ioctl c0306201 0 returned -14 [ 133.618119][ T6354] binder: 6353:6354 ioctl c0306201 200000000180 returned -14 [ 133.650988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.982793][ T6360] usb usb7: usbfs: process 6360 (syz.1.185) did not claim interface 0 before use [ 134.489236][ T6380] futex_wake_op: syz.3.190 tries to shift op by 144; fix this program [ 134.490881][ T6380] futex_wake_op: syz.3.190 tries to shift op by 144; fix this program [ 136.031750][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.065691][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.313447][ T6366] syz.1.187 (6366) used greatest stack depth: 18952 bytes left [ 137.301195][ T6384] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.327468][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.410877][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.451105][ T6384] usb 2-1: Using ep0 maxpacket: 16 [ 137.457495][ T6384] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 137.457523][ T6384] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 137.457542][ T6384] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 137.457560][ T6384] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 137.457579][ T6384] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 137.457599][ T6384] usb 2-1: config 0 has no interface number 0 [ 137.457642][ T6384] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 137.457668][ T6384] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 137.457689][ T6384] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.457721][ T6384] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.457747][ T6384] usb 2-1: config 0 interface 125 has no altsetting 0 [ 137.457764][ T6384] usb 2-1: config 0 interface 125 has no altsetting 2 [ 137.474155][ T6384] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 137.474185][ T6384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.474202][ T6384] usb 2-1: Product: syz [ 137.474216][ T6384] usb 2-1: Manufacturer: syz [ 137.474231][ T6384] usb 2-1: SerialNumber: syz [ 137.532376][ T6384] usb 2-1: config 0 descriptor?? [ 137.638415][ T6384] usb 2-1: selecting invalid altsetting 2 [ 137.813088][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.836147][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.874486][ C1] usb 2-1: async_complete: urb error -71 [ 137.875734][ C1] usb 2-1: async_complete: urb error -71 [ 137.875824][ C1] usb 2-1: async_complete: urb error -71 [ 137.875903][ C1] usb 2-1: async_complete: urb error -71 [ 137.880575][ T6384] get_1284_register: usb error -71 [ 137.960446][ T6384] usb 2-1: USB disconnect, device number 5 [ 140.536254][ T6465] unsupported nla_type 65535 [ 140.748871][ T6471] kvm: kvm [6469]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 140.801098][ T153] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.801146][ T153] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.801180][ T153] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.811711][ T153] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.351091][ T5584] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.532867][ T5584] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.532897][ T5584] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 142.532934][ T5584] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 142.532957][ T5584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.613333][ T5584] opticon 3-1:1.0: opticon converter detected [ 142.675597][ T5584] usb 3-1: opticon converter now attached to ttyUSB0 [ 142.833972][ T50] usb 3-1: USB disconnect, device number 8 [ 142.849556][ T50] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 142.889240][ T50] opticon 3-1:1.0: device disconnected [ 144.711488][ T50] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.977672][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.977715][ T50] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.983291][ T50] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 144.983319][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.983338][ T50] usb 3-1: Product: syz [ 144.983352][ T50] usb 3-1: Manufacturer: syz [ 144.983365][ T50] usb 3-1: SerialNumber: syz [ 145.030636][ T50] usb 3-1: config 0 descriptor?? [ 145.071901][ T50] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 145.177181][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.179427][ T50] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 145.179487][ T50] usb 3-1: media controller created [ 145.365439][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.746893][ T50] DVB: Unable to find symbol tda10046_attach() [ 145.746922][ T50] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 145.746937][ T50] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 146.800533][ T50] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 146.841929][ T50] usb 3-1: USB disconnect, device number 9 [ 146.944473][ T6575] Zero length message leads to an empty skb [ 146.994225][ T6578] binder: 6577:6578 ioctl c0306201 200000000080 returned -14 [ 146.997158][ T6578] binder: 6577:6578 ioctl c0306201 2000000003c0 returned -14 [ 150.388507][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.265'. [ 152.542944][ T6643] bridge0: entered allmulticast mode [ 152.570118][ T6643] bridge_slave_1: left allmulticast mode [ 152.604469][ T6643] bridge_slave_1: left promiscuous mode [ 152.795029][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.276342][ T6643] bridge_slave_0: left allmulticast mode [ 153.276376][ T6643] bridge_slave_0: left promiscuous mode [ 153.375467][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.531033][ T5798] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.681099][ T5798] usb 2-1: Using ep0 maxpacket: 8 [ 155.699148][ T5798] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 155.699190][ T5798] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 155.699212][ T5798] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.699234][ T5798] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.699274][ T5798] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.699295][ T5798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.952959][ T5798] usb 2-1: GET_CAPABILITIES returned 0 [ 155.952998][ T5798] usbtmc 2-1:16.0: can't read capabilities [ 156.010551][ T36] audit: type=1804 audit(1785901494.622:25): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.298" name="/newroot/33/file0" dev="tmpfs" ino=189 res=1 errno=0 [ 156.056763][ T6709] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 156.056780][ T6709] ref_ctr increment failed for inode: 0xbd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803ec76c00 [ 156.122659][ T6708] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 156.122703][ T6708] ref_ctr decrement failed for inode: 0xbd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803ec76c00 [ 156.122754][ T6708] uprobe: syz.2.298:6708 failed to unregister, leaking uprobe [ 156.209622][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 156.227218][ T6424] usb 2-1: USB disconnect, device number 6 [ 194.383416][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.383461][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.870243][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 206.870281][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 206.943326][ T4911] Bluetooth: hci1: command 0x0406 tx timeout [ 206.943371][ T4911] Bluetooth: hci2: command 0x0406 tx timeout [ 207.013208][ T6722] Bluetooth: hci0: command 0x0406 tx timeout [ 255.818268][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.818329][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 301.259675][ T37] INFO: task syz-executor:5582 blocked in I/O wait for more than 143 seconds. [ 301.259701][ [ 301.259701][ T37] Tainted: G L syzkaller #0 [ 301.259710][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.259718][ T37] task:syz-executor state:D stack:22184 pid:5582 tgid:5582 ppid:5581 task_flags:0x440100 flags:0x00080800 [ 301.259787][ T37] Call Trace: [ 301.259794][ T37] [ 301.259806][ T37] __schedule+0x16dc/0x5500 [ 301.259946][ T37] ? __lock_acquire+0x683/0x2ce0 [ 301.260041][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.260064][ T37] ? __pfx___schedule+0x10/0x10 [ 301.260081][ T37] ? schedule+0x90/0x2b0 [ 301.260095][ T37] schedule+0x164/0x2b0 [ 301.260109][ T37] io_schedule+0x80/0xe0 [ 301.260123][ T37] bit_wait_io+0x11/0xd0 [ 301.260142][ T37] __wait_on_bit+0xac/0x2f0 [ 301.260155][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 301.260170][ T37] out_of_line_wait_on_bit+0x13b/0x190 [ 301.260184][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 301.260197][ T37] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 301.260212][ T37] ? __pfx_wake_bit_function+0x10/0x10 [ 301.260270][ T37] do_get_write_access+0x670/0x1090 [ 301.260370][ T37] jbd2_journal_get_write_access+0x1d6/0x230 [ 301.260388][ T37] __ext4_journal_get_write_access+0x1c3/0x590 [ 301.260454][ T37] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 301.260470][ T37] ? trace_kmem_cache_alloc+0x29/0xe0 [ 301.260524][ T37] ext4_reserve_inode_write+0x294/0x360 [ 301.260612][ T37] __ext4_mark_inode_dirty+0x13e/0x700 [ 301.260630][ T37] ext4_dirty_inode+0xd0/0x110 [ 301.260646][ T37] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 301.260661][ T37] __mark_inode_dirty+0x3a8/0x13b0 [ 301.260725][ T37] file_update_time_flags+0x3f4/0x4b0 [ 301.260791][ T37] ext4_page_mkwrite+0x225/0x1150 [ 301.260809][ T37] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 301.260823][ T37] do_page_mkwrite+0x14a/0x310 [ 301.261082][ T37] do_wp_page+0x1f32/0x3d90 [ 301.261104][ T37] ? rt_spin_lock+0x1e0/0x400 [ 301.261162][ T37] ? rt_spin_lock+0x1e0/0x400 [ 301.261186][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 301.261212][ T37] ? preempt_count_add+0x91/0x190 [ 301.261267][ T37] ? __pfx_do_wp_page+0x10/0x10 [ 301.261283][ T37] ? rt_spin_lock+0x2ce/0x400 [ 301.261305][ T37] ? __pfx_rt_spin_lock+0x10/0x10 [ 301.261329][ T37] ? pte_offset_map_rw_nolock+0xea/0x160 [ 301.261375][ T37] handle_mm_fault+0xa03/0x13f0 [ 301.261411][ T37] ? handle_mm_fault+0xe8/0x13f0 [ 301.261432][ T37] ? __pfx_handle_mm_fault+0x10/0x10 [ 301.261449][ T37] ? lock_vma_under_rcu+0x45a/0x500 [ 301.261495][ T37] ? __pfx_set_user_sigmask+0x10/0x10 [ 301.261603][ T37] do_user_addr_fault+0xa4d/0x1340 [ 301.261661][ T37] ? trace_page_fault_user+0x84/0x1e0 [ 301.261682][ T37] exc_page_fault+0x6a/0xc0 [ 301.261738][ T37] asm_exc_page_fault+0x26/0x30 [ 301.261783][ T37] RIP: 0033:0x7f00778bc627 [ 301.261805][ T37] RSP: 002b:00007fff28af8e80 EFLAGS: 00010202 [ 301.261821][ T37] RAX: 00007f00758dc000 RBX: 00005555790ea970 RCX: 0000000000000001 [ 301.261835][ T37] RDX: 000000000000130a RSI: 00005555790eb900 RDI: 0000000000000002 [ 301.261847][ T37] RBP: 00007fff28af9380 R08: 000000000000009a R09: 00005555790eb980 [ 301.261859][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff28af91c0 [ 301.261870][ T37] R13: 00007fff28af8fb0 R14: 585858582e7a7973 R15: 00007fff28af8f00 [ 301.261900][ T37] [ 301.261961][ T37] INFO: task syz.1.295:6698 blocked in I/O wait for more than 143 seconds. [ 301.261977][ T37] Tainted: G L syzkaller #0 [ 301.261986][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.261994][ T37] task:syz.1.295 state:D stack:25800 pid:6698 tgid:6698 ppid:5597 task_flags:0x440040 flags:0x00080002 [ 301.262042][ T37] Call Trace: [ 301.262049][ T37] [ 301.262059][ T37] __schedule+0x16dc/0x5500 [ 301.262083][ T37] ? __lock_acquire+0x683/0x2ce0 [ 301.262110][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.262150][ T37] ? __pfx___schedule+0x10/0x10 [ 301.262181][ T37] ? schedule+0x90/0x2b0 [ 301.262206][ T37] schedule+0x164/0x2b0 [ 301.262230][ T37] io_schedule+0x80/0xe0 [ 301.262255][ T37] bit_wait_io+0x11/0xd0 [ 301.262280][ T37] __wait_on_bit+0xac/0x2f0 [ 301.262303][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 301.262330][ T37] out_of_line_wait_on_bit+0x13b/0x190 [ 301.262356][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 301.262379][ T37] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 301.262414][ T37] ? __pfx_wake_bit_function+0x10/0x10 [ 301.262449][ T37] do_get_write_access+0x670/0x1090 [ 301.262512][ T37] jbd2_journal_get_write_access+0x1d6/0x230 [ 301.262545][ T37] __ext4_journal_get_write_access+0x1c3/0x590 [ 301.262578][ T37] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 301.262606][ T37] ? trace_kmem_cache_alloc+0x29/0xe0 [ 301.262635][ T37] ext4_reserve_inode_write+0x294/0x360 [ 301.262673][ T37] __ext4_mark_inode_dirty+0x13e/0x700 [ 301.262702][ T37] ext4_dirty_inode+0xd0/0x110 [ 301.262723][ T37] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 301.262746][ T37] __mark_inode_dirty+0x3a8/0x13b0 [ 301.262775][ T37] file_update_time_flags+0x3f4/0x4b0 [ 301.262801][ T37] ext4_page_mkwrite+0x225/0x1150 [ 301.262826][ T37] ? __pfx_filemap_fault+0x10/0x10 [ 301.262927][ T37] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 301.262949][ T37] ? __pte_offset_map+0x29/0x200 [ 301.262979][ T37] do_page_mkwrite+0x14a/0x310 [ 301.263007][ T37] do_pte_missing+0x734/0x28f0 [ 301.263036][ T37] ? handle_mm_fault+0xe8/0x13f0 [ 301.263058][ T37] handle_mm_fault+0xd28/0x13f0 [ 301.263085][ T37] ? handle_mm_fault+0xe8/0x13f0 [ 301.263106][ T37] ? __pfx_handle_mm_fault+0x10/0x10 [ 301.263122][ T37] ? lock_vma_under_rcu+0x45a/0x500 [ 301.263167][ T37] do_user_addr_fault+0xa4d/0x1340 [ 301.263195][ T37] ? trace_page_fault_user+0x84/0x1e0 [ 301.263216][ T37] exc_page_fault+0x6a/0xc0 [ 301.263240][ T37] asm_exc_page_fault+0x26/0x30 [ 301.263259][ T37] RIP: 0033:0x7f9fa77c2e52 [ 301.263275][ T37] RSP: 002b:00007fffd76223b0 EFLAGS: 00010202 [ 301.263289][ T37] RAX: 000000000000f008 RBX: 00007f9fa86a5720 RCX: 0000000000000000 [ 301.263301][ T37] RDX: 0000001b32915000 RSI: 0000000000000008 RDI: 00007f9fa86a5720 [ 301.263312][ T37] RBP: 000000000000054b R08: 00007f9fa7b60000 R09: 00007f9fa7b75f40 [ 301.263324][ T37] R10: 0000000000000000 R11: 00000000000000ff R12: ffffffff86d7f536 [ 301.263336][ T37] R13: 00007f9fa7b75f40 R14: 00000000000001d8 R15: ffffffffffff1000 [ 301.263350][ T37] ? usb_hcd_submit_urb+0x26/0x1b40 [ 301.263511][ T37] [ 301.263520][ T37] INFO: task syz.4.299:6710 blocked in I/O wait for more than 143 seconds. [ 301.263536][ T37] Tainted: G L syzkaller #0 [ 301.263545][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.263554][ T37] task:syz.4.299 state:D stack:24872 pid:6710 tgid:6710 ppid:5599 task_flags:0x440040 flags:0x00080002 [ 301.263600][ T37] Call Trace: [ 301.263606][ T37] [ 301.263616][ T37] __schedule+0x16dc/0x5500 [ 301.263639][ T37] ? __lock_acquire+0x683/0x2ce0 [ 301.263666][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.263706][ T37] ? __pfx___schedule+0x10/0x10 [ 301.263737][ T37] ? schedule+0x90/0x2b0 [ 301.263761][ T37] schedule+0x164/0x2b0 [ 301.263785][ T37] io_schedule+0x80/0xe0 [ 301.263807][ T37] bit_wait_io+0x11/0xd0 [ 301.263832][ T37] __wait_on_bit+0xac/0x2f0 [ 301.263855][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 301.263880][ T37] out_of_line_wait_on_bit+0x13b/0x190 [ 301.263906][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 301.263928][ T37] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 301.263953][ T37] ? __pfx_wake_bit_function+0x10/0x10 [ 301.263984][ T37] do_get_write_access+0x670/0x1090 [ 301.264026][ T37] jbd2_journal_get_write_access+0x1d6/0x230 [ 301.264057][ T37] __ext4_journal_get_write_access+0x1c3/0x590 [ 301.264089][ T37] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 301.264117][ T37] ? trace_kmem_cache_alloc+0x29/0xe0 [ 301.264143][ T37] ext4_reserve_inode_write+0x294/0x360 [ 301.264178][ T37] __ext4_mark_inode_dirty+0x13e/0x700 [ 301.264221][ T37] ext4_dirty_inode+0xd0/0x110 [ 301.264248][ T37] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 301.264274][ T37] __mark_inode_dirty+0x3a8/0x13b0 [ 301.264304][ T37] file_update_time_flags+0x3f4/0x4b0 [ 301.264327][ T37] ext4_page_mkwrite+0x225/0x1150 [ 301.264354][ T37] ? __pfx_filemap_fault+0x10/0x10 [ 301.264384][ T37] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 301.264411][ T37] ? __pte_offset_map+0x29/0x200 [ 301.264440][ T37] do_page_mkwrite+0x14a/0x310 [ 301.264467][ T37] do_pte_missing+0x734/0x28f0 [ 301.264496][ T37] ? handle_mm_fault+0xe8/0x13f0 [ 301.264520][ T37] handle_mm_fault+0xd28/0x13f0 [ 301.264544][ T37] ? handle_mm_fault+0xe8/0x13f0 [ 301.264565][ T37] ? __pfx_handle_mm_fault+0x10/0x10 [ 301.264580][ T37] ? lock_vma_under_rcu+0x45a/0x500 [ 301.264622][ T37] do_user_addr_fault+0xa4d/0x1340 [ 301.264651][ T37] ? trace_page_fault_user+0x84/0x1e0 [ 301.264672][ T37] exc_page_fault+0x6a/0xc0 [ 301.264699][ T37] asm_exc_page_fault+0x26/0x30 [ 301.264717][ T37] RIP: 0033:0x7fd728bc26e0 [ 301.264732][ T37] RSP: 002b:00007fff5e4c19e0 EFLAGS: 00010202 [ 301.264747][ T37] RAX: 0000001b32c1d000 RBX: ffffffff84bf5d1e RCX: 0000001b32c1cff8 [ 301.264761][ T37] RDX: 0000001b32624220 RSI: 0000000000000008 RDI: 00007fd729aa5720 [ 301.264773][ T37] RBP: 000000000000006d R08: 00007fd728f60000 R09: 00007fd728f62000 [ 301.264785][ T37] R10: 0000000084bf5d22 R11: 0000000000000008 R12: 00007fd728f76038 [ 301.264797][ T37] R13: 00000000000000de R14: ffffffff84bf57e7 R15: 00007fd729aa5720 [ 301.264811][ T37] ? __bitmap_set+0xe7/0x170 [ 301.264912][ T37] ? bitmap_remap+0x23e/0x380 [ 301.264946][ T37] [ 301.264954][ T37] INFO: task syz.3.300:6714 blocked in I/O wait for more than 143 seconds. [ 301.264970][ T37] Tainted: G L syzkaller #0 [ 301.264980][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.264987][ T37] task:syz.3.300 state:D stack:27080 pid:6714 tgid:6714 ppid:5598 task_flags:0x440040 flags:0x00080002 [ 301.265035][ T37] Call Trace: [ 301.265041][ T37] [ 301.265052][ T37] __schedule+0x16dc/0x5500 [ 301.265074][ T37] ? __lock_acquire+0x683/0x2ce0 [ 301.265102][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.265142][ T37] ? __pfx___schedule+0x10/0x10 [ 301.265172][ T37] ? schedule+0x90/0x2b0 [ 301.265198][ T37] schedule+0x164/0x2b0 [ 301.265222][ T37] io_schedule+0x80/0xe0 [ 301.265247][ T37] bit_wait_io+0x11/0xd0 [ 301.265272][ T37] __wait_on_bit+0xac/0x2f0 [ 301.265294][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 301.265320][ T37] out_of_line_wait_on_bit+0x13b/0x190 [ 301.265345][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 301.265368][ T37] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 301.265396][ T37] ? __pfx_wake_bit_function+0x10/0x10 [ 301.265437][ T37] do_get_write_access+0x670/0x1090 [ 301.265480][ T37] jbd2_journal_get_write_access+0x1d6/0x230 [ 301.265512][ T37] __ext4_journal_get_write_access+0x1c3/0x590 [ 301.265543][ T37] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 301.265570][ T37] ? trace_kmem_cache_alloc+0x29/0xe0 [ 301.265596][ T37] ext4_reserve_inode_write+0x294/0x360 [ 301.265631][ T37] __ext4_mark_inode_dirty+0x13e/0x700 [ 301.265663][ T37] ext4_dirty_inode+0xd0/0x110 [ 301.265691][ T37] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 301.265718][ T37] __mark_inode_dirty+0x3a8/0x13b0 [ 301.265742][ T37] ? mnt_get_write_access+0x262/0x2d0 [ 301.265809][ T37] ? ext4_file_mmap_prepare+0x286/0x460 [ 301.265835][ T37] touch_atime+0x565/0x670 [ 301.265857][ T37] ? ext4_file_mmap_prepare+0x286/0x460 [ 301.265888][ T37] ext4_file_mmap_prepare+0x286/0x460 [ 301.265918][ T37] mmap_region+0xe78/0x2310 [ 301.266003][ T37] ? try_to_take_rt_mutex+0x842/0xb00 [ 301.266030][ T37] ? __pfx_mmap_region+0x10/0x10 [ 301.266059][ T37] ? __lock_acquire+0x683/0x2ce0 [ 301.266086][ T37] ? __lock_acquire+0x683/0x2ce0 [ 301.266117][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.266189][ T37] ? mtree_range_walk+0x70a/0x8c0 [ 301.266255][ T37] ? mt_find+0x5ff/0x630 [ 301.266309][ T37] ? mt_find+0x186/0x630 [ 301.266334][ T37] ? __pfx_mt_find+0x10/0x10 [ 301.266366][ T37] ? bpf_lsm_mmap_addr+0x9/0x50 [ 301.266491][ T37] ? security_mmap_addr+0x71/0x240 [ 301.266617][ T37] ? shmem_mapping+0xd/0x50 [ 301.266696][ T37] ? memfd_check_seals_mmap+0xcb/0x210 [ 301.266751][ T37] do_mmap+0xc1e/0x10b0 [ 301.266790][ T37] ? __pfx_do_mmap+0x10/0x10 [ 301.266818][ T37] ? rwbase_write_lock+0x550/0x720 [ 301.266856][ T37] vm_mmap_pgoff+0x275/0x4e0 [ 301.266911][ T37] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 301.266945][ T37] ? __fget_files+0x2a/0x420 [ 301.266965][ T37] ? __fget_files+0x3a8/0x420 [ 301.266985][ T37] ? __fget_files+0x2a/0x420 [ 301.267008][ T37] ksys_mmap_pgoff+0x4a6/0x720 [ 301.267024][ T37] ? __x64_sys_mmap+0x7f/0x140 [ 301.267090][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.267112][ T37] do_syscall_64+0x174/0x580 [ 301.267173][ T37] ? trace_irq_disable+0x3b/0x140 [ 301.267230][ T37] ? clear_bhb_loop+0x40/0x90 [ 301.267253][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.267270][ T37] RIP: 0033:0x7f944b43dd82 [ 301.267287][ T37] RSP: 002b:00007ffc82e23b68 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 301.267308][ T37] RAX: ffffffffffffffda RBX: 0000001b32564000 RCX: 00007f944b43dd82 [ 301.267322][ T37] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32564000 [ 301.267335][ T37] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 301.267346][ T37] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000045 [ 301.267359][ T37] R13: 00000000000927c0 R14: 0000000000025f92 R15: 00007ffc82e23e40 [ 301.267387][ T37] [ 301.267397][ T37] INFO: task syz.2.301:6715 blocked in I/O wait for more than 143 seconds. [ 301.267414][ T37] Tainted: G L syzkaller #0 [ 301.267423][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.267429][ T37] task:syz.2.301 state:D stack:27256 pid:6715 tgid:6715 ppid:5596 task_flags:0x440040 flags:0x00080002 [ 301.267478][ T37] Call Trace: [ 301.267484][ T37] [ 301.267495][ T37] __schedule+0x16dc/0x5500 [ 301.267519][ T37] ? __lock_acquire+0x683/0x2ce0 [ 301.267555][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.267593][ T37] ? __pfx___schedule+0x10/0x10 [ 301.267624][ T37] ? schedule+0x90/0x2b0 [ 301.267649][ T37] schedule+0x164/0x2b0 [ 301.267674][ T37] io_schedule+0x80/0xe0 [ 301.267699][ T37] bit_wait_io+0x11/0xd0 [ 301.267726][ T37] __wait_on_bit+0xac/0x2f0 [ 301.267750][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 301.267777][ T37] out_of_line_wait_on_bit+0x13b/0x190 [ 301.267805][ T37] ? __pfx_bit_wait_io+0x10/0x10 [ 301.267828][ T37] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 301.267856][ T37] ? __pfx_wake_bit_function+0x10/0x10 [ 301.267894][ T37] do_get_write_access+0x670/0x1090 [ 301.267940][ T37] jbd2_journal_get_write_access+0x1d6/0x230 [ 301.267972][ T37] __ext4_journal_get_write_access+0x1c3/0x590 [ 301.268003][ T37] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 301.268031][ T37] ? trace_kmem_cache_alloc+0x29/0xe0 [ 301.268056][ T37] ext4_reserve_inode_write+0x294/0x360 [ 301.268092][ T37] __ext4_mark_inode_dirty+0x13e/0x700 [ 301.268144][ T37] ext4_dirty_inode+0xd0/0x110 [ 301.268172][ T37] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 301.268200][ T37] __mark_inode_dirty+0x3a8/0x13b0 [ 301.268226][ T37] ? mnt_get_write_access+0x262/0x2d0 [ 301.268250][ T37] ? ext4_file_mmap_prepare+0x286/0x460 [ 301.268276][ T37] touch_atime+0x565/0x670 [ 301.268298][ T37] ? ext4_file_mmap_prepare+0x286/0x460 [ 301.268329][ T37] ext4_file_mmap_prepare+0x286/0x460 [ 301.268360][ T37] mmap_region+0xe78/0x2310 [ 301.268398][ T37] ? try_to_take_rt_mutex+0x842/0xb00 [ 301.268423][ T37] ? __pfx_mmap_region+0x10/0x10 [ 301.268452][ T37] ? __lock_acquire+0x683/0x2ce0 [ 301.268479][ T37] ? __lock_acquire+0x683/0x2ce0 [ 301.268511][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.268591][ T37] ? mtree_range_walk+0x70a/0x8c0 [ 301.268624][ T37] ? mt_find+0x5ff/0x630 [ 301.268652][ T37] ? mt_find+0x186/0x630 [ 301.268677][ T37] ? __pfx_mt_find+0x10/0x10 [ 301.268710][ T37] ? bpf_lsm_mmap_addr+0x9/0x50 [ 301.268728][ T37] ? security_mmap_addr+0x71/0x240 [ 301.268753][ T37] ? shmem_mapping+0xd/0x50 [ 301.268778][ T37] ? memfd_check_seals_mmap+0xcb/0x210 [ 301.268801][ T37] do_mmap+0xc1e/0x10b0 [ 301.268837][ T37] ? __pfx_do_mmap+0x10/0x10 [ 301.268863][ T37] ? rwbase_write_lock+0x550/0x720 [ 301.268899][ T37] vm_mmap_pgoff+0x275/0x4e0 [ 301.268933][ T37] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 301.268965][ T37] ? __fget_files+0x2a/0x420 [ 301.268984][ T37] ? __fget_files+0x3a8/0x420 [ 301.269003][ T37] ? __fget_files+0x2a/0x420 [ 301.269026][ T37] ksys_mmap_pgoff+0x4a6/0x720 [ 301.269047][ T37] ? __x64_sys_mmap+0x7f/0x140 [ 301.269066][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.269087][ T37] do_syscall_64+0x174/0x580 [ 301.269111][ T37] ? trace_irq_disable+0x3b/0x140 [ 301.269129][ T37] ? clear_bhb_loop+0x40/0x90 [ 301.269152][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.269170][ T37] RIP: 0033:0x7f701815dd82 [ 301.269186][ T37] RSP: 002b:00007ffc154b86e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 301.269204][ T37] RAX: ffffffffffffffda RBX: 0000001b32464000 RCX: 00007f701815dd82 [ 301.269218][ T37] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b32464000 [ 301.269230][ T37] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 301.269242][ T37] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000022 [ 301.269254][ T37] R13: 00000000000927c0 R14: 000000000002618b R15: 00007ffc154b89c0 [ 301.269282][ T37] [ 301.269301][ T37] [ 301.269301][ T37] Showing all locks held in the system: [ 301.269314][ T37] 4 locks held by pr/legacy/17: [ 301.269328][ T37] 1 lock held by khungtaskd/37: [ 301.269338][ T37] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 301.269409][ T37] 6 locks held by kworker/u8:7/648: [ 301.269420][ T37] #0: ffff88801eea6938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 301.269530][ T37] #1: ffffc900046afc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 301.269584][ T37] #2: ffff8880367680d0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 301.269662][ T37] #3: ffff888036658cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 301.269706][ T37] #4: ffff888036774bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 301.269754][ T37] #5: ffff88803fda0e60 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x7cc/0x1240 [ 301.269828][ T37] 2 locks held by klogd/4951: [ 301.269839][ T37] 2 locks held by getty/5352: [ 301.269849][ T37] #0: ffff8880360ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 301.269948][ T37] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 301.269993][ T37] 3 locks held by syz-executor/5582: [ 301.270003][ T37] #0: ffff88803b1c1d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 301.270048][ T37] #1: ffff888036768678 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 301.270089][ T37] #2: ffff888036774bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 301.270151][ T37] 3 locks held by syz.1.295/6698: [ 301.270161][ T37] #0: ffff88803555a808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 301.270205][ T37] #1: ffff888036768678 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 301.270245][ T37] #2: ffff888036774bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 301.270294][ T37] 3 locks held by syz.4.299/6710: [ 301.270304][ T37] #0: ffff88804101b6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 301.270348][ T37] #1: ffff888036768678 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 301.270389][ T37] #2: ffff888036774bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 301.270437][ T37] 3 locks held by syz.3.300/6714: [ 301.270447][ T37] #0: ffff8880291fe2b0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 301.270496][ T37] #1: ffff888036768500 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 301.270554][ T37] #2: ffff888036774bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 301.270603][ T37] 3 locks held by syz.2.301/6715: [ 301.270613][ T37] #0: ffff8880389b91b0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 301.270662][ T37] #1: ffff888036768500 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 301.270713][ T37] #2: ffff888036774bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 301.270762][ T37] [ 301.270767][ T37] ============================================= [ 301.270767][ T37] [ 301.270780][ T37] NMI backtrace for cpu 1 [ 301.270803][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 301.270831][ T37] Tainted: [L]=SOFTLOCKUP [ 301.270840][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.270848][ T37] Call Trace: [ 301.270856][ T37] [ 301.270862][ T37] dump_stack_lvl+0xe8/0x150 [ 301.270928][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 301.270946][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 301.271024][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 301.271046][ T37] sys_info+0x135/0x170 [ 301.271061][ T37] watchdog+0xfd7/0x1030 [ 301.271121][ T37] ? watchdog+0x1c7/0x1030 [ 301.271145][ T37] kthread+0x388/0x470 [ 301.271198][ T37] ? __pfx_watchdog+0x10/0x10 [ 301.271213][ T37] ? __pfx_kthread+0x10/0x10 [ 301.271239][ T37] ret_from_fork+0x514/0xb70 [ 301.271269][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 301.271296][ T37] ? __switch_to+0xc89/0x1420 [ 301.271353][ T37] ? __pfx_kthread+0x10/0x10 [ 301.271380][ T37] ret_from_fork_asm+0x1a/0x30 [ 301.271411][ T37] [ 301.271485][ T37] Sending NMI from CPU 1 to CPUs 0: [ 301.271515][ C0] NMI backtrace for cpu 0 [ 301.271530][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 301.271552][ C0] Tainted: [L]=SOFTLOCKUP [ 301.271558][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.271566][ C0] RIP: 0010:delay_tsc+0x5b/0xc0 [ 301.271586][ C0] Code: 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 a2 9a 51 f6 65 8b 05 fb 76 5b 07 85 c0 74 1c f3 90 01 00 00 00 e8 eb 98 51 f6 e8 d6 78 01 00 39 c5 75 0e 0f 01 f9 [ 301.271599][ C0] RSP: 0018:ffffc90000167a28 EFLAGS: 00000286 [ 301.271616][ C0] RAX: 0000000080000000 RBX: 0000000000000899 RCX: 0000000000000000 [ 301.271627][ C0] RDX: 000000000000009f RSI: ffffffff8bca7860 RDI: 00000000ffffffff [ 301.271638][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.271646][ C0] R10: dffffc0000000000 R11: ffffffff8b42a8e0 R12: 1ffffffff33c9cb2 [ 301.271658][ C0] R13: 00000000ffffffff R14: 0000009fd86b0f86 R15: 0000000000000706 [ 301.271668][ C0] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 301.271681][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.271691][ C0] CR2: 00005644de540660 CR3: 0000000037bb0000 CR4: 00000000003526f0 [ 301.271705][ C0] Call Trace: [ 301.271711][ C0] [ 301.271718][ C0] wait_for_lsr+0x14d/0x300 [ 301.271806][ C0] serial8250_console_write+0x12a2/0x1b40 [ 301.271834][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 301.271856][ C0] ? console_flush_one_record+0xfa/0xb50 [ 301.271899][ C0] ? console_flush_one_record+0x472/0xb50 [ 301.271921][ C0] console_flush_one_record+0x642/0xb50 [ 301.271939][ C0] ? console_flush_one_record+0xfa/0xb50 [ 301.271956][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 301.271973][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 301.271996][ C0] legacy_kthread_func+0x1b6/0x250 [ 301.272013][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 301.272028][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 301.272057][ C0] ? __kthread_parkme+0x71/0x1f0 [ 301.272077][ C0] ? __kthread_parkme+0x196/0x1f0 [ 301.272099][ C0] kthread+0x388/0x470 [ 301.272120][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 301.272134][ C0] ? __pfx_kthread+0x10/0x10 [ 301.272156][ C0] ret_from_fork+0x514/0xb70 [ 301.272179][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 301.272201][ C0] ? __switch_to+0xc89/0x1420 [ 301.272221][ C0] ? __pfx_kthread+0x10/0x10 [ 301.272243][ C0] ret_from_fork_asm+0x1a/0x30 [ 301.272266][ C0] [ 301.272730][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 301.272747][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 301.272772][ T37] Tainted: [L]=SOFTLOCKUP [ 301.272779][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.272788][ T37] Call Trace: [ 301.272795][ T37] [ 301.272803][ T37] vpanic+0x56c/0xa60 [ 301.272823][ T37] ? __pfx___schedule+0x10/0x10 [ 301.272846][ T37] ? __pfx_vpanic+0x10/0x10 [ 301.272872][ T37] panic+0xc5/0xd0 [ 301.272889][ T37] ? __pfx_panic+0x10/0x10 [ 301.272904][ T37] ? preempt_schedule_common+0x82/0xd0 [ 301.272927][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 301.272988][ T37] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 301.273012][ T37] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 301.273035][ T37] watchdog+0x1030/0x1030 [ 301.273059][ T37] ? watchdog+0x1c7/0x1030 [ 301.273082][ T37] kthread+0x388/0x470 [ 301.273109][ T37] ? __pfx_watchdog+0x10/0x10 [ 301.273124][ T37] ? __pfx_kthread+0x10/0x10 [ 301.273151][ T37] ret_from_fork+0x514/0xb70 [ 301.273181][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 301.273207][ T37] ? __switch_to+0xc89/0x1420 [ 301.273233][ T37] ? __pfx_kthread+0x10/0x10 [ 301.273260][ T37] ret_from_fork_asm+0x1a/0x30 [ 301.273292][ T37] [ 301.273588][ T37] Kernel Offset: disabled