last executing test programs: 5m28.696627532s ago: executing program 2 (id=856): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000240)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)='2', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)='2', 0x1}], 0x1}}], 0x1, 0x804) 5m27.532861145s ago: executing program 2 (id=864): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) 5m27.362927215s ago: executing program 2 (id=866): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='ns\x00') getdents(r1, &(0x7f0000000500)=""/4096, 0x1000) 5m27.121608174s ago: executing program 2 (id=868): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x811002, 0x0) 5m27.007966454s ago: executing program 2 (id=869): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1f, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000004c0)=0xfffffffb, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) 5m24.762661006s ago: executing program 2 (id=882): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, r0, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='fuseblk\x00', 0x3208892, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 5m24.463425719s ago: executing program 32 (id=882): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, r0, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='fuseblk\x00', 0x3208892, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 5m22.006279964s ago: executing program 1 (id=906): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x400}, 0x8) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x1c000000}) 5m21.555272026s ago: executing program 1 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @val={@void, {0x8100, 0x0, 0x0, 0xa}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x65, 0x0, 0x7, 0x6, 0x0, @private=0xa010102, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0x7}}}}}}, 0x0) 5m19.600901087s ago: executing program 1 (id=916): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01f10000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073"], 0xe8}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000140)=0x8) 5m19.451935434s ago: executing program 1 (id=917): syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) 5m18.951479665s ago: executing program 1 (id=918): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0xffff, 0x0, 0x0, 0xe}) ioctl$int_in(r0, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) close_range(r0, 0xffffffffffffffff, 0x0) 5m16.169363356s ago: executing program 1 (id=931): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000002c0)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000380)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f00000001c0)=0x18) 5m15.538894231s ago: executing program 33 (id=931): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000002c0)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000380)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f00000001c0)=0x18) 4m55.70793633s ago: executing program 3 (id=1002): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x9) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 4m55.467745751s ago: executing program 3 (id=1003): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5b) keyctl$revoke(0x3, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 4m55.32870636s ago: executing program 3 (id=1004): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000140)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102000200070582020002000705020200020007058303"], 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./memcg/file0\x00', 0xe0) mount(0x0, &(0x7f00000000c0)='./memcg\x00', 0x0, 0x1000, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0xffffdf004002, 0xffffdf004000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 4m53.57244192s ago: executing program 3 (id=1007): mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 4m52.696997339s ago: executing program 3 (id=1008): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000300)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0"], 0x0}, 0x94) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000004c0)=0x93bd, 0x4) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x14048802}, 0x20040840) 4m50.052011034s ago: executing program 3 (id=1015): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/154, 0x9a}], 0x20) 4m49.64891232s ago: executing program 34 (id=1015): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/154, 0x9a}], 0x20) 4m11.949282419s ago: executing program 0 (id=1103): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000380)) 4m9.724219771s ago: executing program 0 (id=1107): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x9000000) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 4m9.49926493s ago: executing program 0 (id=1108): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0xffffffff00000003}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 4m7.413415325s ago: executing program 0 (id=1110): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x28c897, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 4m7.34658771s ago: executing program 0 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 3m58.603819853s ago: executing program 0 (id=1127): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901) fchdir(r1) close(r1) connect$unix(r0, &(0x7f0000000580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m58.162720928s ago: executing program 35 (id=1127): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901) fchdir(r1) close(r1) connect$unix(r0, &(0x7f0000000580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 24.826070529s ago: executing program 4 (id=1341): write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xffff7ffe, 0x10, 0x10, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, @in={0x2, 0x4e21, @multicast2}}}, 0x118) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(r0, 0x0, 0x0) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10) 22.851374955s ago: executing program 4 (id=1342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18002300000000f40007000000000000000000000000002dd08e1be5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.285493511s ago: executing program 4 (id=1343): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0xcc, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x700) 20.388269298s ago: executing program 4 (id=1344): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, 0x0, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x80131, 0x2, 0x40021c, 0x0, r0}}], 0x16, &(0x7f0000001540)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 16.989051537s ago: executing program 4 (id=1345): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="d8001c000831cf6490b833639a99fc04a3bfe03378a5ede59a180081064e81f782db44fd56170daf5a7bdf4a68af3ecbe99e63526b08dbfcb2cc5f422acdd665f76fab5ab8dc8b5156a33f87507a7b2476421958b20ac5081e77d365025eb9b75b491f2fb7f027b69be075c0a2063964779e75b87e2f78e6d26686f4c1cb87101fb184dab2dc0425afa394284589925ce451dda9d91996857ec4178d6af97f25102ca0f2947bd1db8bdfb76fe2b0254620bb627772d833515aa02dcc188b336f212cd4522bb4f8255e88a71de6b4eaef5ab8ac6aad285e5fe6e9742bf0609121a68fa5f201cc60f5db734988f291beedfd0e80f3802c00c11deb002e18a6e0adfb4c202a3f7feadede62583ec070c7a0c4e81a73a3c0d04f", 0x118}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 16.726797907s ago: executing program 4 (id=1346): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) shutdown(r0, 0x0) 0s ago: executing program 36 (id=1346): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) shutdown(r0, 0x0) kernel console output (not intermixed with test programs): 219.597505][ T5744] usb 4-1: SerialNumber: syz [ 219.701084][ T5744] usb 4-1: config 0 descriptor?? [ 219.707359][ T5744] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 219.709091][ T5744] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 219.709160][ T5744] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 219.744401][ T5744] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 219.762519][ T5744] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 219.768003][ T5744] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 219.786622][ T5744] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 219.801568][ T8129] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 219.811614][ T5744] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 219.833775][ T5744] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 219.849174][ T5744] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 219.861846][ T5744] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 220.149524][ T5744] usb 4-1: USB disconnect, device number 11 [ 220.204427][ T5744] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 220.233690][ T5744] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 220.252417][ T5744] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 220.272872][ T5744] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 220.273951][ T5744] keyspan 4-1:0.0: device disconnected [ 220.578414][ T8138] FAULT_INJECTION: forcing a failure. [ 220.578414][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 220.578466][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.2.838 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 220.578496][ T8138] Tainted: [L]=SOFTLOCKUP [ 220.578504][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 220.578516][ T8138] Call Trace: [ 220.578525][ T8138] [ 220.578534][ T8138] dump_stack_lvl+0xe8/0x150 [ 220.578574][ T8138] should_fail_ex+0x46b/0x600 [ 220.578615][ T8138] should_failslab+0xa8/0x100 [ 220.578642][ T8138] __kmalloc_cache_noprof+0xa1/0x680 [ 220.578676][ T8138] ? igmp6_group_dropped+0x5f0/0x1190 [ 220.578704][ T8138] ? igmp6_group_dropped+0x5f0/0x1190 [ 220.578745][ T8138] igmp6_group_dropped+0x5f0/0x1190 [ 220.578789][ T8138] ? __pfx_igmp6_group_dropped+0x10/0x10 [ 220.578837][ T8138] __ipv6_dev_mc_dec+0x2c8/0x3a0 [ 220.578878][ T8138] __ipv6_sock_mc_drop+0x9a/0x1f0 [ 220.578910][ T8138] __ipv6_sock_mc_close+0xc3/0x2f0 [ 220.578941][ T8138] ipv6_sock_mc_close+0xdb/0x140 [ 220.579047][ T8138] inet6_release+0x47/0x70 [ 220.579078][ T8138] __sock_release+0xa0/0x1f0 [ 220.579099][ T8138] ? __pfx_sock_close+0x10/0x10 [ 220.579134][ T8138] sock_close+0x1c/0x30 [ 220.579166][ T8138] __fput+0x41f/0xa80 [ 220.579196][ T8138] fput_close_sync+0x11f/0x240 [ 220.579218][ T8138] ? __pfx_fput_close_sync+0x10/0x10 [ 220.579254][ T8138] __x64_sys_close+0x7e/0x110 [ 220.579279][ T8138] do_syscall_64+0x166/0x520 [ 220.579311][ T8138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.579335][ T8138] ? clear_bhb_loop+0x70/0xc0 [ 220.579364][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.579387][ T8138] RIP: 0033:0x7f619595e559 [ 220.579410][ T8138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.579431][ T8138] RSP: 002b:00007f6193bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 220.579462][ T8138] RAX: ffffffffffffffda RBX: 00007f6195be5fa0 RCX: 00007f619595e559 [ 220.579480][ T8138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 220.579495][ T8138] RBP: 00007f61959f58b0 R08: 0000000000000000 R09: 0000000000000000 [ 220.579510][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.579543][ T8138] R13: 00007f6195be6038 R14: 00007f6195be5fa0 R15: 00007ffd34638d48 [ 220.579583][ T8138] [ 220.846008][ T8144] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 220.846008][ T8144] The task syz.0.839 (8144) triggered the difference, watch for misbehavior. [ 221.127335][ T8152] FAULT_INJECTION: forcing a failure. [ 221.127335][ T8152] name failslab, interval 1, probability 0, space 0, times 0 [ 221.127378][ T8152] CPU: 0 UID: 0 PID: 8152 Comm: syz.4.844 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 221.127409][ T8152] Tainted: [L]=SOFTLOCKUP [ 221.127417][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.127438][ T8152] Call Trace: [ 221.127447][ T8152] [ 221.127457][ T8152] dump_stack_lvl+0xe8/0x150 [ 221.127495][ T8152] should_fail_ex+0x46b/0x600 [ 221.127531][ T8152] should_failslab+0xa8/0x100 [ 221.127555][ T8152] __kmalloc_cache_noprof+0xa1/0x680 [ 221.127589][ T8152] ? ucma_alloc_ctx+0x4e/0x340 [ 221.127619][ T8152] ? ucma_alloc_ctx+0x4e/0x340 [ 221.127658][ T8152] ucma_alloc_ctx+0x4e/0x340 [ 221.127690][ T8152] ucma_create_id+0x1e3/0x370 [ 221.127722][ T8152] ? __pfx_ucma_create_id+0x10/0x10 [ 221.127767][ T8152] ucma_write+0x257/0x2f0 [ 221.127797][ T8152] ? __pfx_ucma_write+0x10/0x10 [ 221.127823][ T8152] ? security_file_permission+0x75/0x260 [ 221.127854][ T8152] ? rw_verify_area+0x209/0x4d0 [ 221.127883][ T8152] ? __pfx_ucma_write+0x10/0x10 [ 221.127911][ T8152] vfs_write+0x29f/0xbb0 [ 221.127947][ T8152] ? __pfx_vfs_write+0x10/0x10 [ 221.127977][ T8152] ? __fget_files+0x2a/0x420 [ 221.128005][ T8152] ? __fget_files+0x2a/0x420 [ 221.128029][ T8152] ? __fget_files+0x3a8/0x420 [ 221.128053][ T8152] ? __fget_files+0x2a/0x420 [ 221.128087][ T8152] ksys_write+0x156/0x270 [ 221.128117][ T8152] ? __pfx_ksys_write+0x10/0x10 [ 221.128157][ T8152] do_syscall_64+0x166/0x520 [ 221.128187][ T8152] ? trace_irq_disable+0x3b/0x140 [ 221.128216][ T8152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.128238][ T8152] ? clear_bhb_loop+0x70/0xc0 [ 221.128266][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.128287][ T8152] RIP: 0033:0x7f63827ae559 [ 221.128307][ T8152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.128325][ T8152] RSP: 002b:00007f6380a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.128348][ T8152] RAX: ffffffffffffffda RBX: 00007f6382a35fa0 RCX: 00007f63827ae559 [ 221.128363][ T8152] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000003 [ 221.128377][ T8152] RBP: 00007f63828458b0 R08: 0000000000000000 R09: 0000000000000000 [ 221.128390][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.128403][ T8152] R13: 00007f6382a36038 R14: 00007f6382a35fa0 R15: 00007ffce3dadde8 [ 221.128446][ T8152] [ 223.702068][ T5845] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 223.871331][ T5741] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 223.891926][ T5845] usb 2-1: device descriptor read/64, error -71 [ 224.090548][ T5741] usb 4-1: Using ep0 maxpacket: 32 [ 224.091345][ T5741] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 224.091916][ T5741] usb 4-1: config 0 has no interfaces? [ 224.094807][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.094842][ T5741] usb 4-1: Product: syz [ 224.094857][ T5741] usb 4-1: Manufacturer: syz [ 224.094873][ T5741] usb 4-1: SerialNumber: syz [ 224.121768][ T5741] usb 4-1: config 0 descriptor?? [ 224.190493][ T5845] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 224.282370][ T8224] netlink: 'syz.4.872': attribute type 1 has an invalid length. [ 224.345805][ T8224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.362217][ T5845] usb 2-1: device descriptor read/64, error -71 [ 224.450859][ T5744] usb 4-1: USB disconnect, device number 12 [ 224.491651][ T5845] usb usb2-port1: attempt power cycle [ 224.691175][ T8226] bond2: (slave gretap1): making interface the new active one [ 224.789332][ T8226] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 225.058522][ T5845] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 225.079256][ T5845] usb 2-1: device descriptor read/8, error -71 [ 225.356511][ T5845] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 225.376291][ T5845] usb 2-1: device descriptor read/8, error -71 [ 225.483545][ T5845] usb usb2-port1: unable to enumerate USB device [ 225.668144][ T8244] kvm: MWAIT instruction emulated as NOP! [ 226.993773][ T158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.243534][ T5594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.254463][ T5594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.271779][ T5594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.328739][ T5594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.339298][ T5594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.740711][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 229.306858][ T158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.554614][ T5602] Bluetooth: hci0: command tx timeout [ 229.614681][ T8269] rxe_eth0 speed is unknown, defaulting to 1000 [ 230.565314][ T158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.268711][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 231.354863][ T8349] sctp: [Deprecated]: syz.1.916 (pid 8349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.354863][ T8349] Use struct sctp_sack_info instead [ 231.377193][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 231.818222][ T5602] Bluetooth: hci0: command tx timeout [ 232.598989][ T158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.739237][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'. [ 233.872069][ T5602] Bluetooth: hci0: command tx timeout [ 234.207125][ T5844] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.392598][ T5844] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 234.394656][ T5844] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.394767][ T5844] usb 1-1: config 1 interface 2 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA [ 234.394795][ T5844] usb 1-1: config 1 interface 2 altsetting 0 endpoint 0xA has invalid maxpacket 21149, setting to 1024 [ 234.394826][ T5844] usb 1-1: config 1 interface 2 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 234.394850][ T5844] usb 1-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.394893][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.676416][ T5844] usb 1-1: invalid MIDI in EP 0 [ 234.895102][ T5844] snd-ua101 1-1:1.0: probe with driver snd-ua101 failed with error -22 [ 235.190104][ T5845] usb 1-1: USB disconnect, device number 9 [ 235.957256][ T5602] Bluetooth: hci0: command tx timeout [ 236.093753][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.135310][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.159298][ T5594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.218625][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.220124][ T5594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.625811][ T158] bridge_slave_1: left allmulticast mode [ 237.626012][ T158] bridge_slave_1: left promiscuous mode [ 237.652017][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.784178][ T8443] FAULT_INJECTION: forcing a failure. [ 237.784178][ T8443] name failslab, interval 1, probability 0, space 0, times 0 [ 237.784220][ T8443] CPU: 0 UID: 0 PID: 8443 Comm: syz.0.945 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 237.784250][ T8443] Tainted: [L]=SOFTLOCKUP [ 237.784258][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 237.784284][ T8443] Call Trace: [ 237.784293][ T8443] [ 237.784303][ T8443] dump_stack_lvl+0xe8/0x150 [ 237.784343][ T8443] should_fail_ex+0x46b/0x600 [ 237.784379][ T8443] should_failslab+0xa8/0x100 [ 237.784404][ T8443] __kmalloc_noprof+0xfb/0x790 [ 237.784434][ T8443] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 237.784465][ T8443] ? bpf_prepare_filter+0x6fb/0x12d0 [ 237.784486][ T8443] ? bpf_prepare_filter+0x6fb/0x12d0 [ 237.784513][ T8443] bpf_prepare_filter+0x6fb/0x12d0 [ 237.784544][ T8443] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 237.784576][ T8443] bpf_prog_create_from_user+0x2c6/0x440 [ 237.784605][ T8443] fanout_set_data+0x2ad/0x430 [ 237.784636][ T8443] ? __pfx_fanout_set_data+0x10/0x10 [ 237.784683][ T8443] packet_setsockopt+0x8b6/0x1510 [ 237.784712][ T8443] ? __pfx_packet_setsockopt+0x10/0x10 [ 237.784748][ T8443] ? do_futex+0x3e7/0x4e0 [ 237.784770][ T8443] ? __asan_memcpy+0x40/0x70 [ 237.784811][ T8443] ? lock_acquire+0x115/0x350 [ 237.784850][ T8443] ? __fget_files+0x2a/0x420 [ 237.784878][ T8443] ? __fget_files+0x2a/0x420 [ 237.784902][ T8443] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 237.784926][ T8443] ? __pfx_packet_setsockopt+0x10/0x10 [ 237.784953][ T8443] do_sock_setsockopt+0x17c/0x1b0 [ 237.784986][ T8443] __x64_sys_setsockopt+0x143/0x1b0 [ 237.785019][ T8443] do_syscall_64+0x166/0x520 [ 237.785048][ T8443] ? trace_irq_disable+0x3b/0x140 [ 237.785076][ T8443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.785098][ T8443] ? clear_bhb_loop+0x70/0xc0 [ 237.785124][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.785145][ T8443] RIP: 0033:0x7f4d4028e559 [ 237.785166][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.785185][ T8443] RSP: 002b:00007f4d3e4e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.785209][ T8443] RAX: ffffffffffffffda RBX: 00007f4d40515fa0 RCX: 00007f4d4028e559 [ 237.785226][ T8443] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000004 [ 237.785239][ T8443] RBP: 00007f4d403258b0 R08: 0000000000000010 R09: 0000000000000000 [ 237.785253][ T8443] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 237.785268][ T8443] R13: 00007f4d40516038 R14: 00007f4d40515fa0 R15: 00007ffcb158ba18 [ 237.785302][ T8443] [ 238.191525][ T158] bridge_slave_0: left allmulticast mode [ 238.191563][ T158] bridge_slave_0: left promiscuous mode [ 238.191801][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.304491][ T8457] FAULT_INJECTION: forcing a failure. [ 238.304491][ T8457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.304517][ T8457] CPU: 0 UID: 0 PID: 8457 Comm: syz.4.947 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 238.304533][ T8457] Tainted: [L]=SOFTLOCKUP [ 238.304538][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 238.304545][ T8457] Call Trace: [ 238.304550][ T8457] [ 238.304556][ T8457] dump_stack_lvl+0xe8/0x150 [ 238.304578][ T8457] should_fail_ex+0x46b/0x600 [ 238.304600][ T8457] _copy_from_user+0x2d/0xb0 [ 238.304613][ T8457] xsk_setsockopt+0x331/0x960 [ 238.304629][ T8457] ? __pfx_xsk_setsockopt+0x10/0x10 [ 238.304648][ T8457] ? __fget_files+0x2a/0x420 [ 238.304662][ T8457] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 238.304679][ T8457] ? __pfx_xsk_setsockopt+0x10/0x10 [ 238.304694][ T8457] do_sock_setsockopt+0x17c/0x1b0 [ 238.304712][ T8457] __x64_sys_setsockopt+0x143/0x1b0 [ 238.304730][ T8457] do_syscall_64+0x166/0x520 [ 238.304746][ T8457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.304758][ T8457] ? clear_bhb_loop+0x70/0xc0 [ 238.304771][ T8457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.304782][ T8457] RIP: 0033:0x7f63827ae559 [ 238.304794][ T8457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.304810][ T8457] RSP: 002b:00007f6380a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.304831][ T8457] RAX: ffffffffffffffda RBX: 00007f6382a35fa0 RCX: 00007f63827ae559 [ 238.304847][ T8457] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000003 [ 238.304860][ T8457] RBP: 00007f63828458b0 R08: 0000000000000004 R09: 0000000000000000 [ 238.304873][ T8457] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 238.304888][ T8457] R13: 00007f6382a36038 R14: 00007f6382a35fa0 R15: 00007ffce3dadde8 [ 238.304921][ T8457] [ 238.671054][ T5602] Bluetooth: hci4: command tx timeout [ 239.545932][ T5844] kernel read not supported for file /swaps (pid: 5844 comm: kworker/0:7) [ 240.414122][ T8482] 9pnet_fd: p9_fd_create_unix (8482): problem connecting socket: ./file0: -111 [ 240.555260][ T8485] FAULT_INJECTION: forcing a failure. [ 240.555260][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 240.555306][ T8485] CPU: 1 UID: 0 PID: 8485 Comm: syz.3.959 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 240.555337][ T8485] Tainted: [L]=SOFTLOCKUP [ 240.555346][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 240.555360][ T8485] Call Trace: [ 240.555369][ T8485] [ 240.555379][ T8485] dump_stack_lvl+0xe8/0x150 [ 240.555418][ T8485] should_fail_ex+0x46b/0x600 [ 240.555455][ T8485] ? __d_alloc+0x37/0x6f0 [ 240.555483][ T8485] should_failslab+0xa8/0x100 [ 240.555509][ T8485] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 240.555540][ T8485] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 240.555572][ T8485] ? __d_alloc+0x37/0x6f0 [ 240.555613][ T8485] __d_alloc+0x37/0x6f0 [ 240.555642][ T8485] ? hashlen_string+0xb6/0x110 [ 240.555670][ T8485] d_alloc_name+0xba/0x270 [ 240.555701][ T8485] ? __pfx_d_alloc_name+0x10/0x10 [ 240.555732][ T8485] ? fast_dput+0x481/0x690 [ 240.555761][ T8485] simple_fill_super+0x385/0x710 [ 240.555797][ T8485] nfsd_fill_super+0x8a/0x450 [ 240.555822][ T8485] ? rcu_is_watching+0x16/0xb0 [ 240.555846][ T8485] ? __pfx_nfsd_fill_super+0x10/0x10 [ 240.555873][ T8485] get_tree_keyed+0xe2/0x170 [ 240.555904][ T8485] vfs_get_tree+0x92/0x2a0 [ 240.555936][ T8485] do_new_mount+0x325/0xb00 [ 240.555959][ T8485] ? cap_capable+0x123/0x460 [ 240.555994][ T8485] ? __pfx_do_new_mount+0x10/0x10 [ 240.556020][ T8485] ? ns_capable+0x89/0xe0 [ 240.556052][ T8485] ? path_mount+0x647/0x1050 [ 240.556080][ T8485] ? user_path_at+0xd4/0x160 [ 240.556109][ T8485] __se_sys_mount+0x31d/0x420 [ 240.556141][ T8485] ? __pfx___se_sys_mount+0x10/0x10 [ 240.556173][ T8485] ? __x64_sys_mount+0x20/0xc0 [ 240.556204][ T8485] do_syscall_64+0x166/0x520 [ 240.556233][ T8485] ? trace_irq_disable+0x3b/0x140 [ 240.556261][ T8485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.556283][ T8485] ? clear_bhb_loop+0x70/0xc0 [ 240.556310][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.556331][ T8485] RIP: 0033:0x7fedab28e559 [ 240.556353][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.556372][ T8485] RSP: 002b:00007feda94e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 240.556396][ T8485] RAX: ffffffffffffffda RBX: 00007fedab515fa0 RCX: 00007fedab28e559 [ 240.556413][ T8485] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 240.556429][ T8485] RBP: 00007fedab3258b0 R08: 0000000000000000 R09: 0000000000000000 [ 240.556442][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.556456][ T8485] R13: 00007fedab516038 R14: 00007fedab515fa0 R15: 00007ffc830febe8 [ 240.556492][ T8485] [ 240.577808][ T1238] rpcbind: server 127.0.0.1 not responding, timed out [ 240.751552][ T5602] Bluetooth: hci4: command tx timeout [ 240.907981][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.021256][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.080782][ T158] bond0 (unregistering): Released all slaves [ 241.401733][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 241.640495][ T5743] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.854751][ T5743] usb 4-1: Using ep0 maxpacket: 16 [ 241.855669][ T5743] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 241.857488][ T5743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 241.886015][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.886043][ T5743] usb 4-1: Product: syz [ 241.886057][ T5743] usb 4-1: Manufacturer: syz [ 241.886072][ T5743] usb 4-1: SerialNumber: syz [ 241.954967][ T5743] usb 4-1: config 0 descriptor?? [ 242.014882][ T5743] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 242.014920][ T5743] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 242.227109][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.227452][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.227742][ T8269] bridge_slave_0: entered allmulticast mode [ 242.391075][ T8269] bridge_slave_0: entered promiscuous mode [ 242.393908][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.394016][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.394156][ T8269] bridge_slave_1: entered allmulticast mode [ 242.457387][ T8269] bridge_slave_1: entered promiscuous mode [ 242.785221][ T5743] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 242.832186][ T5602] Bluetooth: hci4: command tx timeout [ 243.761475][ T5743] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 243.761512][ T5743] em28xx 4-1:0.0: board has no eeprom [ 244.120452][ T5743] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 244.120503][ T5743] em28xx 4-1:0.0: dvb set to bulk mode. [ 244.122327][ T36] em28xx 4-1:0.0: Binding DVB extension [ 244.179396][ T8269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.278878][ T5743] usb 4-1: USB disconnect, device number 13 [ 244.417418][ T5743] em28xx 4-1:0.0: Disconnecting em28xx [ 244.682641][ T8269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.767471][ T8403] rxe_eth0 speed is unknown, defaulting to 1000 [ 244.910460][ T5602] Bluetooth: hci4: command tx timeout [ 245.100049][ T36] em28xx 4-1:0.0: Registering input extension [ 245.169397][ T5743] em28xx 4-1:0.0: Closing input extension [ 245.596338][ T8269] team0: Port device team_slave_0 added [ 245.698201][ T8269] team0: Port device team_slave_1 added [ 246.930502][ T36] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 246.930787][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 247.070646][ T36] usb 5-1: device descriptor read/64, error -32 [ 247.420474][ T36] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 247.570474][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 247.571425][ T36] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 247.572802][ T36] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.572818][ T36] usb 5-1: config 0 has no interface number 0 [ 247.575540][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.575556][ T36] usb 5-1: Product: syz [ 247.575563][ T36] usb 5-1: Manufacturer: syz [ 247.575571][ T36] usb 5-1: SerialNumber: syz [ 247.790595][ T36] usb 5-1: config 0 descriptor?? [ 247.998173][ T36] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 248.345798][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 248.533457][ T5743] em28xx: Freeing device [ 249.436564][ T5845] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 249.601919][ T36] gspca_spca1528: reg_w err -71 [ 249.602036][ T36] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 249.655803][ T36] usb 5-1: USB disconnect, device number 9 [ 249.686120][ T5845] usb 4-1: New USB device found, idVendor=1199, idProduct=6856, bcdDevice= 8.c1 [ 249.687578][ T5845] usb 4-1: config 3 has an invalid interface number: 5 but max is 0 [ 249.687604][ T5845] usb 4-1: config 3 has no interface number 0 [ 249.687652][ T5845] usb 4-1: config 3 interface 5 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 249.687673][ T5845] usb 4-1: config 3 interface 5 altsetting 3 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 249.687699][ T5845] usb 4-1: config 3 interface 5 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 249.687725][ T5845] usb 4-1: config 3 interface 5 altsetting 3 endpoint 0x9 has invalid maxpacket 1544, setting to 64 [ 249.687752][ T5845] usb 4-1: config 3 interface 5 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 249.687778][ T5845] usb 4-1: config 3 interface 5 has no altsetting 0 [ 249.859174][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.859205][ T5845] usb 4-1: Product: syz [ 249.859221][ T5845] usb 4-1: Manufacturer: syz [ 249.859236][ T5845] usb 4-1: SerialNumber: syz [ 250.480957][ T5845] sierra 4-1:3.5: Sierra USB modem converter detected [ 250.525357][ T5845] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 250.551702][ T5845] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 250.612718][ T5845] usb 4-1: USB disconnect, device number 14 [ 250.662916][ T5845] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 250.788674][ T5845] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 250.800009][ T5845] sierra 4-1:3.5: device disconnected [ 251.145803][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.145823][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.145850][ T8269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.201805][ T5598] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 251.509433][ T5598] usb 5-1: unable to get BOS descriptor or descriptor too short [ 251.509491][ T5598] usb 5-1: New USB device found, idVendor=17cc, idProduct=0000, bcdDevice= 0.00 [ 251.509545][ T5598] usb 5-1: no configurations [ 251.509560][ T5598] usb 5-1: can't read configurations, error -22 [ 251.817006][ T8594] Invalid auth_tok structure returned from key query [ 251.817027][ T8594] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 251.817041][ T8594] One or more global auth toks could not properly register; rc = [-22] [ 251.829732][ T8594] Error validating options; rc = [-22] [ 252.419124][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 252.482918][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.482938][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.482966][ T8269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.438483][ T8611] netlink: 40 bytes leftover after parsing attributes in process `syz.3.992'. [ 253.515186][ T8612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.992'. [ 253.563083][ T8611] ip6gre1: entered promiscuous mode [ 253.563113][ T8611] ip6gre1: entered allmulticast mode [ 254.012101][ T8269] hsr_slave_0: entered promiscuous mode [ 254.016325][ T8269] hsr_slave_1: entered promiscuous mode [ 254.017409][ T8269] debugfs: 'hsr0' already exists in 'hsr' [ 254.017435][ T8269] Cannot create hsr debugfs directory [ 254.765330][ T5598] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 254.941557][ T5598] usb 5-1: Using ep0 maxpacket: 8 [ 254.942409][ T5598] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 254.943619][ T5598] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 254.943666][ T5598] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.943686][ T5598] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 254.943710][ T5598] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.943734][ T5598] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.943773][ T5598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.257543][ T5598] usb 5-1: GET_CAPABILITIES returned 0 [ 255.257598][ T5598] usbtmc 5-1:16.0: can't read capabilities [ 255.621732][ T8645] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 255.622460][ T36] usb 5-1: USB disconnect, device number 12 [ 255.881447][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.881508][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.990552][ T5598] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 256.142459][ T5598] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 256.144220][ T5598] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.144253][ T5598] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 256.170494][ T5598] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.170531][ T5598] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 256.212691][ T5598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.212720][ T5598] usb 4-1: Product: syz [ 256.212735][ T5598] usb 4-1: Manufacturer: syz [ 256.212751][ T5598] usb 4-1: SerialNumber: syz [ 256.304254][ T5598] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 256.329519][ T5598] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 256.346931][ T5598] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 256.519169][ T8648] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 256.594865][ T5598] usb 4-1: USB disconnect, device number 15 [ 256.814297][ T5598] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 256.870630][ T36] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 257.164030][ T5598] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 257.265925][ T36] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 257.295860][ T5598] ti_usb_3410_5052 4-1:2.0: device disconnected [ 257.327918][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.410861][ T36] usb 1-1: config 0 descriptor?? [ 257.431071][ T36] cp210x 1-1:0.0: cp210x converter detected [ 257.969656][ T36] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 258.543010][ T36] usb 1-1: cp210x converter now attached to ttyUSB0 [ 258.702983][ T2262] usb 1-1: USB disconnect, device number 10 [ 260.515804][ T2262] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 260.516617][ T2262] cp210x 1-1:0.0: device disconnected [ 260.654679][ T5250] 8021q: adding VLAN 0 to HW filter on device eth3 [ 261.810445][ T158] hsr_slave_0: left promiscuous mode [ 261.855982][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.883410][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.904595][ T158] hsr_slave_1: left promiscuous mode [ 261.925493][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.965961][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.986529][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.996728][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.067367][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.406112][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.406144][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.972263][ T8708] FAULT_INJECTION: forcing a failure. [ 262.972263][ T8708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.972308][ T8708] CPU: 1 UID: 0 PID: 8708 Comm: syz.4.1019 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.972339][ T8708] Tainted: [L]=SOFTLOCKUP [ 262.972347][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.972360][ T8708] Call Trace: [ 262.972370][ T8708] [ 262.972379][ T8708] dump_stack_lvl+0xe8/0x150 [ 262.972419][ T8708] should_fail_ex+0x46b/0x600 [ 262.972457][ T8708] _copy_from_user+0x2d/0xb0 [ 262.972483][ T8708] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 262.972527][ T8708] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 262.972587][ T8708] ? rcu_is_watching+0x16/0xb0 [ 262.972622][ T8708] do_syscall_64+0x166/0x520 [ 262.972651][ T8708] ? trace_irq_disable+0x3b/0x140 [ 262.972680][ T8708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.972702][ T8708] ? clear_bhb_loop+0x70/0xc0 [ 262.972729][ T8708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.972750][ T8708] RIP: 0033:0x7f638274f8d9 [ 262.972771][ T8708] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 262.972789][ T8708] RSP: 002b:00007f6380a05a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 262.972813][ T8708] RAX: ffffffffffffffda RBX: 00007f6382a35fa0 RCX: 00007f638274f8d9 [ 262.972830][ T8708] RDX: 00007f6380a05a80 RSI: 00007f6380a05bb0 RDI: 0000000000000011 [ 262.972853][ T8708] RBP: 00007f63828458b0 R08: 0000000000000000 R09: 0000000000000000 [ 262.972868][ T8708] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 262.972882][ T8708] R13: 00007f6382a36038 R14: 00007f6382a35fa0 R15: 00007ffce3dadde8 [ 262.972916][ T8708] [ 263.464765][ T158] veth1_macvtap: left promiscuous mode [ 263.465091][ T158] veth0_macvtap: left promiscuous mode [ 263.465352][ T158] veth1_vlan: left promiscuous mode [ 263.468408][ T158] veth0_vlan: left promiscuous mode [ 264.367622][ T5602] Bluetooth: hci2: command tx timeout [ 264.390426][ T36] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 264.730446][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 264.731252][ T36] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 264.731854][ T36] usb 5-1: config 0 has no interfaces? [ 264.734308][ T36] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 264.734334][ T36] usb 5-1: Product: syz [ 264.734348][ T36] usb 5-1: Manufacturer: syz [ 264.734363][ T36] usb 5-1: SerialNumber: syz [ 264.789413][ T36] usb 5-1: config 0 descriptor?? [ 265.031965][ T36] usb 5-1: USB disconnect, device number 13 [ 265.420586][ T5722] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 265.570458][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 265.571321][ T5722] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.572883][ T5722] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 265.572913][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.576426][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.576452][ T5722] usb 1-1: Product: syz [ 265.576467][ T5722] usb 1-1: Manufacturer: syz [ 265.576482][ T5722] usb 1-1: SerialNumber: syz [ 265.683917][ T5722] usb 1-1: config 0 descriptor?? [ 265.705854][ T5722] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 265.705891][ T5722] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 266.336041][ T5722] em28xx 1-1:0.0: unknown em28xx chip ID (176) [ 266.439332][ T5602] Bluetooth: hci2: command tx timeout [ 266.557393][ T5722] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 266.986176][ T5722] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 266.986200][ T5722] em28xx 1-1:0.0: No AC97 audio processor [ 267.167354][ T5722] usb 1-1: USB disconnect, device number 11 [ 267.195242][ T5722] em28xx 1-1:0.0: Disconnecting em28xx [ 267.349380][ T5722] em28xx: Freeing device [ 268.510623][ T5602] Bluetooth: hci2: command tx timeout [ 269.315734][ T158] team0 (unregistering): Port device team_slave_1 removed [ 269.380525][ T158] team0 (unregistering): Port device team_slave_0 removed [ 270.590559][ T5602] Bluetooth: hci2: command tx timeout [ 273.635332][ T8781] FAULT_INJECTION: forcing a failure. [ 273.635332][ T8781] name failslab, interval 1, probability 0, space 0, times 0 [ 273.635378][ T8781] CPU: 1 UID: 0 PID: 8781 Comm: syz.0.1038 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 273.635410][ T8781] Tainted: [L]=SOFTLOCKUP [ 273.635419][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.635433][ T8781] Call Trace: [ 273.635442][ T8781] [ 273.635451][ T8781] dump_stack_lvl+0xe8/0x150 [ 273.635490][ T8781] should_fail_ex+0x46b/0x600 [ 273.635530][ T8781] should_failslab+0xa8/0x100 [ 273.635553][ T8781] ? __kernfs_new_node+0xe7/0xa70 [ 273.635585][ T8781] kmem_cache_alloc_noprof+0x9e/0x690 [ 273.635618][ T8781] ? __kernfs_new_node+0xe7/0xa70 [ 273.635656][ T8781] __kernfs_new_node+0xe7/0xa70 [ 273.635687][ T8781] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.635726][ T8781] ? __pfx___kernfs_new_node+0x10/0x10 [ 273.635767][ T8781] ? kernfs_root+0x1c/0x230 [ 273.635804][ T8781] ? kernfs_root+0x1c/0x230 [ 273.635833][ T8781] ? kernfs_root+0x1c/0x230 [ 273.635860][ T8781] ? kernfs_root+0x1c/0x230 [ 273.635896][ T8781] kernfs_new_node+0xea/0x140 [ 273.635932][ T8781] __kernfs_create_file+0x4b/0x2e0 [ 273.635961][ T8781] sysfs_add_file_mode_ns+0x237/0x300 [ 273.635998][ T8781] sysfs_merge_group+0x183/0x320 [ 273.636031][ T8781] ? __pfx_sysfs_merge_group+0x10/0x10 [ 273.636060][ T8781] ? device_add_attrs+0x5c3/0x600 [ 273.636086][ T8781] ? __pfx_device_add_attrs+0x10/0x10 [ 273.636115][ T8781] dpm_sysfs_add+0xd2/0x270 [ 273.636145][ T8781] device_add+0x4ca/0xb80 [ 273.636172][ T8781] nfc_register_device+0x4e/0x370 [ 273.636206][ T8781] nci_register_device+0x865/0x9a0 [ 273.636232][ T8781] ? __pfx_nci_register_device+0x10/0x10 [ 273.636256][ T8781] ? __rt_spin_lock_init+0x3e/0x50 [ 273.636282][ T8781] ? __init_waitqueue_head+0xad/0x160 [ 273.636311][ T8781] virtual_ncidev_open+0x129/0x190 [ 273.636339][ T8781] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 273.636364][ T8781] misc_open+0x2de/0x350 [ 273.636394][ T8781] chrdev_open+0x4dc/0x600 [ 273.636419][ T8781] ? __pfx_chrdev_open+0x10/0x10 [ 273.636440][ T8781] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 273.636478][ T8781] ? __pfx_chrdev_open+0x10/0x10 [ 273.636498][ T8781] do_dentry_open+0x849/0x1420 [ 273.636531][ T8781] vfs_open+0x3b/0x350 [ 273.636549][ T8781] ? path_openat+0x142d/0x1d60 [ 273.636583][ T8781] path_openat+0x1448/0x1d60 [ 273.636632][ T8781] do_file_open+0x23e/0x4a0 [ 273.636666][ T8781] ? __pfx_do_file_open+0x10/0x10 [ 273.636723][ T8781] ? alloc_fd+0x654/0x6d0 [ 273.636766][ T8781] do_sys_openat2+0x115/0x200 [ 273.636789][ T8781] ? __se_sys_futex+0x3a8/0x450 [ 273.636813][ T8781] ? __pfx_do_sys_openat2+0x10/0x10 [ 273.636839][ T8781] ? rcu_is_watching+0x16/0xb0 [ 273.636864][ T8781] __x64_sys_openat+0x138/0x170 [ 273.636891][ T8781] do_syscall_64+0x166/0x520 [ 273.636920][ T8781] ? trace_irq_disable+0x3b/0x140 [ 273.636949][ T8781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.636971][ T8781] ? clear_bhb_loop+0x70/0xc0 [ 273.636998][ T8781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.637020][ T8781] RIP: 0033:0x7f4d4028e559 [ 273.637039][ T8781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.637058][ T8781] RSP: 002b:00007f4d3e4e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 273.637080][ T8781] RAX: ffffffffffffffda RBX: 00007f4d40515fa0 RCX: 00007f4d4028e559 [ 273.637096][ T8781] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 273.637111][ T8781] RBP: 00007f4d403258b0 R08: 0000000000000000 R09: 0000000000000000 [ 273.637125][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.637137][ T8781] R13: 00007f4d40516038 R14: 00007f4d40515fa0 R15: 00007ffcb158ba18 [ 273.637173][ T8781] [ 274.105580][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 275.089394][ T5250] 8021q: adding VLAN 0 to HW filter on device eth4 [ 275.531852][ T8702] rxe_eth0 speed is unknown, defaulting to 1000 [ 275.795264][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.795398][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.795598][ T8403] bridge_slave_0: entered allmulticast mode [ 275.801500][ T8403] bridge_slave_0: entered promiscuous mode [ 275.820292][ T8269] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 275.926296][ T8269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.926788][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.926909][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.927082][ T8403] bridge_slave_1: entered allmulticast mode [ 275.938181][ T8403] bridge_slave_1: entered promiscuous mode [ 276.138196][ T8269] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.330096][ T8269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.418644][ T8269] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.639258][ T8269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.698012][ T8269] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 276.819820][ T8269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.909372][ T8403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.352068][ T8403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.969533][ T8403] team0: Port device team_slave_0 added [ 278.032499][ T8403] team0: Port device team_slave_1 added [ 278.579825][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.579844][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.579871][ T8403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.704712][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.704730][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.704753][ T8403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.842366][ T8866] jffs2: notice: (8866) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 283.783075][ T158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.783113][ T158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.242202][ T8403] hsr_slave_0: entered promiscuous mode [ 284.243609][ T8403] hsr_slave_1: entered promiscuous mode [ 284.244770][ T8403] debugfs: 'hsr0' already exists in 'hsr' [ 284.244805][ T8403] Cannot create hsr debugfs directory [ 286.583648][ T8918] FAULT_INJECTION: forcing a failure. [ 286.583648][ T8918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.583693][ T8918] CPU: 1 UID: 0 PID: 8918 Comm: syz.4.1074 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 286.583723][ T8918] Tainted: [L]=SOFTLOCKUP [ 286.583730][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.583745][ T8918] Call Trace: [ 286.583753][ T8918] [ 286.583762][ T8918] dump_stack_lvl+0xe8/0x150 [ 286.583801][ T8918] should_fail_ex+0x46b/0x600 [ 286.583837][ T8918] _copy_from_user+0x2d/0xb0 [ 286.583860][ T8918] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 286.583911][ T8918] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 286.583946][ T8918] ? rcu_is_watching+0x16/0xb0 [ 286.583976][ T8918] ? trace_kmalloc+0x2a/0xf0 [ 286.584009][ T8918] ip_generic_getfrag+0x149/0x2d0 [ 286.584046][ T8918] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 286.584074][ T8918] ? raw6_getfrag+0x116/0x3a0 [ 286.584100][ T8918] ? __alloc_skb+0x4d0/0x7a0 [ 286.584121][ T8918] ? skb_put+0x112/0x210 [ 286.584150][ T8918] __ip6_append_data+0x3b26/0x40c0 [ 286.584180][ T8918] ? __lock_acquire+0x747/0x2de0 [ 286.584228][ T8918] ? __pfx_raw6_getfrag+0x10/0x10 [ 286.584277][ T8918] ? __pfx___ip6_append_data+0x10/0x10 [ 286.584309][ T8918] ? __pfx_ip6_mtu+0x10/0x10 [ 286.584338][ T8918] ? ip6_setup_cork+0x631/0xfb0 [ 286.584369][ T8918] ? ip6_append_data+0x1a6/0x270 [ 286.584404][ T8918] ip6_append_data+0x108/0x270 [ 286.584438][ T8918] ? __pfx_raw6_getfrag+0x10/0x10 [ 286.584463][ T8918] rawv6_sendmsg+0x1298/0x18c0 [ 286.584497][ T8918] ? smack_ipv6host_label+0x824/0x8e0 [ 286.584525][ T8918] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 286.584555][ T8918] ? smack_socket_sendmsg+0x4b8/0x5a0 [ 286.584580][ T8918] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 286.584621][ T8918] ? sock_rps_record_flow+0x19/0x350 [ 286.584656][ T8918] ? inet_sendmsg+0x298/0x320 [ 286.584690][ T8918] ? __pfx_inet_sendmsg+0x10/0x10 [ 286.584720][ T8918] sock_sendmsg_nosec+0x10e/0x180 [ 286.584742][ T8918] ____sys_sendmsg+0x565/0x870 [ 286.584780][ T8918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.584817][ T8918] ? import_iovec+0x73/0xa0 [ 286.584843][ T8918] ___sys_sendmsg+0x2a5/0x360 [ 286.584866][ T8918] ? __lock_acquire+0x747/0x2de0 [ 286.584895][ T8918] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.584926][ T8918] ? futex_wait+0x2a2/0x390 [ 286.584992][ T8918] ? __fget_files+0x2a/0x420 [ 286.585017][ T8918] ? __fget_files+0x3a8/0x420 [ 286.585053][ T8918] __x64_sys_sendmsg+0x1b7/0x290 [ 286.585084][ T8918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.585136][ T8918] do_syscall_64+0x166/0x520 [ 286.585165][ T8918] ? trace_irq_disable+0x3b/0x140 [ 286.585193][ T8918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.585215][ T8918] ? clear_bhb_loop+0x70/0xc0 [ 286.585241][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.585262][ T8918] RIP: 0033:0x7f63827ae559 [ 286.585283][ T8918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.585301][ T8918] RSP: 002b:00007f6380a06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.585324][ T8918] RAX: ffffffffffffffda RBX: 00007f6382a35fa0 RCX: 00007f63827ae559 [ 286.585341][ T8918] RDX: 0000000000000060 RSI: 0000200000000800 RDI: 0000000000000004 [ 286.585355][ T8918] RBP: 00007f63828458b0 R08: 0000000000000000 R09: 0000000000000000 [ 286.585369][ T8918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.585382][ T8918] R13: 00007f6382a36038 R14: 00007f6382a35fa0 R15: 00007ffce3dadde8 [ 286.585418][ T8918] [ 287.340175][ T5594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.410785][ T5594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.420041][ T5594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.505547][ T5594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.506523][ T5594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.243593][ T158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.243624][ T158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.952217][ T5594] Bluetooth: hci5: command tx timeout [ 292.031066][ T5594] Bluetooth: hci5: command tx timeout [ 292.295851][ T158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.295889][ T158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.487968][ T8990] FAULT_INJECTION: forcing a failure. [ 292.487968][ T8990] name failslab, interval 1, probability 0, space 0, times 0 [ 292.488010][ T8990] CPU: 1 UID: 0 PID: 8990 Comm: syz.4.1094 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 292.488040][ T8990] Tainted: [L]=SOFTLOCKUP [ 292.488047][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 292.488060][ T8990] Call Trace: [ 292.488069][ T8990] [ 292.488084][ T8990] dump_stack_lvl+0xe8/0x150 [ 292.488122][ T8990] should_fail_ex+0x46b/0x600 [ 292.488162][ T8990] should_failslab+0xa8/0x100 [ 292.488186][ T8990] ? prepare_creds+0x30/0x820 [ 292.488211][ T8990] kmem_cache_alloc_noprof+0x9e/0x690 [ 292.488240][ T8990] ? make_kuid+0x1e5/0x670 [ 292.488267][ T8990] ? prepare_creds+0x30/0x820 [ 292.488292][ T8990] ? __pfx_make_kuid+0x10/0x10 [ 292.488330][ T8990] prepare_creds+0x30/0x820 [ 292.488360][ T8990] __sys_setreuid+0x105/0x990 [ 292.488398][ T8990] do_syscall_64+0x166/0x520 [ 292.488427][ T8990] ? trace_irq_disable+0x3b/0x140 [ 292.488455][ T8990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.488477][ T8990] ? clear_bhb_loop+0x70/0xc0 [ 292.488502][ T8990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.488523][ T8990] RIP: 0033:0x7f63827ae559 [ 292.488542][ T8990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.488560][ T8990] RSP: 002b:00007f6380a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 292.488584][ T8990] RAX: ffffffffffffffda RBX: 00007f6382a35fa0 RCX: 00007f63827ae559 [ 292.488600][ T8990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 292.488613][ T8990] RBP: 00007f63828458b0 R08: 0000000000000000 R09: 0000000000000000 [ 292.488627][ T8990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.488640][ T8990] R13: 00007f6382a36038 R14: 00007f6382a35fa0 R15: 00007ffce3dadde8 [ 292.488675][ T8990] [ 292.873243][ T8992] FAULT_INJECTION: forcing a failure. [ 292.873243][ T8992] name failslab, interval 1, probability 0, space 0, times 0 [ 292.873285][ T8992] CPU: 1 UID: 60928 PID: 8992 Comm: syz.0.1092 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 292.873316][ T8992] Tainted: [L]=SOFTLOCKUP [ 292.873323][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 292.873336][ T8992] Call Trace: [ 292.873344][ T8992] [ 292.873354][ T8992] dump_stack_lvl+0xe8/0x150 [ 292.873391][ T8992] should_fail_ex+0x46b/0x600 [ 292.873429][ T8992] should_failslab+0xa8/0x100 [ 292.873451][ T8992] ? prepare_creds+0x30/0x820 [ 292.873475][ T8992] kmem_cache_alloc_noprof+0x9e/0x690 [ 292.873507][ T8992] ? prepare_creds+0x30/0x820 [ 292.873530][ T8992] ? futex_unqueue+0x22/0x240 [ 292.873566][ T8992] prepare_creds+0x30/0x820 [ 292.873596][ T8992] join_session_keyring+0x1b/0x440 [ 292.873623][ T8992] lookup_user_key+0x2b5/0x1150 [ 292.873646][ T8992] ? __futex_wait+0x35a/0x410 [ 292.873676][ T8992] ? __pfx_lookup_user_key+0x10/0x10 [ 292.873701][ T8992] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 292.873735][ T8992] ? try_to_wake_up+0x84b/0x1430 [ 292.873762][ T8992] keyctl_get_persistent+0x273/0x820 [ 292.873803][ T8992] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 292.873829][ T8992] ? futex_wait+0x2a2/0x390 [ 292.873858][ T8992] ? __pfx_futex_wait+0x10/0x10 [ 292.873896][ T8992] ? fput+0xa0/0xd0 [ 292.873922][ T8992] __se_sys_keyctl+0x797/0x9d0 [ 292.873946][ T8992] ? __pfx___se_sys_keyctl+0x10/0x10 [ 292.873971][ T8992] ? __pfx_do_futex+0x10/0x10 [ 292.874003][ T8992] ? __se_sys_futex+0x3a8/0x450 [ 292.874034][ T8992] ? rcu_is_watching+0x16/0xb0 [ 292.874063][ T8992] ? __x64_sys_keyctl+0x20/0xc0 [ 292.874086][ T8992] do_syscall_64+0x166/0x520 [ 292.874116][ T8992] ? trace_irq_disable+0x3b/0x140 [ 292.874144][ T8992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.874166][ T8992] ? clear_bhb_loop+0x70/0xc0 [ 292.874192][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.874214][ T8992] RIP: 0033:0x7f4d4028e559 [ 292.874234][ T8992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.874253][ T8992] RSP: 002b:00007f4d3e4e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 292.874277][ T8992] RAX: ffffffffffffffda RBX: 00007f4d40515fa0 RCX: 00007f4d4028e559 [ 292.874293][ T8992] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 292.874309][ T8992] RBP: 00007f4d403258b0 R08: 0000000000000000 R09: 0000000000000000 [ 292.874323][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.874337][ T8992] R13: 00007f4d40516038 R14: 00007f4d40515fa0 R15: 00007ffcb158ba18 [ 292.874372][ T8992] [ 293.264490][ T8995] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1095'. [ 294.110543][ T5594] Bluetooth: hci5: command tx timeout [ 294.323911][ T8997] uprobe: syz.4.1097:8997 failed to unregister, leaking uprobe [ 295.702461][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.836183][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.857281][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.860232][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.877954][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.200481][ T5594] Bluetooth: hci5: command tx timeout [ 297.769175][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.769389][ T8702] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.769585][ T8702] bridge_slave_0: entered allmulticast mode [ 297.799422][ T8702] bridge_slave_0: entered promiscuous mode [ 297.838420][ T8702] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.838538][ T8702] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.838705][ T8702] bridge_slave_1: entered allmulticast mode [ 297.890736][ T8702] bridge_slave_1: entered promiscuous mode [ 298.110695][ T5594] Bluetooth: hci0: command tx timeout [ 298.570126][ T8922] rxe_eth0 speed is unknown, defaulting to 1000 [ 300.190772][ T5594] Bluetooth: hci0: command tx timeout [ 300.805841][ T158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.805879][ T158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.062305][ T8702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.168156][ T8702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.276397][ T5594] Bluetooth: hci0: command tx timeout [ 302.352957][ T5845] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 302.636469][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 302.679391][ T5845] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.694796][ T5845] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.694824][ T5845] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.698766][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.698872][ T5845] usb 5-1: Product: syz [ 302.698887][ T5845] usb 5-1: Manufacturer: syz [ 302.698902][ T5845] usb 5-1: SerialNumber: syz [ 303.208175][ T5845] usb 5-1: 0:2 : does not exist [ 303.473872][ T5845] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 303.849732][ T5845] usb 5-1: USB disconnect, device number 14 [ 304.354706][ T5594] Bluetooth: hci0: command tx timeout [ 306.352890][ T8702] team0: Port device team_slave_0 added [ 308.029033][ T8702] team0: Port device team_slave_1 added [ 308.894133][ T8702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.894153][ T8702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.894181][ T8702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.540146][ T9008] rxe_eth0 speed is unknown, defaulting to 1000 [ 309.627449][ T9113] netlink: 'syz.4.1119': attribute type 3 has an invalid length. [ 309.627473][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 309.685678][ T8702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.685697][ T8702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.685725][ T8702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.032084][ T8702] hsr_slave_0: entered promiscuous mode [ 311.040185][ T8702] hsr_slave_1: entered promiscuous mode [ 311.065284][ T8702] debugfs: 'hsr0' already exists in 'hsr' [ 311.065315][ T8702] Cannot create hsr debugfs directory [ 312.974983][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.051451][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.104370][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.252870][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.285116][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.419377][ T158] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.885946][ T9140] Set syz1 is full, maxelem 1038 reached [ 314.805469][ T158] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.564153][ T5594] Bluetooth: hci3: command tx timeout [ 316.637758][ T158] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.055501][ T9192] tmpfs: Using encoding : utf8-12.1.0 [ 317.231156][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 317.327346][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.327420][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.576997][ T8922] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.579637][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.579860][ T8922] bridge_slave_0: entered allmulticast mode [ 317.630690][ T5594] Bluetooth: hci3: command tx timeout [ 317.630898][ T8922] bridge_slave_0: entered promiscuous mode [ 317.839594][ T8922] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.839721][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.839910][ T8922] bridge_slave_1: entered allmulticast mode [ 317.875964][ T8922] bridge_slave_1: entered promiscuous mode [ 318.455434][ T158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.565878][ T9141] rxe_eth0 speed is unknown, defaulting to 1000 [ 319.069652][ T8922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.710448][ T5594] Bluetooth: hci3: command tx timeout [ 319.769555][ T8922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.227857][ T8922] team0: Port device team_slave_0 added [ 320.415383][ T8922] team0: Port device team_slave_1 added [ 320.956629][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.956649][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.956675][ T8922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.070529][ T8702] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 321.358783][ T8702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.800556][ T5594] Bluetooth: hci3: command tx timeout [ 322.058500][ T9229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.634571][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.695845][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.713132][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.717948][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.745040][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.087704][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.087723][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.087749][ T8922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.299074][ T8702] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 323.385638][ T8702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.970951][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 324.021745][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 325.010540][ T5602] Bluetooth: hci4: command tx timeout [ 325.354900][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.355086][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.355291][ T9008] bridge_slave_0: entered allmulticast mode [ 325.399696][ T9008] bridge_slave_0: entered promiscuous mode [ 325.469994][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.470131][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.470558][ T9008] bridge_slave_1: entered allmulticast mode [ 325.505696][ T9008] bridge_slave_1: entered promiscuous mode [ 325.547254][ T8922] hsr_slave_0: entered promiscuous mode [ 325.557367][ T8922] hsr_slave_1: entered promiscuous mode [ 325.563984][ T8922] debugfs: 'hsr0' already exists in 'hsr' [ 325.564013][ T8922] Cannot create hsr debugfs directory [ 326.016485][ T9273] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 326.042584][ T158] bridge_slave_1: left allmulticast mode [ 326.042624][ T158] bridge_slave_1: left promiscuous mode [ 326.042884][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.236242][ T158] bridge_slave_0: left allmulticast mode [ 326.236281][ T158] bridge_slave_0: left promiscuous mode [ 326.236606][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.495370][ T158] bridge_slave_1: left allmulticast mode [ 326.495409][ T158] bridge_slave_1: left promiscuous mode [ 326.495660][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.646502][ T158] bridge_slave_0: left allmulticast mode [ 326.646540][ T158] bridge_slave_0: left promiscuous mode [ 326.646796][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.070565][ T5602] Bluetooth: hci4: command tx timeout [ 328.423029][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.512403][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.553949][ T158] bond0 (unregistering): Released all slaves [ 329.188402][ T5602] Bluetooth: hci4: command tx timeout [ 329.373270][ T158] bond2 (unregistering): (slave geneve2): Releasing active interface [ 329.846747][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.921269][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.948941][ T158] bond0 (unregistering): Released all slaves [ 330.005366][ T158] bond1 (unregistering): (slave lo): Releasing backup interface [ 330.024007][ T158] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 330.026680][ T158] bond1 (unregistering): Released all slaves [ 330.066859][ T158] bond2 (unregistering): Released all slaves [ 330.441708][ T9008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.443796][ T9273] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 330.759230][ T9008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.759841][ T158] tipc: Left network mode [ 331.133772][ T9234] rxe_eth0 speed is unknown, defaulting to 1000 [ 331.230731][ T5602] Bluetooth: hci4: command tx timeout [ 331.357438][ T9008] team0: Port device team_slave_0 added [ 331.642074][ T9008] team0: Port device team_slave_1 added [ 333.503237][ T9297] gretap0: entered promiscuous mode [ 333.503436][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 333.503596][ T9298] gretap0: left promiscuous mode [ 333.621885][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.621904][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.621931][ T9008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.345113][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.345133][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.345160][ T9008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.256355][ T9008] hsr_slave_0: entered promiscuous mode [ 336.262904][ T9008] hsr_slave_1: entered promiscuous mode [ 336.264777][ T9008] debugfs: 'hsr0' already exists in 'hsr' [ 336.264804][ T9008] Cannot create hsr debugfs directory [ 337.957901][ T5250] 8021q: adding VLAN 0 to HW filter on device eth7 [ 337.968317][ T9141] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.968516][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.968741][ T9141] bridge_slave_0: entered allmulticast mode [ 337.974212][ T9141] bridge_slave_0: entered promiscuous mode [ 338.090917][ T9141] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.091077][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.091280][ T9141] bridge_slave_1: entered allmulticast mode [ 338.094128][ T9141] bridge_slave_1: entered promiscuous mode [ 339.755870][ T9381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1183'. [ 340.133821][ T9141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.284583][ T9141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.623923][ T158] hsr_slave_0: left promiscuous mode [ 340.663528][ T158] hsr_slave_1: left promiscuous mode [ 340.664968][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.666278][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.724878][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.724907][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.008129][ T158] hsr_slave_0: left promiscuous mode [ 341.023099][ T158] hsr_slave_1: left promiscuous mode [ 341.024603][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.024629][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.074292][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.074321][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.695223][ T158] veth1_macvtap: left promiscuous mode [ 341.695288][ T158] veth0_macvtap: left promiscuous mode [ 341.695432][ T158] veth1_vlan: left promiscuous mode [ 341.823255][ T158] veth1_macvtap: left promiscuous mode [ 341.823316][ T158] veth0_macvtap: left promiscuous mode [ 341.823762][ T158] veth1_vlan: left promiscuous mode [ 341.823863][ T158] veth0_vlan: left promiscuous mode [ 344.208687][ T158] team0 (unregistering): Port device team_slave_1 removed [ 344.277466][ T158] team0 (unregistering): Port device team_slave_0 removed [ 345.591658][ T158] team0 (unregistering): Port device team_slave_1 removed [ 345.636422][ T158] team0 (unregistering): Port device team_slave_0 removed [ 346.973031][ T9141] team0: Port device team_slave_0 added [ 347.215558][ T9141] team0: Port device team_slave_1 added [ 347.503862][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 347.503883][ T37] audit: type=1326 audit(1792078993.628:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 347.522772][ T37] audit: type=1326 audit(1792078993.658:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 347.522834][ T37] audit: type=1326 audit(1792078993.658:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 347.522875][ T37] audit: type=1326 audit(1792078993.658:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 347.522914][ T37] audit: type=1326 audit(1792078993.658:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 347.523875][ T37] audit: type=1326 audit(1792078993.658:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 347.523922][ T37] audit: type=1326 audit(1792078993.658:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 347.524429][ T37] audit: type=1326 audit(1792078993.658:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f638276ed8e code=0x7ffc0000 [ 347.525382][ T37] audit: type=1326 audit(1792078993.658:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f638276ed8e code=0x7ffc0000 [ 347.525443][ T37] audit: type=1326 audit(1792078993.658:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9400 comm="syz.4.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 347.775004][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.775023][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.775048][ T9141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.798675][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.798692][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.798718][ T9141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.415252][ T9407] sctp: [Deprecated]: syz.4.1192 (pid 9407) Use of int in max_burst socket option. [ 348.415252][ T9407] Use struct sctp_assoc_value instead [ 348.529939][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.638639][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.641547][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.647065][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.648015][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.020869][ T9141] hsr_slave_0: entered promiscuous mode [ 349.022545][ T9141] hsr_slave_1: entered promiscuous mode [ 349.023478][ T9141] debugfs: 'hsr0' already exists in 'hsr' [ 349.023503][ T9141] Cannot create hsr debugfs directory [ 351.070550][ T5602] Bluetooth: hci2: command tx timeout [ 352.071788][ T8922] syz-executor (8922) used greatest stack depth: 16568 bytes left [ 352.188713][ T5250] 8021q: adding VLAN 0 to HW filter on device eth8 [ 352.191834][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.192037][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.192215][ T9234] bridge_slave_0: entered allmulticast mode [ 352.199644][ T9234] bridge_slave_0: entered promiscuous mode [ 352.303143][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.303294][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.303519][ T9234] bridge_slave_1: entered allmulticast mode [ 352.308014][ T9234] bridge_slave_1: entered promiscuous mode [ 352.887322][ T9453] tipc: Enabling of bearer rejected, failed to enable media [ 352.933395][ T9234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.044621][ T9234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.164094][ T5602] Bluetooth: hci2: command tx timeout [ 353.536743][ T9234] team0: Port device team_slave_0 added [ 353.536869][ T9403] rxe_eth0 speed is unknown, defaulting to 1000 [ 353.680788][ T9234] team0: Port device team_slave_1 added [ 355.240728][ T5602] Bluetooth: hci2: command tx timeout [ 355.630023][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.630040][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.630059][ T9234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.929310][ T5594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.107149][ T5594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.109654][ T5594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.127524][ T5594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.138270][ T5594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.724124][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.724145][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.724172][ T9234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.013795][ T5250] 8021q: adding VLAN 0 to HW filter on device eth9 [ 357.320481][ T5602] Bluetooth: hci2: command tx timeout [ 357.740775][ T9234] hsr_slave_0: entered promiscuous mode [ 357.746277][ T9234] hsr_slave_1: entered promiscuous mode [ 357.747339][ T9234] debugfs: 'hsr0' already exists in 'hsr' [ 357.747364][ T9234] Cannot create hsr debugfs directory [ 358.360448][ T5602] Bluetooth: hci5: command tx timeout [ 360.267114][ T9515] dvmrp0: entered allmulticast mode [ 360.434264][ T5602] Bluetooth: hci5: command tx timeout [ 360.455487][ T9526] netlink: 'syz.4.1208': attribute type 1 has an invalid length. [ 360.536868][ T5250] 8021q: adding VLAN 0 to HW filter on device eth10 [ 360.622729][ T9526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.661129][ T9527] bond3: (slave geneve2): making interface the new active one [ 360.669845][ T9527] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 360.835995][ T9481] rxe_eth0 speed is unknown, defaulting to 1000 [ 362.514729][ T5602] Bluetooth: hci5: command tx timeout [ 363.101766][ T9141] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 363.167824][ T9141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.268787][ T9141] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 363.330956][ T9141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.438312][ T9141] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 363.687525][ T9141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.785847][ T9141] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 363.902017][ T9141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.592669][ T5602] Bluetooth: hci5: command tx timeout [ 364.746143][ T9403] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.746307][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.746474][ T9403] bridge_slave_0: entered allmulticast mode [ 364.749371][ T9403] bridge_slave_0: entered promiscuous mode [ 364.835059][ T9403] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.835193][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.835397][ T9403] bridge_slave_1: entered allmulticast mode [ 364.847343][ T9403] bridge_slave_1: entered promiscuous mode [ 366.486537][ T9403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.536968][ T5250] 8021q: adding VLAN 0 to HW filter on device eth11 [ 366.573877][ T9403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.999332][ T9403] team0: Port device team_slave_0 added [ 367.507988][ T9403] team0: Port device team_slave_1 added [ 368.583548][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.583567][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.583593][ T9403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.680728][ T158] bridge_slave_1: left allmulticast mode [ 368.680768][ T158] bridge_slave_1: left promiscuous mode [ 368.681034][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.812283][ T158] bridge_slave_0: left allmulticast mode [ 368.812323][ T158] bridge_slave_0: left promiscuous mode [ 368.812586][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.020661][ T158] bridge_slave_1: left allmulticast mode [ 369.020701][ T158] bridge_slave_1: left promiscuous mode [ 369.020937][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.122208][ T158] bridge_slave_0: left allmulticast mode [ 369.122236][ T158] bridge_slave_0: left promiscuous mode [ 369.122386][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.360996][ T158] bridge_slave_1: left allmulticast mode [ 369.361035][ T158] bridge_slave_1: left promiscuous mode [ 369.361293][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.472198][ T158] bridge_slave_0: left allmulticast mode [ 369.472238][ T158] bridge_slave_0: left promiscuous mode [ 369.472481][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.680792][ T158] bridge_slave_1: left allmulticast mode [ 369.680833][ T158] bridge_slave_1: left promiscuous mode [ 369.681075][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.802893][ T158] bridge_slave_0: left allmulticast mode [ 369.802931][ T158] bridge_slave_0: left promiscuous mode [ 369.803172][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.393702][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.483340][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.566004][ T158] bond0 (unregistering): Released all slaves [ 370.917020][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.002606][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.070179][ T158] bond0 (unregistering): Released all slaves [ 371.465627][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.522124][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.582982][ T158] bond0 (unregistering): Released all slaves [ 372.209354][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.272527][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.336413][ T158] bond0 (unregistering): Released all slaves [ 372.726761][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.726779][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.726806][ T9403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.996835][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 372.996857][ T37] audit: type=1326 audit(1792079019.118:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.4.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 372.996903][ T37] audit: type=1326 audit(1792079019.118:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.4.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 373.002937][ T37] audit: type=1326 audit(1792079019.128:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.4.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 373.002979][ T37] audit: type=1326 audit(1792079019.138:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.4.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 373.003009][ T37] audit: type=1326 audit(1792079019.138:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.4.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63827ae559 code=0x7ffc0000 [ 373.003041][ T37] audit: type=1326 audit(1792079019.138:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.4.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63827ae1eb code=0x7ffc0000 [ 373.003072][ T37] audit: type=1326 audit(1792079019.138:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.4.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63827ae1eb code=0x7ffc0000 [ 373.003102][ T37] audit: type=1326 audit(1792079019.138:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.4.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63827ae1eb code=0x7ffc0000 [ 373.003132][ T37] audit: type=1326 audit(1792079019.138:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.4.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63827ae1eb code=0x7ffc0000 [ 373.003161][ T37] audit: type=1326 audit(1792079019.138:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9591 comm="syz.4.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63827ae1eb code=0x7ffc0000 [ 373.564455][ T5594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.678233][ T5594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.683387][ T5594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.688748][ T5594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.692330][ T5594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.448003][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.448107][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.448305][ T9481] bridge_slave_0: entered allmulticast mode [ 374.483708][ T9481] bridge_slave_0: entered promiscuous mode [ 374.650178][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.650287][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.669492][ T9481] bridge_slave_1: entered allmulticast mode [ 374.696320][ T9481] bridge_slave_1: entered promiscuous mode [ 375.339269][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.511182][ T9403] hsr_slave_0: entered promiscuous mode [ 375.512742][ T9403] hsr_slave_1: entered promiscuous mode [ 375.513705][ T9403] debugfs: 'hsr0' already exists in 'hsr' [ 375.513729][ T9403] Cannot create hsr debugfs directory [ 375.577304][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.032481][ T5602] Bluetooth: hci0: command tx timeout [ 377.035070][ T5250] 8021q: adding VLAN 0 to HW filter on device eth12 [ 378.111170][ T5602] Bluetooth: hci0: command tx timeout [ 378.379310][ T9481] team0: Port device team_slave_0 added [ 378.757334][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.757407][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.877014][ T9481] team0: Port device team_slave_1 added [ 380.192125][ T5602] Bluetooth: hci0: command tx timeout [ 380.299913][ T9656] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1233'. [ 380.347603][ T9595] rxe_eth0 speed is unknown, defaulting to 1000 [ 380.366397][ T9657] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1233'. [ 380.669892][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.693889][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.775260][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.775279][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.775306][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.878506][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.878526][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.878554][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.270661][ T5602] Bluetooth: hci0: command tx timeout [ 382.906560][ T5594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.921170][ T5594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.948089][ T5594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.001603][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.032150][ T5594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 384.041061][ T9481] hsr_slave_0: entered promiscuous mode [ 384.041876][ T9481] hsr_slave_1: entered promiscuous mode [ 384.043704][ T9481] debugfs: 'hsr0' already exists in 'hsr' [ 384.043730][ T9481] Cannot create hsr debugfs directory [ 384.699320][ T158] hsr_slave_0: left promiscuous mode [ 384.771438][ T158] hsr_slave_1: left promiscuous mode [ 384.774503][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.804356][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.023069][ T158] hsr_slave_0: left promiscuous mode [ 385.046186][ T158] hsr_slave_1: left promiscuous mode [ 385.047560][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.125924][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.356417][ T158] hsr_slave_0: left promiscuous mode [ 385.399090][ T158] hsr_slave_1: left promiscuous mode [ 385.407893][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.550733][ T5602] Bluetooth: hci3: command tx timeout [ 385.625214][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.225803][ T158] hsr_slave_0: left promiscuous mode [ 386.248379][ T158] hsr_slave_1: left promiscuous mode [ 386.265838][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.291457][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.526292][ T5602] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 387.630695][ T5602] Bluetooth: hci3: command tx timeout [ 389.017785][ T158] team0 (unregistering): Port device team_slave_1 removed [ 389.132488][ T158] team0 (unregistering): Port device team_slave_0 removed [ 389.711723][ T5602] Bluetooth: hci3: command tx timeout [ 391.513867][ T158] team0 (unregistering): Port device team_slave_1 removed [ 391.574339][ T158] team0 (unregistering): Port device team_slave_0 removed [ 391.790517][ T5602] Bluetooth: hci3: command tx timeout [ 392.569946][ T158] team0 (unregistering): Port device team_slave_1 removed [ 392.622612][ T158] team0 (unregistering): Port device team_slave_0 removed [ 393.452829][ T158] team0 (unregistering): Port device team_slave_1 removed [ 393.574129][ T158] team0 (unregistering): Port device team_slave_0 removed [ 402.534492][ T9766] ceph: No mds server is up or the cluster is laggy [ 402.607420][ T9767] ceph: No mds server is up or the cluster is laggy [ 403.637767][ T5600] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 404.003255][ T5600] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 407.932800][ T5250] veth1_vlan: left promiscuous mode [ 408.770097][ T9666] rxe_eth0 speed is unknown, defaulting to 1000 [ 408.891350][ T5594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 409.009738][ T5594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 409.025965][ T5594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 409.219264][ T5594] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 409.262491][ T5594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 411.710497][ T5602] Bluetooth: hci6: command tx timeout [ 413.790515][ T5602] Bluetooth: hci6: command tx timeout [ 415.870500][ T5602] Bluetooth: hci6: command tx timeout [ 416.961758][ T9831] overlayfs: failed to clone upperpath [ 417.950457][ T5602] Bluetooth: hci6: command tx timeout [ 418.108187][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 418.154019][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.168447][ T5594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 418.181138][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 418.182247][ T5594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.350728][ T5602] Bluetooth: hci4: command tx timeout [ 422.430752][ T5594] Bluetooth: hci4: command tx timeout [ 424.520581][ T5594] Bluetooth: hci4: command tx timeout [ 426.590611][ T5594] Bluetooth: hci4: command tx timeout [ 428.042566][ T9873] bridge_slave_0: left allmulticast mode [ 428.042601][ T9873] bridge_slave_0: left promiscuous mode [ 428.057575][ T9873] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.376212][ T9873] bridge_slave_1: left allmulticast mode [ 429.376249][ T9873] bridge_slave_1: left promiscuous mode [ 429.376512][ T9873] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.991533][ T9873] bond0: (slave bond_slave_0): Releasing backup interface [ 430.962151][ T9873] bond0: (slave bond_slave_1): Releasing backup interface [ 434.218043][ T9873] team0: Port device team_slave_0 removed [ 434.758381][ T9873] team0: Port device team_slave_1 removed [ 434.792409][ T9873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.792440][ T9873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.045763][ T5602] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 435.057984][ T5602] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 435.059909][ T5602] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 435.084915][ T5602] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 435.094889][ T5602] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 435.260840][ T9873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.260871][ T9873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.710196][ T9873] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.136197][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.136340][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.136548][ T9595] bridge_slave_0: entered allmulticast mode [ 436.145032][ T9595] bridge_slave_0: entered promiscuous mode [ 436.259273][ T9814] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.260676][ T5250] veth1_vlan: entered promiscuous mode [ 437.231035][ T5594] Bluetooth: hci7: command tx timeout [ 439.335843][ T5594] Bluetooth: hci7: command tx timeout [ 440.206105][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.206175][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.390473][ T5594] Bluetooth: hci7: command tx timeout [ 441.666511][ T9834] rxe_eth0 speed is unknown, defaulting to 1000 [ 443.470506][ T5594] Bluetooth: hci7: command tx timeout [ 444.746708][ T5602] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 444.864610][ T5602] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 444.867098][ T5602] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 445.196708][ T5602] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 445.197518][ T5602] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 447.730686][ T5594] Bluetooth: hci8: command tx timeout [ 450.282117][ T5594] Bluetooth: hci8: command tx timeout [ 452.350619][ T5594] Bluetooth: hci8: command tx timeout [ 454.430855][ T5594] Bluetooth: hci8: command tx timeout [ 454.920196][ T9887] rxe_eth0 speed is unknown, defaulting to 1000 [ 457.076520][ T9977] overlayfs: failed to clone upperpath [ 458.716264][ T9979] netlink: 'syz.4.1291': attribute type 1 has an invalid length. [ 459.678165][ T9979] bond4: entered promiscuous mode [ 459.684547][ T9979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.672641][ T9982] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.673118][ T9982] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 461.673139][ T9982] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 461.772096][ T9982] bond4: (slave ip6gre2): making interface the new active one [ 461.772127][ T9982] ip6gre2: entered promiscuous mode [ 461.860510][ T9982] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 465.001982][ T9931] rxe_eth0 speed is unknown, defaulting to 1000 [ 465.280614][ T9991] uprobe: syz.4.1293:9991 failed to unregister, leaking uprobe [ 465.352351][ T9991] uprobe: syz.4.1293:9991 failed to unregister, leaking uprobe [ 470.177360][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 470.355415][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 470.370051][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 470.404979][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 470.578358][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 472.810650][ T5594] Bluetooth: hci0: command tx timeout [ 474.830458][ T5594] Bluetooth: hci0: command tx timeout [ 476.910460][ T5594] Bluetooth: hci0: command tx timeout [ 477.558768][ T9834] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 479.020616][ T5594] Bluetooth: hci0: command tx timeout [ 480.104942][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 480.731925][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.734466][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 480.735607][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 480.736953][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 481.044485][T10012] rxe_eth0 speed is unknown, defaulting to 1000 [ 483.310486][ T5594] Bluetooth: hci2: command tx timeout [ 483.809450][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.809657][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.809881][ T9887] bridge_slave_0: entered allmulticast mode [ 484.990108][ T9887] bridge_slave_0: entered promiscuous mode [ 485.391814][ T5594] Bluetooth: hci2: command tx timeout [ 486.104917][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.105048][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.105275][ T9887] bridge_slave_1: entered allmulticast mode [ 486.108050][ T9887] bridge_slave_1: entered promiscuous mode [ 487.510475][ T5594] Bluetooth: hci2: command tx timeout [ 489.555356][ T5594] Bluetooth: hci2: command tx timeout [ 489.917427][ T9887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.074076][ T9887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.285510][ T9887] team0: Port device team_slave_0 added [ 493.545245][ T9887] team0: Port device team_slave_1 added [ 495.328975][T10069] rxe_eth0 speed is unknown, defaulting to 1000 [ 496.886244][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 496.952578][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 496.981524][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 497.001070][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 497.001793][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.625951][ T9931] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.626079][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.626298][ T9931] bridge_slave_0: entered allmulticast mode [ 498.811080][ T9931] bridge_slave_0: entered promiscuous mode [ 499.111185][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.111314][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.111537][ T9931] bridge_slave_1: entered allmulticast mode [ 499.150135][ T9931] bridge_slave_1: entered promiscuous mode [ 499.300670][ T5594] Bluetooth: hci3: command tx timeout [ 501.359156][ T5594] Bluetooth: hci3: command tx timeout [ 501.807407][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.807480][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.390592][ T5594] Bluetooth: hci3: command tx timeout [ 503.765890][ T9931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.872221][T10179] netlink: 'syz.4.1315': attribute type 12 has an invalid length. [ 504.546504][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 504.586254][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 504.589367][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 504.611234][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 504.616882][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 505.230507][T10130] rxe_eth0 speed is unknown, defaulting to 1000 [ 505.480796][ T5594] Bluetooth: hci3: command tx timeout [ 506.370450][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.370675][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.370882][T10012] bridge_slave_0: entered allmulticast mode [ 506.374066][T10012] bridge_slave_0: entered promiscuous mode [ 506.429098][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.429233][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.429429][T10012] bridge_slave_1: entered allmulticast mode [ 506.458214][T10012] bridge_slave_1: entered promiscuous mode [ 506.598466][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.687185][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.840474][ T5594] Bluetooth: hci4: command tx timeout [ 507.174703][T10012] team0: Port device team_slave_0 added [ 508.881910][T10012] team0: Port device team_slave_1 added [ 508.912713][ T5594] Bluetooth: hci4: command tx timeout [ 509.212980][T10012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.212999][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.213025][T10012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.497442][T10012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.497461][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.497488][T10012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.314703][T10186] rxe_eth0 speed is unknown, defaulting to 1000 [ 510.767599][T10012] hsr_slave_0: entered promiscuous mode [ 510.776816][T10012] hsr_slave_1: entered promiscuous mode [ 510.788978][T10012] debugfs: 'hsr0' already exists in 'hsr' [ 510.789008][T10012] Cannot create hsr debugfs directory [ 510.967619][T10069] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.967848][T10069] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.968065][T10069] bridge_slave_0: entered allmulticast mode [ 510.990885][ T5594] Bluetooth: hci4: command tx timeout [ 511.005245][T10069] bridge_slave_0: entered promiscuous mode [ 511.059858][T10069] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.060079][T10069] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.076656][T10069] bridge_slave_1: entered allmulticast mode [ 511.169068][T10069] bridge_slave_1: entered promiscuous mode [ 512.445284][T10069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.774732][T10069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.081332][ T5594] Bluetooth: hci4: command tx timeout [ 513.480099][T10069] team0: Port device team_slave_0 added [ 513.683677][T10069] team0: Port device team_slave_1 added [ 514.663659][T10069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.663679][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.663706][T10069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.765793][T10069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.765812][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.765839][T10069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.563036][T10069] hsr_slave_0: entered promiscuous mode [ 515.564837][T10069] hsr_slave_1: entered promiscuous mode [ 515.565965][T10069] debugfs: 'hsr0' already exists in 'hsr' [ 515.565991][T10069] Cannot create hsr debugfs directory [ 518.015555][T10130] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.015696][T10130] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.015898][T10130] bridge_slave_0: entered allmulticast mode [ 518.052126][T10130] bridge_slave_0: entered promiscuous mode [ 518.157471][T10130] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.157729][T10130] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.157966][T10130] bridge_slave_1: entered allmulticast mode [ 518.188520][T10130] bridge_slave_1: entered promiscuous mode [ 518.542747][T10130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.698607][T10307] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1330'. [ 518.699119][T10130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.228381][T10130] team0: Port device team_slave_0 added [ 520.849768][T10130] team0: Port device team_slave_1 added [ 521.451233][T10130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.451253][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.451280][T10130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.630005][T10130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.630024][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.630053][T10130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.389011][T10186] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.389226][T10186] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.389460][T10186] bridge_slave_0: entered allmulticast mode [ 522.423590][T10186] bridge_slave_0: entered promiscuous mode [ 522.472199][T10186] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.473917][T10186] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.474156][T10186] bridge_slave_1: entered allmulticast mode [ 522.507120][T10186] bridge_slave_1: entered promiscuous mode [ 522.928291][T10130] hsr_slave_0: entered promiscuous mode [ 522.938722][T10130] hsr_slave_1: entered promiscuous mode [ 522.951578][T10130] debugfs: 'hsr0' already exists in 'hsr' [ 522.951607][T10130] Cannot create hsr debugfs directory [ 523.156952][T10186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.178257][T10186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.531957][T10186] team0: Port device team_slave_0 added [ 526.019667][T10186] team0: Port device team_slave_1 added [ 526.775198][T10186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.775217][T10186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.775243][T10186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.798108][T10186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.798127][T10186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.798153][T10186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.165142][T10186] hsr_slave_0: entered promiscuous mode [ 529.176646][T10186] hsr_slave_1: entered promiscuous mode [ 529.180125][T10186] debugfs: 'hsr0' already exists in 'hsr' [ 529.180151][T10186] Cannot create hsr debugfs directory [ 531.129379][T10390] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 531.178591][T10390] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 531.201534][T10390] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 531.260907][T10390] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 531.266900][T10390] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 533.563627][ T5594] Bluetooth: hci5: command tx timeout [ 535.630561][ T5594] Bluetooth: hci5: command tx timeout [ 536.064789][T10388] rxe_eth0 speed is unknown, defaulting to 1000 [ 537.710471][ T5594] Bluetooth: hci5: command tx timeout [ 539.790545][ T5594] Bluetooth: hci5: command tx timeout [ 540.873327][T10390] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 540.938289][T10390] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 540.968907][T10390] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 540.979225][T10390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 540.985042][T10390] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 543.150475][ T5594] Bluetooth: hci6: command tx timeout [ 545.261717][ T5594] Bluetooth: hci6: command tx timeout [ 546.225755][T10443] rxe_eth0 speed is unknown, defaulting to 1000 [ 547.310496][ T5594] Bluetooth: hci6: command tx timeout [ 548.784688][T10388] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.784911][T10388] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.785162][T10388] bridge_slave_0: entered allmulticast mode [ 549.400640][ T5594] Bluetooth: hci6: command tx timeout [ 549.793807][T10388] bridge_slave_0: entered promiscuous mode [ 550.458938][T10388] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.459075][T10388] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.459312][T10388] bridge_slave_1: entered allmulticast mode [ 550.690908][T10388] bridge_slave_1: entered promiscuous mode [ 551.550765][T10388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.571652][T10388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.395315][T10388] team0: Port device team_slave_0 added [ 553.127531][T10390] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 553.237983][T10388] team0: Port device team_slave_1 added [ 553.535685][ T5602] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 553.548694][ T5602] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 553.550220][ T5602] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 553.551839][ T5602] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 556.910600][ T5594] Bluetooth: hci7: command tx timeout [ 557.226839][T10388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.226857][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.226884][T10388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.755711][T10388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.755730][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.755760][T10388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.028707][T10390] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 558.093484][T10390] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 558.100274][T10390] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 558.129479][T10390] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 558.163880][T10390] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 559.098255][ T5594] Bluetooth: hci7: command tx timeout [ 560.350686][ T5594] Bluetooth: hci8: command tx timeout [ 560.823001][T10388] hsr_slave_0: entered promiscuous mode [ 560.831984][T10388] hsr_slave_1: entered promiscuous mode [ 560.838482][T10388] debugfs: 'hsr0' already exists in 'hsr' [ 560.838511][T10388] Cannot create hsr debugfs directory [ 561.150633][ T5594] Bluetooth: hci7: command tx timeout [ 562.451042][ T5594] Bluetooth: hci8: command tx timeout [ 563.101163][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.101234][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.240801][ T5594] Bluetooth: hci7: command tx timeout [ 564.510925][ T5594] Bluetooth: hci8: command tx timeout [ 564.798895][T10486] rxe_eth0 speed is unknown, defaulting to 1000 [ 566.591203][ T5594] Bluetooth: hci8: command tx timeout [ 568.095900][T10390] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 568.195939][T10390] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 568.199882][T10390] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 568.221920][T10390] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 568.230589][T10390] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 570.270515][T10390] Bluetooth: hci9: command tx timeout [ 571.341515][T10498] rxe_eth0 speed is unknown, defaulting to 1000 [ 572.360490][T10390] Bluetooth: hci9: command tx timeout [ 574.438962][T10390] Bluetooth: hci9: command tx timeout [ 574.562054][T10443] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.562193][T10443] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.562436][T10443] bridge_slave_0: entered allmulticast mode [ 574.688510][T10443] bridge_slave_0: entered promiscuous mode [ 575.438192][T10443] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.438320][T10443] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.438552][T10443] bridge_slave_1: entered allmulticast mode [ 575.477894][T10443] bridge_slave_1: entered promiscuous mode [ 576.510537][T10390] Bluetooth: hci9: command tx timeout [ 577.177090][T10443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.373998][T10443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.770875][T10534] rxe_eth0 speed is unknown, defaulting to 1000 [ 578.963693][T10443] team0: Port device team_slave_0 added [ 579.056350][T10443] team0: Port device team_slave_1 added [ 580.366007][T10443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.366025][T10443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.366053][T10443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.421524][T10443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.421542][T10443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.421570][T10443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.260265][T10443] hsr_slave_0: entered promiscuous mode [ 583.265421][T10443] hsr_slave_1: entered promiscuous mode [ 583.418171][T10443] debugfs: 'hsr0' already exists in 'hsr' [ 583.418200][T10443] Cannot create hsr debugfs directory [ 593.475723][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.475851][T10486] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.476111][T10486] bridge_slave_0: entered allmulticast mode [ 593.483186][T10486] bridge_slave_0: entered promiscuous mode [ 593.689973][T10486] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.690099][T10486] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.690826][T10486] bridge_slave_1: entered allmulticast mode [ 593.722138][T10486] bridge_slave_1: entered promiscuous mode [ 593.820061][ T5602] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 593.895607][ T5602] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 593.910873][ T5602] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 593.914784][ T5602] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 593.922268][ T5602] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 595.870643][T10390] Bluetooth: hci0: command 0x0406 tx timeout [ 595.960633][T10390] Bluetooth: hci10: command tx timeout [ 596.179670][T10486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.876159][T10486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.045290][ T5594] Bluetooth: hci10: command tx timeout [ 599.229812][T10498] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.229939][T10498] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.230194][T10498] bridge_slave_0: entered allmulticast mode [ 600.113214][ T5594] Bluetooth: hci10: command tx timeout [ 600.117857][T10498] bridge_slave_0: entered promiscuous mode [ 600.762418][T10498] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.762547][T10498] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.762794][T10498] bridge_slave_1: entered allmulticast mode [ 600.822951][T10498] bridge_slave_1: entered promiscuous mode [ 601.984639][T10486] team0: Port device team_slave_0 added [ 602.190742][ T5594] Bluetooth: hci10: command tx timeout [ 602.247095][T10486] team0: Port device team_slave_1 added [ 602.434358][T10498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.752081][T10498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.876892][ T5602] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 604.923411][T10486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.923426][T10486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.923446][T10486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.929052][ T5602] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 605.002718][ T5602] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 605.046476][ T5602] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 605.063855][ T5602] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 605.400853][T10486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.400871][T10486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.400897][T10486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.474086][T10498] team0: Port device team_slave_0 added [ 605.902329][T10498] team0: Port device team_slave_1 added [ 606.209978][T10390] Bluetooth: hci2: command 0x0406 tx timeout [ 608.275677][ T5594] Bluetooth: hci11: command tx timeout [ 608.860508][T10596] rxe_eth0 speed is unknown, defaulting to 1000 [ 608.986371][T10498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.986391][T10498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.986419][T10498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.350455][ T5594] Bluetooth: hci11: command tx timeout [ 611.988924][T10498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.988944][T10498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.988972][T10498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.430507][ T5594] Bluetooth: hci11: command tx timeout [ 614.510475][ T5594] Bluetooth: hci11: command tx timeout [ 615.244666][T10390] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 615.638808][T10390] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 615.654028][T10390] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 615.670126][T10390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 615.681913][T10390] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 618.136189][T10390] Bluetooth: hci6: command tx timeout [ 620.152993][T10534] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.194777][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.225305][T10534] bridge_slave_0: entered allmulticast mode [ 620.273282][T10390] Bluetooth: hci6: command tx timeout [ 620.386926][T10534] bridge_slave_0: entered promiscuous mode [ 620.599342][T10534] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.599496][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.599749][T10534] bridge_slave_1: entered allmulticast mode [ 620.637946][ T5602] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 620.674141][T10534] bridge_slave_1: entered promiscuous mode [ 621.173936][ T5602] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 621.197159][ T5602] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 621.282395][ T5602] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 621.301518][ T5602] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 622.307845][T10390] Bluetooth: hci3: command 0x0406 tx timeout [ 622.350837][T10390] Bluetooth: hci6: command tx timeout [ 623.390741][ T5594] Bluetooth: hci7: command tx timeout [ 624.432179][ T5594] Bluetooth: hci6: command tx timeout [ 624.664498][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.674316][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.470526][ T5594] Bluetooth: hci7: command tx timeout [ 627.233129][T10390] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 627.300705][T10390] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 627.303753][T10390] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 627.309872][T10390] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 627.343406][T10390] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 627.550716][T10390] Bluetooth: hci7: command tx timeout [ 627.950407][T10534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.997187][T10619] rxe_eth0 speed is unknown, defaulting to 1000 [ 629.470502][T10390] Bluetooth: hci8: command tx timeout [ 629.651875][T10390] Bluetooth: hci7: command tx timeout [ 631.550584][ T5594] Bluetooth: hci8: command tx timeout [ 631.710638][ T5602] Bluetooth: hci4: command 0x0406 tx timeout [ 633.631544][T10390] Bluetooth: hci8: command tx timeout [ 635.710500][T10390] Bluetooth: hci8: command tx timeout [ 640.094675][T10637] rxe_eth0 speed is unknown, defaulting to 1000 [ 644.459405][T10596] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.459535][T10596] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.459792][T10596] bridge_slave_0: entered allmulticast mode [ 644.788070][T10596] bridge_slave_0: entered promiscuous mode [ 646.446592][T10596] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.446777][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.447041][T10596] bridge_slave_1: entered allmulticast mode [ 646.482713][T10596] bridge_slave_1: entered promiscuous mode [ 646.550190][T10646] rxe_eth0 speed is unknown, defaulting to 1000 [ 647.181896][T10596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.266423][T10596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.690582][T10659] rxe_eth0 speed is unknown, defaulting to 1000 [ 649.775576][T10596] team0: Port device team_slave_0 added [ 650.120108][ T38] INFO: task syz-executor:9834 blocked for more than 143 seconds. [ 650.120139][ T38] Tainted: G L syzkaller #0 [ 650.120150][ T38] Blocked by coredump. [ 650.120157][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.120167][ T38] task:syz-executor state:D stack:21704 pid:9834 tgid:9834 ppid:1 task_flags:0x40054c flags:0x00080003 [ 650.120235][ T38] Call Trace: [ 650.120470][ T38] [ 650.120496][ T38] __schedule+0x16d9/0x5700 [ 650.120693][ T38] ? lapic_next_event+0x11/0x20 [ 650.120797][ T38] ? __pfx_clockevents_program_event+0x10/0x10 [ 650.120862][ T38] ? __pfx___schedule+0x10/0x10 [ 650.120903][ T38] rt_mutex_schedule+0x76/0xf0 [ 650.120941][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 650.121008][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 650.121033][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 650.121056][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 650.121097][ T38] ? rcu_barrier+0x4c/0x530 [ 650.121140][ T38] ? rcu_barrier+0x4c/0x530 ** replaying previous printk message ** [ 650.121140][ T38] ? rcu_barrier+0x4c/0x530 [ 650.121158][ T38] mutex_lock_nested+0x168/0x1d0 [ 650.121179][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 650.121206][ T38] rcu_barrier+0x4c/0x530 [ 650.121238][ T38] netdev_run_todo+0x2fc/0x1060 [ 650.121377][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 650.121401][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 650.121428][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 650.121480][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 650.138900][ T38] ? netdev_state_change+0x1bc/0x210 [ 650.139013][ T38] tun_chr_close+0x13f/0x1c0 [ 650.139112][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 650.139132][ T38] __fput+0x41f/0xa80 [ 650.139175][ T38] task_work_run+0x1d9/0x270 [ 650.139213][ T38] ? __pfx_task_work_run+0x10/0x10 [ 650.139236][ T38] ? do_exit+0x735/0x2360 [ 650.139255][ T38] ? kmem_cache_free+0x187/0x6d0 [ 650.139280][ T38] ? put_net+0x191/0x260 [ 650.139304][ T38] ? do_exit+0x735/0x2360 [ 650.139328][ T38] do_exit+0x73a/0x2360 [ 650.139351][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 650.139385][ T38] ? __pfx_do_exit+0x10/0x10 [ 650.139405][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 650.139437][ T38] ? rt_spin_unlock+0x159/0x200 [ 650.139463][ T38] do_group_exit+0x22d/0x2f0 [ 650.139483][ T38] ? rt_spin_unlock+0x165/0x200 [ 650.139508][ T38] get_signal+0x121b/0x12c0 [ 650.139558][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 650.139616][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 650.139666][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 650.139695][ T38] ? rcu_is_watching+0x16/0xb0 [ 650.139720][ T38] do_syscall_64+0x328/0x520 [ 650.139781][ T38] ? trace_irq_disable+0x3b/0x140 [ 650.139814][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.139891][ T38] ? clear_bhb_loop+0x70/0xc0 [ 650.139915][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.139941][ T38] RIP: 0033:0x7f0eec73ed8e [ 650.139994][ T38] RSP: 002b:00007ffd7dab6c28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 650.140049][ T38] RAX: 000000000000004c RBX: 000055555fce0500 RCX: 00007f0eec73ed8e [ 650.140063][ T38] RDX: 000000000000004c RSI: 00007f0eed534670 RDI: 0000000000000003 [ 650.140076][ T38] RBP: 0000000000000001 R08: 00007ffd7dab6ca4 R09: 000000000000000c [ 650.140088][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 650.140104][ T38] R13: 0000000000000000 R14: 00007f0eed534670 R15: 0000000000000000 [ 650.140131][ T38] [ 650.140141][ T38] INFO: task syz-executor:9887 blocked for more than 143 seconds. [ 650.140154][ T38] Tainted: G L syzkaller #0 [ 650.140160][ T38] Blocked by coredump. [ 650.140163][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.140169][ T38] task:syz-executor state:D stack:18712 pid:9887 tgid:9887 ppid:1 task_flags:0x40054c flags:0x00080003 [ 650.140198][ T38] Call Trace: [ 650.140202][ T38] [ 650.140209][ T38] __schedule+0x16d9/0x5700 [ 650.140240][ T38] ? __pfx___schedule+0x10/0x10 [ 650.140262][ T38] rt_mutex_schedule+0x76/0xf0 [ 650.140277][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 650.190439][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 650.190478][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 650.190501][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 650.190539][ T38] ? rcu_barrier+0x4c/0x530 [ 650.190567][ T38] ? rcu_barrier+0x4c/0x530 [ 650.190585][ T38] mutex_lock_nested+0x168/0x1d0 [ 650.190613][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 650.190652][ T38] rcu_barrier+0x4c/0x530 [ 650.190684][ T38] netdev_run_todo+0x2fc/0x1060 [ 650.190716][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 650.190739][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 650.190766][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 650.190794][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 650.190829][ T38] ? netdev_state_change+0x1bc/0x210 [ 650.190856][ T38] tun_chr_close+0x13f/0x1c0 [ 650.190875][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 650.190894][ T38] __fput+0x41f/0xa80 [ 650.190924][ T38] task_work_run+0x1d9/0x270 [ 650.190951][ T38] ? __pfx_task_work_run+0x10/0x10 [ 650.190973][ T38] ? do_exit+0x735/0x2360 [ 650.190992][ T38] ? kmem_cache_free+0x187/0x6d0 [ 650.191010][ T38] ? put_net+0x191/0x260 [ 650.191034][ T38] ? do_exit+0x735/0x2360 [ 650.191058][ T38] do_exit+0x73a/0x2360 [ 650.191080][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 650.191112][ T38] ? __pfx_do_exit+0x10/0x10 [ 650.191132][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 650.191164][ T38] ? rt_spin_unlock+0x159/0x200 [ 650.191188][ T38] do_group_exit+0x22d/0x2f0 [ 650.191209][ T38] ? rt_spin_unlock+0x165/0x200 [ 650.191232][ T38] get_signal+0x121b/0x12c0 [ 650.191282][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 650.191315][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 650.191342][ T38] ? kmem_cache_free+0x539/0x6d0 [ 650.191380][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 650.191408][ T38] ? rcu_is_watching+0x16/0xb0 [ 650.191432][ T38] do_syscall_64+0x328/0x520 [ 650.191458][ T38] ? trace_irq_disable+0x3b/0x140 [ 650.191484][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.191505][ T38] ? clear_bhb_loop+0x70/0xc0 [ 650.191529][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.191549][ T38] RIP: 0033:0x7f64a529ed8e [ 650.191568][ T38] RSP: 002b:00007ffdc327eae8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 650.191590][ T38] RAX: 000000000000008c RBX: 0000555579874500 RCX: 00007f64a529ed8e [ 650.191610][ T38] RDX: 000000000000008c RSI: 00007f64a6094670 RDI: 0000000000000003 [ 650.191624][ T38] RBP: 0000000000000001 R08: 00007ffdc327eb64 R09: 000000000000000c [ 650.191637][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 650.191649][ T38] R13: 0000000000000000 R14: 00007f64a6094670 R15: 0000000000000000 [ 650.191681][ T38] [ 650.191769][ T38] [ 650.191769][ T38] Showing all locks held in the system: [ 650.191778][ T38] locks held by ksoftirqd/0/15: 5, last CPU#0: [ 650.191817][ T38] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 650.191936][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 650.196442][ T38] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 650.196494][ T38] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 650.196680][ T38] #4: ffff88801f2f9b58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 650.196733][ T38] locks held by pr/ttyS0/17: 3, last CPU#0: [ 650.196747][ T38] #0: ffffffff8f09d818 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 650.196828][ T38] #1: ffffffff9aeb1f58 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 650.196881][ T38] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 650.196929][ T38] locks held by rcuc/1/28: 3, last CPU#1: [ 650.196943][ T38] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 650.196993][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 650.197043][ T38] #2: ffffffff8f1c3e20 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 650.197096][ T38] locks held by ksoftirqd/1/30: 5, on CPU#1: [ 650.197110][ T38] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 650.197159][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 650.197209][ T38] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 650.197255][ T38] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 650.197302][ T38] #4: ffff88801f2f9b58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 650.197353][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 650.197367][ T38] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 650.197433][ T38] locks held by kworker/u8:5/96: 3, on CPU#1: [ 650.197447][ T38] #0: ffff88803359c938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 650.197495][ T38] #1: ffffc90003707c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 650.197544][ T38] #2: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 650.197685][ T38] locks held by kworker/u8:7/158: 4, on CPU#1: [ 650.197700][ T38] #0: ffff88801beb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 650.197750][ T38] #1: ffffc9000415fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 650.197801][ T38] #2: ffffffff905c8080 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 650.197882][ T38] #3: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 650.210436][ T38] locks held by syslogd/4937: 1, on CPU#1: [ 650.210454][ T38] #0: ffff88802a67ecd8 (&si->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbe/0x1e0 [ 650.210506][ T38] locks held by klogd/4944: 2, last CPU#1: [ 650.210520][ T38] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 650.210662][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 650.210710][ T38] locks held by getty/5346: 2, on CPU#1: [ 650.210724][ T38] #0: ffff8880371e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 650.210862][ T38] #1: ffffc900044d32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 650.210927][ T38] locks held by kworker/u8:20/9356: 5, last CPU#0: [ 650.210941][ T38] #0: ffff888033958138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 650.210994][ T38] #1: ffffc9000592fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 650.211046][ T38] #2: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 650.211097][ T38] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 650.211147][ T38] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 650.211195][ T38] locks held by kworker/u8:26/9362: 2, last CPU#1: [ 650.211209][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 650.211260][ T38] #1: ffffc900056efc40 ((next_reseed).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 650.211314][ T38] locks held by syz-executor/9834: 1, on CPU#0: [ 650.211328][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 650.211375][ T38] locks held by syz-executor/9887: 1, on CPU#0: [ 650.211388][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 650.211435][ T38] locks held by syz-executor/9931: 1, on CPU#0: [ 650.211448][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 650.211494][ T38] locks held by syz-executor/10012: 7, on CPU#0: [ 650.211509][ T38] #0: ffff8880369dc510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 650.211563][ T38] #1: ffff88803e09d078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 650.211634][ T38] #2: ffff88802a2704b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 650.211685][ T38] #3: ffffffff8fe46bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 650.211794][ T38] #4: ffff888036d49160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 650.217688][ T38] #5: ffff88803c0ce310 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 650.217851][ T38] #6: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 650.217902][ T38] locks held by syz-executor/10069: 4, on CPU#0: [ 650.217917][ T38] #0: ffff8880369dc510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 650.217985][ T38] #1: ffff888058d84c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 650.218031][ T38] #2: ffff88802a2704b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 650.218087][ T38] #3: ffffffff8fe46bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 650.218135][ T38] locks held by syz-executor/10130: 4, on CPU#0: [ 650.218149][ T38] #0: ffff8880369dc510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 650.218203][ T38] #1: ffff8880405cc078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 650.218248][ T38] #2: ffff88802a2704b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 650.218299][ T38] #3: ffffffff8fe46bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 650.218345][ T38] locks held by syz-executor/10186: 4, on CPU#1: [ 650.218359][ T38] #0: ffff8880369dc510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 650.218413][ T38] #1: ffff8880878a1878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 650.218458][ T38] #2: ffff88802a2704b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 650.218508][ T38] #3: ffffffff8fe46bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 650.218557][ T38] locks held by syz-executor/10388: 4, on CPU#0: [ 650.218571][ T38] #0: ffff8880369dc510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 650.218630][ T38] #1: ffff8880945b6878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 650.218675][ T38] #2: ffff88802a2704b8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 650.218725][ T38] #3: ffffffff8fe46bf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 650.218773][ T38] locks held by syz-executor/10443: 1, on CPU#0: [ 650.218786][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 650.218833][ T38] locks held by syz-executor/10486: 1, on CPU#1: [ 650.218846][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 650.218892][ T38] locks held by syz-executor/10498: 1, on CPU#1: [ 650.218905][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 650.218952][ T38] locks held by syz-executor/10534: 1, on CPU#0: [ 650.218966][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 650.219013][ T38] locks held by syz-executor/10596: 1, on CPU#0: [ 650.219027][ T38] #0: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 650.219121][ T38] locks held by syz-executor/10619: 2, on CPU#0: [ 650.219136][ T38] #0: ffffffff8fd437a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 650.223745][ T38] #1: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 650.223808][ T38] locks held by syz-executor/10637: 6, on CPU#0: [ 650.223824][ T38] #0: ffffffff905c8080 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 650.223871][ T38] #1: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 650.223923][ T38] #2: ffff888088b5d060 (&dev->lock){+.+.}-{4:4}, at: gro_cells_init+0x1ca/0x270 [ 650.224050][ T38] #3: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 650.224102][ T38] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 650.224152][ T38] #5: ffff88801f2f9b58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 650.224204][ T38] locks held by syz-executor/10646: 2, on CPU#0: [ 650.224218][ T38] #0: ffffffff905c8080 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 650.224264][ T38] #1: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 650.224355][ T38] locks held by syz-executor/10659: 5, last CPU#0: [ 650.224370][ T38] #0: ffffffff905c8080 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 650.224414][ T38] #1: ffffffff90320260 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 650.224526][ T38] #2: ffffffff903204a0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 650.224574][ T38] #3: ffff888039209208 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 650.224629][ T38] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 650.224680][ T38] [ 650.224686][ T38] ============================================= [ 650.224686][ T38] [ 650.224702][ T38] NMI backtrace for cpu 1 [ 650.224727][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 650.224753][ T38] Tainted: [L]=SOFTLOCKUP [ 650.224760][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.224771][ T38] Call Trace: [ 650.224779][ T38] [ 650.224788][ T38] dump_stack_lvl+0xe8/0x150 [ 650.224825][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 650.224888][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 650.224911][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 650.224935][ T38] sys_info+0x135/0x170 [ 650.224953][ T38] watchdog+0xfd7/0x1030 [ 650.224992][ T38] ? watchdog+0x1c7/0x1030 [ 650.225022][ T38] kthread+0x38b/0x470 [ 650.225042][ T38] ? __pfx_watchdog+0x10/0x10 [ 650.225065][ T38] ? __pfx_kthread+0x10/0x10 [ 650.225084][ T38] ret_from_fork+0x514/0xb70 [ 650.225108][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 650.225127][ T38] ? __switch_to+0xc89/0x1420 [ 650.225156][ T38] ? __pfx_kthread+0x10/0x10 [ 650.225176][ T38] ret_from_fork_asm+0x1a/0x30 [ 650.225210][ T38] [ 650.225244][ T38] Sending NMI from CPU 1 to CPUs 0: [ 650.225274][ C0] NMI backtrace for cpu 0 [ 650.225289][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 650.225313][ C0] Tainted: [L]=SOFTLOCKUP [ 650.225319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.225329][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 650.225393][ C0] Code: e8 0e 8b 63 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 50 d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 650.225409][ C0] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 650.225424][ C0] RAX: 1ffffffff35d6300 RBX: 00000000000003fd RCX: 0000000000000000 [ 650.225437][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 650.225448][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 650.225460][ C0] R10: dffffc0000000000 R11: ffffffff85634df0 R12: dffffc0000000000 [ 650.225473][ C0] R13: 0000000000000000 R14: ffffffff9aeb1f80 R15: 0000000000000000 [ 650.225486][ C0] FS: 0000000000000000(0000) GS:ffff8881249bb000(0000) knlGS:0000000000000000 [ 650.225501][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.225514][ C0] CR2: 00007fefff6a7161 CR3: 0000000094f4c000 CR4: 00000000003526f0 [ 650.225529][ C0] Call Trace: [ 650.225536][ C0] [ 650.225544][ C0] wait_for_lsr+0x190/0x300 [ 650.225602][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 650.225628][ C0] serial8250_console_write+0xaa2/0x1220 [ 650.225660][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 650.225696][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 650.225731][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 650.225759][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 650.225796][ C0] nbcon_kthread_func+0x679/0x880 [ 650.225823][ C0] ? nbcon_kthread_func+0x163/0x880 [ 650.225847][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 650.225875][ C0] ? __kthread_parkme+0x71/0x1f0 [ 650.225901][ C0] ? __kthread_parkme+0x199/0x1f0 [ 650.225929][ C0] kthread+0x38b/0x470 [ 650.225946][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 650.225969][ C0] ? __pfx_kthread+0x10/0x10 [ 650.225987][ C0] ret_from_fork+0x514/0xb70 [ 650.226006][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 650.226023][ C0] ? __switch_to+0xc89/0x1420 [ 650.226049][ C0] ? __pfx_kthread+0x10/0x10 [ 650.226067][ C0] ret_from_fork_asm+0x1a/0x30 [ 650.226099][ C0] [ 650.233152][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 652.160881][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 652.172101][ T38] Tainted: [L]=SOFTLOCKUP [ 652.176436][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 652.186581][ T38] Call Trace: [ 652.189869][ T38] [ 652.192804][ T38] vpanic+0x56d/0xa60 [ 652.196887][ T38] ? __pfx___schedule+0x10/0x10 [ 652.201752][ T38] ? __pfx_vpanic+0x10/0x10 [ 652.206277][ T38] panic+0xc5/0xd0 [ 652.210021][ T38] ? __pfx_panic+0x10/0x10 [ 652.214458][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 652.219937][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 652.225498][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 652.231668][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 652.237929][ T38] watchdog+0x1030/0x1030 [ 652.242301][ T38] ? watchdog+0x1c7/0x1030 [ 652.246751][ T38] kthread+0x38b/0x470 [ 652.250835][ T38] ? __pfx_watchdog+0x10/0x10 [ 652.255527][ T38] ? __pfx_kthread+0x10/0x10 [ 652.260128][ T38] ret_from_fork+0x514/0xb70 [ 652.264747][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 652.269861][ T38] ? __switch_to+0xc89/0x1420 [ 652.274562][ T38] ? __pfx_kthread+0x10/0x10 [ 652.279166][ T38] ret_from_fork_asm+0x1a/0x30 [ 652.283958][ T38] [ 652.287251][ T38] Kernel Offset: disabled [ 652.291584][ T38] Rebooting in 86400 seconds..