last executing test programs: 5.076092844s ago: executing program 3 (id=70): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/70, 0x0, 0x9000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)={0x7, 0x0, [{0x10000, 0x1000, &(0x7f0000000400)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) 4.776879365s ago: executing program 2 (id=72): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x10c) write$tcp_mem(r0, 0x0, 0x0) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) munlock(&(0x7f0000169000/0x4000)=nil, 0x4000) munlockall() socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000200)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1, &(0x7f0000000ec0)=[{&(0x7f0000000840)=""/157, 0x9d}], 0x1, 0x0) 4.646784215s ago: executing program 3 (id=73): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='+*+/\x00') madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) 4.348142311s ago: executing program 3 (id=74): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x4004e57e, &(0x7f0000001340)) 4.312611521s ago: executing program 0 (id=75): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 4.087591554s ago: executing program 3 (id=77): r0 = epoll_create1(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4c042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.844025444s ago: executing program 2 (id=78): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) lseek(r0, 0x5, 0x0) 3.843804731s ago: executing program 0 (id=79): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 3.491108125s ago: executing program 2 (id=80): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0x80000302, 0x200, 0x8, 0x56, 0x800}) 3.454669969s ago: executing program 0 (id=81): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) 3.384564959s ago: executing program 3 (id=82): socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0xb, 0xffffffff9080edc4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x100}}, 0x50) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x8, 0x9dff, 0x6}) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r4 = syz_open_pts(r3, 0x200) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xff) 3.327511276s ago: executing program 0 (id=83): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=0xffffffffffffffff) recvfrom(r0, 0x0, 0x0, 0x734, 0x0, 0x0) 3.100889765s ago: executing program 1 (id=84): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="21f529bd7000fbdbdf250100000004000180100002800c00018007000100"], 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 2.948629512s ago: executing program 1 (id=85): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') read(r0, &(0x7f0000000140)=""/14, 0xe) 2.697714804s ago: executing program 1 (id=86): syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b"], 0x0) 1.927898348s ago: executing program 3 (id=87): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xaed8e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x2640, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f00000000c0)) 1.826972967s ago: executing program 0 (id=88): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@nested_vmresume={0x130, 0x18}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000280)={0x2, 0x0, [{0xd, 0xfb, 0x5, 0x1ff, 0xa7, 0x2, 0x4}, {0x0, 0x1, 0x7, 0xfffffcda, 0x4, 0xc, 0x21fa498a}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.339694173s ago: executing program 2 (id=89): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000e40), 0x80, 0x0) read(r0, 0x0, 0x0) 1.217086809s ago: executing program 0 (id=90): openat(0xffffffffffffff9c, 0x0, 0x701900, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x81, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0xa, 0x35, {0x35, 0x3a, "26a08b2b6c87b07b2bbddaef13fa6b4928c6a95eb0a5dbcb017aeb907681aa4c7a58f8a0f51f232c18969e4e9cab3b3c8688c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.072539055s ago: executing program 2 (id=91): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x10001, 0x800, 0x2, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 915.998501ms ago: executing program 1 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) chdir(0x0) socket(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x5, 0x7, 0x7f}}, 0x28) 483.37657ms ago: executing program 1 (id=93): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x200048c0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x2f, 0x0, &(0x7f0000000100)) 440.595938ms ago: executing program 2 (id=94): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x86, 0x17}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 1 (id=95): unshare(0x6020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x62001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x9}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 79.917123][ T5574] cgroup: Unknown subsys name 'net' [ 80.158551][ T5574] cgroup: Unknown subsys name 'cpuset' [ 80.234357][ T5574] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.025732][ T5574] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.483071][ T5588] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.499958][ T5588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.508703][ T5588] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.511736][ T5588] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.512810][ T5588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.596420][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.613505][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.626706][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.629658][ T5591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.630325][ T5591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.808474][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.830642][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.855471][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.857591][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.859865][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.862318][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.875618][ T4902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.885598][ T4902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.889205][ T4902] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.893462][ T4902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.615292][ T4902] Bluetooth: hci0: command tx timeout [ 87.693902][ T4902] Bluetooth: hci1: command tx timeout [ 87.977646][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.978466][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.978670][ T5586] bridge_slave_0: entered allmulticast mode [ 87.981230][ T5586] bridge_slave_0: entered promiscuous mode [ 88.014548][ T4902] Bluetooth: hci2: command tx timeout [ 88.014571][ T5588] Bluetooth: hci3: command tx timeout [ 88.067086][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.067359][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.067567][ T5586] bridge_slave_1: entered allmulticast mode [ 88.070220][ T5586] bridge_slave_1: entered promiscuous mode [ 88.117034][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.117353][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.117619][ T5590] bridge_slave_0: entered allmulticast mode [ 88.120142][ T5590] bridge_slave_0: entered promiscuous mode [ 88.173853][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.174094][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.174276][ T5600] bridge_slave_0: entered allmulticast mode [ 88.176699][ T5600] bridge_slave_0: entered promiscuous mode [ 88.179187][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.179543][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.179836][ T5590] bridge_slave_1: entered allmulticast mode [ 88.182335][ T5590] bridge_slave_1: entered promiscuous mode [ 88.252410][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.252663][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.252856][ T5600] bridge_slave_1: entered allmulticast mode [ 88.259438][ T5600] bridge_slave_1: entered promiscuous mode [ 88.297236][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.359469][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.405761][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.433288][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.433625][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.434447][ T5599] bridge_slave_0: entered allmulticast mode [ 88.451334][ T5599] bridge_slave_0: entered promiscuous mode [ 88.470131][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.477625][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.622063][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.622526][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.623088][ T5599] bridge_slave_1: entered allmulticast mode [ 88.641979][ T5599] bridge_slave_1: entered promiscuous mode [ 88.657992][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.690681][ T5586] team0: Port device team_slave_0 added [ 88.748325][ T5586] team0: Port device team_slave_1 added [ 88.787065][ T5590] team0: Port device team_slave_0 added [ 88.818698][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.832225][ T5600] team0: Port device team_slave_0 added [ 88.842603][ T5590] team0: Port device team_slave_1 added [ 88.876851][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.880366][ T5600] team0: Port device team_slave_1 added [ 88.909785][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.909801][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.909820][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.994143][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.994161][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.994187][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.061188][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.061201][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.061220][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.108903][ T5599] team0: Port device team_slave_0 added [ 89.111202][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.111213][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.111233][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.113591][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.113600][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.113616][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.167344][ T5599] team0: Port device team_slave_1 added [ 89.175414][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.175449][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.175510][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.332298][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.332309][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.332330][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.391482][ T5586] hsr_slave_0: entered promiscuous mode [ 89.393209][ T5586] hsr_slave_1: entered promiscuous mode [ 89.405676][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.405685][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.405701][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.506209][ T5590] hsr_slave_0: entered promiscuous mode [ 89.507897][ T5590] hsr_slave_1: entered promiscuous mode [ 89.509311][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 89.509398][ T5590] Cannot create hsr debugfs directory [ 89.537603][ T5600] hsr_slave_0: entered promiscuous mode [ 89.539077][ T5600] hsr_slave_1: entered promiscuous mode [ 89.540262][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 89.540282][ T5600] Cannot create hsr debugfs directory [ 89.695466][ T4902] Bluetooth: hci0: command tx timeout [ 89.773958][ T4902] Bluetooth: hci1: command tx timeout [ 90.067781][ T5599] hsr_slave_0: entered promiscuous mode [ 90.069375][ T5599] hsr_slave_1: entered promiscuous mode [ 90.070722][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 90.070759][ T5599] Cannot create hsr debugfs directory [ 90.095174][ T4902] Bluetooth: hci2: command tx timeout [ 90.104254][ T4902] Bluetooth: hci3: command tx timeout [ 90.794425][ T5586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.857912][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.872803][ T5586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.899833][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.909443][ T5586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.939486][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.966874][ T5586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.000388][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.129759][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.159820][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.169811][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.208090][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.212549][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.247407][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.291888][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.319788][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.511102][ T5590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.550783][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.579625][ T5590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.610182][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.618876][ T5590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.647722][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.680908][ T5590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.703659][ T199] cfg80211: failed to load regulatory.db [ 91.716105][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.784126][ T4902] Bluetooth: hci0: command tx timeout [ 91.853923][ T4902] Bluetooth: hci1: command tx timeout [ 91.876472][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.918825][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.938622][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.968173][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.990203][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.038663][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.042956][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.089077][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.143564][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.175137][ T5588] Bluetooth: hci2: command tx timeout [ 92.175221][ T4902] Bluetooth: hci3: command tx timeout [ 92.270727][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.319091][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.321535][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.366650][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.371409][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.371671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.506827][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.552142][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.552298][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.586981][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.608438][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.608572][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.747044][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.818403][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.867985][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.868723][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.955199][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.955313][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.059025][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.121340][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.121668][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.199465][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.202294][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.856673][ T4902] Bluetooth: hci0: command tx timeout [ 93.944410][ T4902] Bluetooth: hci1: command tx timeout [ 94.092219][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.253861][ T5588] Bluetooth: hci2: command tx timeout [ 94.253903][ T4902] Bluetooth: hci3: command tx timeout [ 94.316150][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.459007][ T5586] veth0_vlan: entered promiscuous mode [ 94.560547][ T5586] veth1_vlan: entered promiscuous mode [ 94.658111][ T5600] veth0_vlan: entered promiscuous mode [ 94.719589][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.738170][ T5600] veth1_vlan: entered promiscuous mode [ 94.773091][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.797903][ T5586] veth0_macvtap: entered promiscuous mode [ 94.830551][ T5586] veth1_macvtap: entered promiscuous mode [ 94.946502][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.968203][ T5600] veth0_macvtap: entered promiscuous mode [ 95.008419][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.030698][ T5600] veth1_macvtap: entered promiscuous mode [ 95.056037][ T5599] veth0_vlan: entered promiscuous mode [ 95.090070][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.111327][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.126963][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.145955][ T5590] veth0_vlan: entered promiscuous mode [ 95.165580][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.187856][ T5599] veth1_vlan: entered promiscuous mode [ 95.257861][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.338237][ T5590] veth1_vlan: entered promiscuous mode [ 95.369825][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.585827][ T102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.590469][ T102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.619766][ T102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.635807][ T102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.788870][ T5599] veth0_macvtap: entered promiscuous mode [ 95.831055][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.831076][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.904703][ T5599] veth1_macvtap: entered promiscuous mode [ 95.922075][ T5590] veth0_macvtap: entered promiscuous mode [ 96.133237][ T5590] veth1_macvtap: entered promiscuous mode [ 96.182699][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.182719][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.230175][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.298643][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.316043][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.316059][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.412405][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.413494][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.463022][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.493107][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.508247][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.527581][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.543128][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.543155][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.650340][ T102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.689443][ T102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.711685][ T102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.736499][ T102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.509711][ T1393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.509731][ T1393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.890371][ T5745] ======================================================= [ 97.890371][ T5745] WARNING: The mand mount option has been deprecated and [ 97.890371][ T5745] and is ignored by this kernel. Remove the mand [ 97.890371][ T5745] option from the mount to silence this warning. [ 97.890371][ T5745] ======================================================= [ 98.005487][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.005520][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.077968][ T5748] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.180922][ T5744] Flush: task=syz.0.5[5744] dev=loop7 state=2 [ 98.265593][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.265612][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.372379][ T5744] Teardown: task=syz.0.5[5744] dev=loop7 state=2 [ 98.736005][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.736026][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.838544][ T5576] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.151131][ T5576] usb 3-1: Using ep0 maxpacket: 16 [ 100.233101][ T5576] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.233132][ T5576] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.233152][ T5576] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 100.233176][ T5576] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.233207][ T5576] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 100.233228][ T5576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.281016][ T5687] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.371811][ T5576] usb 3-1: config 0 descriptor?? [ 100.514943][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.514973][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.515049][ T5687] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.515088][ T5687] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.515109][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.651587][ T5687] usb 2-1: config 0 descriptor?? [ 100.651733][ T199] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.840090][ T199] usb 1-1: Using ep0 maxpacket: 16 [ 100.904689][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.904720][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.904742][ T199] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.904781][ T199] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.904801][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.991380][ T199] usb 1-1: config 0 descriptor?? [ 101.019327][ T5576] hid (null): unknown global tag 0xc [ 101.019349][ T5576] hid (null): unknown global tag 0xc [ 101.022611][ T5576] hid (null): unknown global tag 0xe [ 101.022649][ T5576] hid (null): unknown global tag 0xe [ 101.022710][ T5576] hid (null): unknown global tag 0xd [ 101.053984][ T5576] hid (null): invalid report_size 18142 [ 101.054004][ T5576] hid (null): global environment stack overflow [ 101.538704][ T5576] usb 3-1: USB disconnect, device number 2 [ 101.541966][ T5687] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.541998][ T5687] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.542022][ T5687] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.542046][ T5687] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.542070][ T5687] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.542093][ T5687] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.542116][ T5687] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.542156][ T5687] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.542201][ T5687] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.542224][ T5687] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.961545][ T5687] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 102.114152][ T5687] usb 2-1: USB disconnect, device number 2 [ 102.168430][ T37] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.306714][ T5780] fido_id[5780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 102.318317][ T199] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input5 [ 102.386244][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.386279][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.386303][ T37] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.386346][ T37] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.386370][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.455455][ T37] usb 4-1: config 0 descriptor?? [ 102.901593][ T5784] capability: warning: `syz.1.15' uses 32-bit capabilities (legacy support in use) [ 103.269449][ T199] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 103.276615][ T199] usb 1-1: USB disconnect, device number 2 [ 103.337126][ T37] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 103.371589][ T37] usb 4-1: USB disconnect, device number 2 [ 103.625561][ T5794] syzkaller0: entered promiscuous mode [ 103.625588][ T5794] syzkaller0: entered allmulticast mode [ 103.716849][ T5797] fido_id[5797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 103.925597][ T5803] fido_id[5803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 104.515337][ T199] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.665337][ T199] usb 4-1: Using ep0 maxpacket: 16 [ 104.672400][ T199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.672429][ T199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.672450][ T199] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.672487][ T199] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.672508][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.805516][ T199] usb 4-1: config 0 descriptor?? [ 105.312466][ T199] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input6 [ 105.422233][ T199] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 105.488971][ T199] usb 4-1: USB disconnect, device number 3 [ 105.573574][ T5831] fido_id[5831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 105.593867][ T37] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.768439][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.768475][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.768500][ T37] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.768545][ T37] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.768570][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.856649][ T37] usb 1-1: config 0 descriptor?? [ 106.361650][ T37] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 106.668418][ T199] usb 1-1: USB disconnect, device number 3 [ 107.595206][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.743919][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 107.772241][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.772275][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.772299][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.772343][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.772366][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.881215][ T9] usb 2-1: config 0 descriptor?? [ 107.953858][ T37] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.110959][ T5576] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.127981][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.128013][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.128037][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.128089][ T37] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.128114][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.188109][ T37] usb 3-1: config 0 descriptor?? [ 108.276242][ T5576] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 108.276270][ T5576] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 108.276289][ T5576] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 108.276309][ T5576] usb 4-1: config 220 has no interface number 2 [ 108.276425][ T5576] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 108.276452][ T5576] usb 4-1: config 220 interface 0 has no altsetting 0 [ 108.276470][ T5576] usb 4-1: config 220 interface 76 has no altsetting 0 [ 108.276538][ T5576] usb 4-1: config 220 interface 1 has no altsetting 0 [ 108.279381][ T5576] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 108.279405][ T5576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.279422][ T5576] usb 4-1: Product: syz [ 108.279485][ T5576] usb 4-1: Manufacturer: syz [ 108.279498][ T5576] usb 4-1: SerialNumber: syz [ 108.443993][ T9] hid_parser_main: 55 callbacks suppressed [ 108.444014][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 108.444041][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 108.444065][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 108.444090][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 108.444117][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 108.444141][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 108.444164][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 108.444188][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 108.444212][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 108.444237][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 108.464165][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input7 [ 108.612695][ T9] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 108.684635][ T9] usb 2-1: USB disconnect, device number 3 [ 108.735052][ T5576] usb 4-1: selecting invalid altsetting 0 [ 108.739722][ T5576] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 108.739757][ T5576] uvcvideo 4-1:220.0: No valid video chain found. [ 108.802223][ T37] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 108.870178][ T5576] usb 4-1: selecting invalid altsetting 0 [ 108.870213][ T5576] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 108.892880][ T5576] usb 4-1: USB disconnect, device number 4 [ 108.955733][ T5879] fido_id[5879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 109.056894][ T37] usb 3-1: USB disconnect, device number 3 [ 109.509593][ T5890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.56'. [ 110.133846][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.290680][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.290719][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.290747][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 110.290764][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.311464][ T9] usb 2-1: config 0 descriptor?? [ 110.869568][ T9] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 111.086251][ T9] playstation 0003:054C:0DF2.0009: Invalid reportID received, expected 9 got 99 [ 111.086291][ T9] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -22 [ 111.086342][ T9] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 111.086357][ T9] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 111.187252][ T9] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -22 [ 111.289565][ T5687] usb 2-1: USB disconnect, device number 4 [ 111.387849][ T5913] fido_id[5913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 112.004953][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 112.101554][ T5926] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.254051][ T37] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.431866][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.431901][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.431925][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.431970][ T37] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.432002][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.509495][ T37] usb 2-1: config 0 descriptor?? [ 113.034484][ T37] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 113.258117][ T5576] usb 2-1: USB disconnect, device number 5 [ 113.333123][ T5948] fido_id[5948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 113.378934][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 113.835656][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.928258][ T5965] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 113.986876][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.986907][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.986928][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.986966][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.986987][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.129539][ T9] usb 3-1: config 0 descriptor?? [ 114.655080][ T9] hid_parser_main: 35 callbacks suppressed [ 114.655107][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.655137][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.655164][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.655190][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.655216][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.655243][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.655269][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.655306][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.655330][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.655354][ T9] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 114.705554][ T9] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 114.884695][ T9] usb 3-1: USB disconnect, device number 4 [ 114.885384][ T5576] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.996724][ T5970] fido_id[5970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 115.100670][ T5576] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 115.100698][ T5576] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 115.100737][ T5576] usb 2-1: config 220 interface 0 has no altsetting 0 [ 115.103439][ T5576] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 115.103463][ T5576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.103481][ T5576] usb 2-1: Product: syz [ 115.103494][ T5576] usb 2-1: Manufacturer: syz [ 115.103507][ T5576] usb 2-1: SerialNumber: syz [ 115.507381][ T5576] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 115.507412][ T5576] uvcvideo 2-1:220.0: No valid video chain found. [ 115.567706][ T5576] usb 2-1: USB disconnect, device number 6 [ 116.133862][ T5576] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.303809][ T5576] usb 1-1: Using ep0 maxpacket: 8 [ 116.307309][ T5576] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.307344][ T5576] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 116.307366][ T5576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.406731][ T5576] usb 1-1: config 0 descriptor?? [ 116.654520][ T5991] syz.2.94 uses obsolete (PF_INET,SOCK_PACKET) [ 116.852304][ T5576] hid (null): usage index exceeded [ 116.887057][ T5576] cypress 0003:04B4:07B1.000C: ignoring exceeding usage max [ 116.890007][ T5576] cypress 0003:04B4:07B1.000C: ignoring exceeding usage max [ 116.890026][ T5576] cypress 0003:04B4:07B1.000C: usage index exceeded [ 116.890039][ T5576] cypress 0003:04B4:07B1.000C: item 0 4 2 2 parsing failed [ 116.922858][ T5576] cypress 0003:04B4:07B1.000C: parse failed [ 116.922955][ T5576] cypress 0003:04B4:07B1.000C: probe with driver cypress failed with error -22 [ 117.056218][ T5576] usb 1-1: USB disconnect, device number 4 [ 132.658074][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.658192][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.100247][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.100345][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.628238][ T6012] Bluetooth: hci3: command 0x0406 tx timeout [ 211.629399][ T6011] Bluetooth: hci0: command 0x0406 tx timeout [ 211.629430][ T6011] Bluetooth: hci1: command 0x0406 tx timeout [ 211.629448][ T6011] Bluetooth: hci2: command 0x0406 tx timeout [ 255.536117][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.536186][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.854036][ T39] INFO: task syz-executor:5574 blocked in I/O wait for more than 143 seconds. [ 263.854074][ T39] Not tainted syzkaller #0 [ 263.854096][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.854105][ T39] task:syz-executor state:D stack:21576 pid:5574 tgid:5574 ppid:5573 task_flags:0x440100 flags:0x00080000 [ 263.854189][ T39] Call Trace: [ 263.854195][ T39] [ 263.854207][ T39] __schedule+0x1709/0x5530 [ 263.854262][ T39] ? __pfx___schedule+0x10/0x10 [ 263.854359][ T39] ? schedule+0x90/0x2b0 [ 263.854392][ T39] schedule+0x164/0x2b0 [ 263.854421][ T39] io_schedule+0x7f/0xd0 [ 263.854449][ T39] bit_wait_io+0x11/0xd0 [ 263.854467][ T39] __wait_on_bit+0xac/0x2f0 [ 263.854485][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 263.854522][ T39] out_of_line_wait_on_bit+0x13b/0x190 [ 263.854544][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 263.854562][ T39] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 263.854585][ T39] ? __pfx_wake_bit_function+0x10/0x10 [ 263.854610][ T39] do_get_write_access+0x670/0x1090 [ 263.854642][ T39] jbd2_journal_get_write_access+0x1d6/0x230 [ 263.854664][ T39] __ext4_journal_get_write_access+0x1c3/0x590 [ 263.854688][ T39] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 263.854708][ T39] ? trace_kmem_cache_alloc+0x29/0xe0 [ 263.854727][ T39] ? jbd2__journal_start+0x145/0x5c0 [ 263.854750][ T39] ext4_reserve_inode_write+0x294/0x360 [ 263.854776][ T39] __ext4_mark_inode_dirty+0x13e/0x700 [ 263.854798][ T39] ext4_dirty_inode+0xd0/0x110 [ 263.854818][ T39] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 263.854838][ T39] __mark_inode_dirty+0x3a8/0x13b0 [ 263.854860][ T39] file_update_time_flags+0x3f4/0x4b0 [ 263.854880][ T39] ext4_page_mkwrite+0x225/0x1150 [ 263.854907][ T39] ? reacquire_held_locks+0x117/0x1a0 [ 263.854924][ T39] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 263.854950][ T39] do_page_mkwrite+0x14a/0x310 [ 263.854974][ T39] do_wp_page+0x20a7/0x3d20 [ 263.855001][ T39] ? preempt_count_add+0x91/0x190 [ 263.855018][ T39] ? __pfx_do_wp_page+0x10/0x10 [ 263.855034][ T39] ? rt_spin_lock+0x2ce/0x400 [ 263.855054][ T39] ? __pfx_rt_spin_lock+0x10/0x10 [ 263.855075][ T39] ? pte_offset_map_rw_nolock+0xea/0x160 [ 263.855095][ T39] handle_mm_fault+0xdc1/0x28d0 [ 263.855116][ T39] ? reacquire_held_locks+0x117/0x1a0 [ 263.855131][ T39] ? lock_vma_under_rcu+0x1d1/0x500 [ 263.855153][ T39] ? handle_mm_fault+0xeb/0x28d0 [ 263.855174][ T39] ? lock_vma_under_rcu+0x116/0x500 [ 263.855197][ T39] ? __pfx_handle_mm_fault+0x10/0x10 [ 263.855214][ T39] ? lock_vma_under_rcu+0x45a/0x500 [ 263.855234][ T39] ? __pfx_set_user_sigmask+0x10/0x10 [ 263.855264][ T39] do_user_addr_fault+0xa4d/0x1340 [ 263.855318][ T39] ? trace_page_fault_user+0x84/0x1e0 [ 263.855340][ T39] exc_page_fault+0x6a/0xc0 [ 263.855364][ T39] asm_exc_page_fault+0x26/0x30 [ 263.855378][ T39] RIP: 0033:0x7f15baa60163 [ 263.855395][ T39] RSP: 002b:00007ffff655cf00 EFLAGS: 00010216 [ 263.855407][ T39] RAX: 00007f15b45eff14 RBX: 00007ffff655d030 RCX: 0000000000000000 [ 263.855417][ T39] RDX: 00007f15b45eff10 RSI: 0000000000000008 RDI: 00007ffff655d030 [ 263.855426][ T39] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 263.855434][ T39] R10: 00007ffff655d010 R11: 0000000000000000 R12: 0000000000000000 [ 263.855442][ T39] R13: 00000000000000ec R14: ffffffffffffff14 R15: 0000000000000000 [ 263.855462][ T39] [ 263.855490][ T39] INFO: task syz.1.95:5996 blocked in I/O wait for more than 143 seconds. [ 263.855500][ T39] Not tainted syzkaller #0 [ 263.855511][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.855517][ T39] task:syz.1.95 state:D stack:27080 pid:5996 tgid:5996 ppid:5586 task_flags:0x440040 flags:0x00080002 [ 263.855559][ T39] Call Trace: [ 263.855563][ T39] [ 263.855570][ T39] __schedule+0x1709/0x5530 [ 263.855608][ T39] ? __pfx___schedule+0x10/0x10 [ 263.855634][ T39] ? schedule+0x90/0x2b0 [ 263.855656][ T39] schedule+0x164/0x2b0 [ 263.855678][ T39] io_schedule+0x7f/0xd0 [ 263.855700][ T39] bit_wait_io+0x11/0xd0 [ 263.855714][ T39] __wait_on_bit+0xac/0x2f0 [ 263.855727][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 263.855742][ T39] out_of_line_wait_on_bit+0x13b/0x190 [ 263.855756][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 263.855787][ T39] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 263.855803][ T39] ? __pfx_wake_bit_function+0x10/0x10 [ 263.855828][ T39] do_get_write_access+0x670/0x1090 [ 263.855860][ T39] jbd2_journal_get_write_access+0x1d6/0x230 [ 263.855884][ T39] __ext4_journal_get_write_access+0x1c3/0x590 [ 263.855908][ T39] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 263.855929][ T39] ? trace_kmem_cache_alloc+0x29/0xe0 [ 263.855947][ T39] ? jbd2__journal_start+0x145/0x5c0 [ 263.855972][ T39] ext4_reserve_inode_write+0x294/0x360 [ 263.855998][ T39] __ext4_mark_inode_dirty+0x13e/0x700 [ 263.856023][ T39] ext4_dirty_inode+0xd0/0x110 [ 263.856043][ T39] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 263.856064][ T39] __mark_inode_dirty+0x3a8/0x13b0 [ 263.856083][ T39] ? mnt_get_write_access+0x262/0x2d0 [ 263.856101][ T39] ? ext4_file_mmap_prepare+0x286/0x460 [ 263.856120][ T39] touch_atime+0x565/0x670 [ 263.856136][ T39] ? ext4_file_mmap_prepare+0x286/0x460 [ 263.856158][ T39] ext4_file_mmap_prepare+0x286/0x460 [ 263.856180][ T39] mmap_region+0xe81/0x2230 [ 263.856206][ T39] ? __lock_acquire+0x6df/0x2e40 [ 263.856218][ T39] ? __pfx_mmap_region+0x10/0x10 [ 263.856237][ T39] ? __lock_acquire+0x6df/0x2e40 [ 263.856250][ T39] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 263.856271][ T39] ? __lock_acquire+0x6df/0x2e40 [ 263.856324][ T39] ? mtree_range_walk+0x70a/0x8c0 [ 263.856350][ T39] ? mt_find+0x5ff/0x630 [ 263.856367][ T39] ? mt_find+0x186/0x630 [ 263.856381][ T39] ? __pfx_mt_find+0x10/0x10 [ 263.856400][ T39] ? bpf_lsm_mmap_addr+0x9/0x50 [ 263.856421][ T39] ? security_mmap_addr+0x64/0x200 [ 263.856439][ T39] ? shmem_mapping+0xd/0x50 [ 263.856453][ T39] ? memfd_check_seals_mmap+0xcb/0x210 [ 263.856469][ T39] do_mmap+0xc1e/0x10b0 [ 263.856492][ T39] ? __pfx_do_mmap+0x10/0x10 [ 263.856514][ T39] ? rwbase_write_lock+0x550/0x720 [ 263.856536][ T39] vm_mmap_pgoff+0x275/0x4e0 [ 263.856558][ T39] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 263.856574][ T39] ? __fget_files+0x2a/0x420 [ 263.856590][ T39] ? __fget_files+0x3a8/0x420 [ 263.856603][ T39] ? __fget_files+0x2a/0x420 [ 263.856619][ T39] ksys_mmap_pgoff+0x4a6/0x720 [ 263.856638][ T39] ? __x64_sys_mmap+0x7f/0x140 [ 263.856660][ T39] do_syscall_64+0x17b/0x530 [ 263.856674][ T39] ? irqentry_exit+0x10f/0x8f0 [ 263.856687][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.856700][ T39] ? clear_bhb_loop+0x40/0x90 [ 263.856717][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.856731][ T39] RIP: 0033:0x7f75fb35de42 [ 263.856742][ T39] RSP: 002b:00007ffc50c290e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 263.856755][ T39] RAX: ffffffffffffffda RBX: 0000001b31b64000 RCX: 00007f75fb35de42 [ 263.856764][ T39] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b31b64000 [ 263.856773][ T39] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 263.856781][ T39] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000013 [ 263.856789][ T39] R13: 00000000000927c0 R14: 000000000001c771 R15: 00007ffc50c293c0 [ 263.856809][ T39] [ 263.856820][ T39] [ 263.856820][ T39] Showing all locks held in the system: [ 263.856827][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 263.856837][ T39] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 263.856891][ T39] locks held by getty/5341: 2, on CPU#1: [ 263.856900][ T39] #0: ffff88803622b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 263.856939][ T39] #1: ffffc900044d62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 263.856974][ T39] locks held by syz-executor/5574: 3, on CPU#1: [ 263.856983][ T39] #0: ffff888027a6b808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 263.857022][ T39] #1: ffff8880361b8688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 263.857060][ T39] #2: ffff8880360fcbb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 263.857099][ T39] locks held by syz.1.95/5996: 3, on CPU#0: [ 263.857107][ T39] #0: ffff888038c90430 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 263.857139][ T39] #1: ffff8880361b8510 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 263.857177][ T39] #2: ffff8880360fcbb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fc3/0x2210 [ 263.857213][ T39] [ 263.857216][ T39] ============================================= [ 263.857216][ T39] [ 263.857228][ T39] NMI backtrace for cpu 0 [ 263.857242][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.857263][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.857274][ T39] Call Trace: [ 263.857280][ T39] [ 263.857287][ T39] dump_stack_lvl+0xe8/0x150 [ 263.857312][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 263.857337][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.857365][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 263.857393][ T39] sys_info+0x135/0x170 [ 263.857415][ T39] watchdog+0xfd7/0x1030 [ 263.857450][ T39] ? watchdog+0x1c7/0x1030 [ 263.857483][ T39] kthread+0x388/0x470 [ 263.857512][ T39] ? __pfx_watchdog+0x10/0x10 [ 263.857531][ T39] ? __pfx_kthread+0x10/0x10 [ 263.857550][ T39] ret_from_fork+0x514/0xb70 [ 263.857570][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 263.857588][ T39] ? __switch_to+0xc89/0x1420 [ 263.857606][ T39] ? __pfx_kthread+0x10/0x10 [ 263.857624][ T39] ret_from_fork_asm+0x1a/0x30 [ 263.857652][ T39] [ 263.857657][ T39] Sending NMI from CPU 0 to CPUs 1: [ 263.857692][ C1] NMI backtrace for cpu 1 [ 263.857709][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.857744][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.857754][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 263.857805][ C1] Code: 0c 74 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 66 19 00 fb f4 4c d0 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 263.857820][ C1] RSP: 0018:ffffc900001e7e40 EFLAGS: 00000246 [ 263.857836][ C1] RAX: 0000000000063acf RBX: ffffffff8199b400 RCX: 0000000080000001 [ 263.857849][ C1] RDX: 0000000000000001 RSI: ffffffff8d98ba58 RDI: ffffffff8bcbd080 [ 263.857862][ C1] RBP: ffffc900001e7f10 R08: ffff8880b8733d1b R09: 1ffff110170e67a3 [ 263.857880][ C1] R10: dffffc0000000000 R11: ffffed10170e67a4 R12: 0000000000000000 [ 263.857893][ C1] R13: 1ffff11003c51bb8 R14: 1ffff9200003cfd0 R15: dffffc0000000000 [ 263.857907][ C1] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 263.857921][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.857934][ C1] CR2: 0000561fe2c15168 CR3: 000000000e1b0000 CR4: 00000000003526f0 [ 263.857951][ C1] Call Trace: [ 263.857957][ C1] [ 263.857963][ C1] default_idle+0x9/0x20 [ 263.857983][ C1] default_idle_call+0x72/0xb0 [ 263.858010][ C1] do_idle+0x2e0/0x540 [ 263.858030][ C1] ? __pfx_do_idle+0x10/0x10 [ 263.858049][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 263.858070][ C1] cpu_startup_entry+0x43/0x60 [ 263.858088][ C1] start_secondary+0x101/0x110 [ 263.858112][ C1] common_startup_64+0x13e/0x157 [ 263.858142][ C1] [ 263.858698][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 263.858710][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.858727][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.858736][ T39] Call Trace: [ 263.858742][ T39] [ 263.858748][ T39] vpanic+0x56c/0xa60 [ 263.858766][ T39] ? __pfx_vpanic+0x10/0x10 [ 263.858789][ T39] panic+0xc5/0xd0 [ 263.858803][ T39] ? __pfx_panic+0x10/0x10 [ 263.858821][ T39] ? wq_watchdog_touch+0xf9/0x160 [ 263.858848][ T39] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 263.858874][ T39] watchdog+0x1030/0x1030 [ 263.858904][ T39] ? watchdog+0x1c7/0x1030 [ 263.858933][ T39] kthread+0x388/0x470 [ 263.858954][ T39] ? __pfx_watchdog+0x10/0x10 [ 263.858977][ T39] ? __pfx_kthread+0x10/0x10 [ 263.858999][ T39] ret_from_fork+0x514/0xb70 [ 263.859025][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 263.859046][ T39] ? __switch_to+0xc89/0x1420 [ 263.859077][ T39] ? __pfx_kthread+0x10/0x10 [ 263.859096][ T39] ret_from_fork_asm+0x1a/0x30 [ 263.859124][ T39] [ 263.859732][ T39] Kernel Offset: disabled