last executing test programs: 572.619692ms ago: executing program 1 (id=2): r0 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/queues/rx-0/rps_cpus\x00', 0x2, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f00000003c0)=""/16, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000480)=""/16, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000004c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000540)=""/16, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000600)=""/16, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000640)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f00000006c0)=""/16, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000700)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000780)=""/16, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000007c0)={'syz_tun\x00', 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000800)={'syz_tun\x00', 0x200}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000840)={'syz_tun\x00', 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000880)={'syz_tun\x00', 0x200}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000008c0)={'syz_tun\x00', 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000900)={'syz_tun\x00', 0x200}) 496.292624ms ago: executing program 1 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) fallocate(r3, 0x0, 0x0, 0x1000000) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a3120313238203000", 0x36) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 438.247918ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000500)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r4, 0x0, &(0x7f0000000700)=""/4, 0x4, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000800)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000900)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r5, 0x0, &(0x7f0000000a00)=""/4, 0x4, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b00)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000c00)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r6, 0x0, &(0x7f0000000d00)=""/4, 0x4, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000e00)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) 350.186063ms ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/mdstat\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/256, 0x100) 289.181653ms ago: executing program 0 (id=8): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 189.394413ms ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x35, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) syz_usb_connect(0x0, 0x35, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mydev/v4l-touch1\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r1, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r1, 0xc058560f, &(0x7f0000000700)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400"/88) ioctl(r1, 0xc058560f, &(0x7f0000000800)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500"/88) ioctl(r1, 0xc058560f, &(0x7f0000000900)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000600"/88) ioctl(r1, 0xc058560f, &(0x7f0000000a00)="000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000700"/88) ioctl(r1, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 188.750207ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/vtconsole/vtcon0/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/bochs-drm/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/bochs-drm/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) close(r3) 167.694431ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x61) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='101:0:1\x00', 0x7) close(r3) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r4, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) close(r4) nanosleep(&(0x7f0000000b00)={0x1}, 0x0) 137.916216ms ago: executing program 2 (id=9): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202000200"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00001e0000004d61501d0000000000000000000050000000500000005000000050000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 113.762354ms ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/vim2m/parameters/multiplanar\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='2\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/vim2m/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='vim2m.0\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/vim2m/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='vim2m.0\x00', 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000240)={0x9, @pix_mp={0x100, 0x100, 0x0, 0x0, 0x0, [], 0x1}}) 36.394602ms ago: executing program 1 (id=11): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x1c, 0x20f}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1c) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000200)={{}, 0x1, 0x1c, 0x1}, 0x18) write$input_event(r1, &(0x7f0000000240), 0x18) 0s ago: executing program 0 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='file drivers/hid/hid-core.c +pd\x00', 0x1f) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, "0600ff0901a101150026ff007508950a09018102c0"}}, 0x12d) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000400)={0xc, {0x5, "0102030405"}}, 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 27.784149][ T4697] cgroup: Unknown subsys name 'net' [ 27.933878][ T4697] cgroup: Unknown subsys name 'cpuset' [ 27.935979][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.095942][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.869095][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.872815][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.874598][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.883506][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.883857][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.884359][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.884573][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.884736][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.885309][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.885522][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.885863][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.886038][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.886183][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.886293][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.888102][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.888354][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.888582][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.889182][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.889843][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.890671][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.896762][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.898029][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.898210][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 28.899449][ T4719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 28.900258][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.241393][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.241664][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.241745][ T4710] bridge_slave_0: entered allmulticast mode [ 29.242239][ T4710] bridge_slave_0: entered promiscuous mode [ 29.260521][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.262035][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.263661][ T4710] bridge_slave_1: entered allmulticast mode [ 29.265289][ T4710] bridge_slave_1: entered promiscuous mode [ 29.308334][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.317941][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.319335][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.320675][ T4709] bridge_slave_0: entered allmulticast mode [ 29.322217][ T4709] bridge_slave_0: entered promiscuous mode [ 29.325682][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.326978][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.328323][ T4709] bridge_slave_1: entered allmulticast mode [ 29.329845][ T4709] bridge_slave_1: entered promiscuous mode [ 29.332197][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.352921][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.353879][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.362789][ T4709] team0: Port device team_slave_0 added [ 29.363677][ T4709] team0: Port device team_slave_1 added [ 29.375916][ T4710] team0: Port device team_slave_0 added [ 29.376673][ T4710] team0: Port device team_slave_1 added [ 29.394301][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.394325][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.394341][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.395241][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.395248][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.395264][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.405897][ T4709] hsr_slave_0: entered promiscuous mode [ 29.406254][ T4709] hsr_slave_1: entered promiscuous mode [ 29.415105][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.416370][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.421151][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.423085][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.423094][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.423107][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.436972][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.438285][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.439981][ T4723] bridge_slave_0: entered allmulticast mode [ 29.441747][ T4723] bridge_slave_0: entered promiscuous mode [ 29.450617][ T4710] hsr_slave_0: entered promiscuous mode [ 29.452160][ T4710] hsr_slave_1: entered promiscuous mode [ 29.453795][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 29.455012][ T4710] Cannot create hsr debugfs directory [ 29.456275][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.456350][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.456469][ T4711] bridge_slave_0: entered allmulticast mode [ 29.456899][ T4711] bridge_slave_0: entered promiscuous mode [ 29.457704][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.457724][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.457776][ T4711] bridge_slave_1: entered allmulticast mode [ 29.458234][ T4711] bridge_slave_1: entered promiscuous mode [ 29.458640][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.458663][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.458718][ T4723] bridge_slave_1: entered allmulticast mode [ 29.459118][ T4723] bridge_slave_1: entered promiscuous mode [ 29.466710][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.467582][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.473883][ T4723] team0: Port device team_slave_0 added [ 29.474634][ T4723] team0: Port device team_slave_1 added [ 29.501525][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.501551][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.501567][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.502174][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.502184][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.502198][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.504042][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.505509][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.511647][ T4711] team0: Port device team_slave_0 added [ 29.512753][ T4711] team0: Port device team_slave_1 added [ 29.518242][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.522668][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.522742][ T4720] bridge_slave_0: entered allmulticast mode [ 29.523175][ T4720] bridge_slave_0: entered promiscuous mode [ 29.523987][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.524007][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.524098][ T4720] bridge_slave_1: entered allmulticast mode [ 29.524566][ T4720] bridge_slave_1: entered promiscuous mode [ 29.539971][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.539997][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.540013][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.540877][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.540887][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.540904][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.562179][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.565146][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.581010][ T4720] team0: Port device team_slave_0 added [ 29.587490][ T4723] hsr_slave_0: entered promiscuous mode [ 29.588841][ T4723] hsr_slave_1: entered promiscuous mode [ 29.590314][ T4723] debugfs: 'hsr0' already exists in 'hsr' [ 29.591548][ T4723] Cannot create hsr debugfs directory [ 29.593821][ T4720] team0: Port device team_slave_1 added [ 29.620161][ T4711] hsr_slave_0: entered promiscuous mode [ 29.620497][ T4711] hsr_slave_1: entered promiscuous mode [ 29.620680][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 29.620691][ T4711] Cannot create hsr debugfs directory [ 29.626190][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.627549][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.632293][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.641661][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.642932][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.642952][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.685735][ T4709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.689126][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.690905][ T4709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.693541][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.695144][ T4720] hsr_slave_0: entered promiscuous mode [ 29.695480][ T4720] hsr_slave_1: entered promiscuous mode [ 29.695675][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 29.695691][ T4720] Cannot create hsr debugfs directory [ 29.695750][ T4709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.697855][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.709553][ T4709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.711943][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.752061][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.755005][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.758796][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.761499][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.761822][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.764345][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.772130][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.774707][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.784042][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.784093][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.784234][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.784262][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.809121][ T4711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.811376][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.811824][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.811849][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.811927][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.811955][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.816601][ T4711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.818264][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.829141][ T4711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.831792][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.832227][ T4711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.834287][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.854278][ T4723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.855495][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.855927][ T4723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.858240][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.867278][ T4723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.869757][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.870187][ T4723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.871946][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.877302][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.891687][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.891733][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.891826][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.891861][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.893838][ T4720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.895336][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.895617][ T4720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.897752][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.904327][ T4720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.906378][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.907948][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.909260][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.910805][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.912097][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.915966][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.918090][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.924833][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.929818][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.933907][ T4720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.935153][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.938778][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.938861][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.939674][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.939693][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.943289][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.967885][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.969338][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.969383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.969717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.969745][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.997315][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.020431][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.020470][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.020817][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.020836][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.035311][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.037487][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.049440][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.067857][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.069645][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.079871][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.079915][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.085138][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.087423][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.087470][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.094999][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.095053][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.095424][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.095442][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.128159][ T4723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.128198][ T4723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.216849][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.232212][ T4710] veth0_vlan: entered promiscuous mode [ 30.248703][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.253902][ T4710] veth1_vlan: entered promiscuous mode [ 30.270358][ T4710] veth0_macvtap: entered promiscuous mode [ 30.281532][ T4710] veth1_macvtap: entered promiscuous mode [ 30.286824][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.290078][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.312041][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.312224][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.312258][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.312279][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.336158][ T4857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.336193][ T4857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.347725][ T1882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.347759][ T1882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.357370][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.369840][ T4723] veth0_vlan: entered promiscuous mode [ 30.372910][ T4723] veth1_vlan: entered promiscuous mode [ 30.380140][ T4723] veth0_macvtap: entered promiscuous mode [ 30.383666][ T4723] veth1_macvtap: entered promiscuous mode [ 30.391013][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.395357][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.398819][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.398872][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.398898][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.398913][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.406174][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.420348][ T4710] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.447008][ T4709] veth0_vlan: entered promiscuous mode [ 30.467375][ T4709] veth1_vlan: entered promiscuous mode [ 30.486202][ T4711] veth0_vlan: entered promiscuous mode [ 30.490424][ T4711] veth1_vlan: entered promiscuous mode [ 30.494803][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.499314][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.499350][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.515625][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.515654][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.525918][ T4709] veth0_macvtap: entered promiscuous mode [ 30.533991][ T4709] veth1_macvtap: entered promiscuous mode [ 30.536283][ T4711] veth0_macvtap: entered promiscuous mode [ 30.539942][ T4711] veth1_macvtap: entered promiscuous mode [ 30.558008][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.560732][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.566731][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.567800][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.579033][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.579087][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.579111][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.579128][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.604995][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.605935][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.605960][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.605978][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.660567][ T4720] veth0_vlan: entered promiscuous mode [ 30.671381][ T4720] veth1_vlan: entered promiscuous mode [ 30.679582][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.679619][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.691675][ T4720] veth0_macvtap: entered promiscuous mode [ 30.696374][ T4720] veth1_macvtap: entered promiscuous mode [ 30.710121][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.736351][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.736377][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.740116][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.750171][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.750199][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.755459][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.755505][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.755537][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.755559][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.765238][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.765251][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.810515][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.810546][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.821923][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.821954][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.854814][ T4896] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 30.854852][ T4896] device-mapper: ioctl: error adding target to table [ 30.879820][ T4909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.880045][ T4909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.898991][ T4911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.899209][ T4911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.915576][ T4908] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 30.932211][ T4908] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 30.938404][ T4914] vim2m vim2m.0: Removing vim2m [ 30.947342][ T4915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.947538][ T4915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.953772][ T4712] Bluetooth: hci3: command tx timeout [ 30.953917][ T4712] Bluetooth: hci1: command tx timeout [ 30.954128][ T4712] Bluetooth: hci0: command tx timeout [ 30.954299][ T4712] Bluetooth: hci2: command tx timeout [ 30.954482][ T4714] Bluetooth: hci4: command tx timeout [ 30.963044][ T4914] vim2m vim2m.0: Device registered as /dev/video3 [ 30.965390][ T4903] UBIFS error (pid: 4903): cannot open "ubi0_0", error -19 [ 31.019922][ T4919] input: syz0 as /devices/virtual/input/input2 [ 31.030244][ T4820] [ 31.030682][ T4820] ====================================================== [ 31.032047][ T4820] WARNING: possible circular locking dependency detected [ 31.033295][ T4820] syzkaller #0 Not tainted [ 31.034110][ T4820] ------------------------------------------------------ [ 31.035360][ T4820] kworker/0:9/4820 is trying to acquire lock: [ 31.036398][ T4820] ffff0000d6d932c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_flush_buffer+0x2c/0xa4 [ 31.038189][ T4820] [ 31.038189][ T4820] but task is already holding lock: [ 31.039485][ T4820] ffff0000c006a0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x78/0x2b4 [ 31.041083][ T4820] [ 31.041083][ T4820] which lock already depends on the new lock. [ 31.041083][ T4820] [ 31.042914][ T4820] [ 31.042914][ T4820] the existing dependency chain (in reverse order) is: [ 31.044545][ T4820] [ 31.044545][ T4820] -> #4 (&buf->lock){+.+.}-{4:4}: [ 31.045924][ T4820] __mutex_lock+0x164/0xf14 [ 31.046820][ T4820] mutex_lock_nested+0x24/0x30 [ 31.047762][ T4820] tty_buffer_flush+0x78/0x2b4 [ 31.048771][ T4820] tty_ldisc_flush+0x30/0x7c [ 31.049675][ T4820] __do_SAK+0x21c/0x604 [ 31.050514][ T4820] vc_SAK+0x74/0xa4 [ 31.051264][ T4820] process_scheduled_works+0x788/0x10b8 [ 31.052308][ T4820] worker_thread+0x798/0xbd0 [ 31.053192][ T4820] kthread+0x304/0x3d4 [ 31.054068][ T4820] ret_from_fork+0x10/0x20 [ 31.054999][ T4820] [ 31.054999][ T4820] -> #3 (console_lock){+.+.}-{0:0}: [ 31.056313][ T4820] console_lock+0x8c/0xac [ 31.057187][ T4820] console_call_setup+0x54/0xa4 [ 31.058141][ T4820] try_enable_preferred_console+0x444/0x5a4 [ 31.059337][ T4820] register_console+0x3a0/0xb98 [ 31.060322][ T4820] univ8250_console_init+0x5c/0x84 [ 31.061365][ T4820] console_init+0x14c/0x89c [ 31.062276][ T4820] start_kernel+0x25c/0x3c0 [ 31.063193][ T4820] __primary_switched+0x8c/0x94 [ 31.064128][ T4820] [ 31.064128][ T4820] -> #2 (console_mutex){+.+.}-{4:4}: [ 31.065420][ T4820] __mutex_lock+0x164/0xf14 [ 31.066294][ T4820] mutex_lock_nested+0x24/0x30 [ 31.067196][ T4820] console_list_lock+0x90/0xa8 [ 31.068129][ T4820] serial_core_register_port+0x1284/0x1b0c [ 31.069218][ T4820] serial_ctrl_register_port+0x28/0x38 [ 31.070256][ T4820] uart_add_one_port+0x28/0x38 [ 31.071169][ T4820] pl011_register_port+0x194/0x2ec [ 31.072175][ T4820] sbsa_uart_probe+0x334/0x46c [ 31.073109][ T4820] platform_probe+0x100/0x1a4 [ 31.074027][ T4820] really_probe+0x29c/0x800 [ 31.074920][ T4820] __driver_probe_device+0x1e0/0x350 [ 31.075966][ T4820] driver_probe_device+0x6c/0x19c [ 31.077005][ T4820] __device_attach_driver+0x198/0x2f8 [ 31.078005][ T4820] bus_for_each_drv+0x144/0x1dc [ 31.078909][ T4820] __device_attach+0x248/0x390 [ 31.079803][ T4820] device_initial_probe+0x90/0xc8 [ 31.080721][ T4820] bus_probe_device+0x58/0x120 [ 31.081677][ T4820] device_add+0x6cc/0x9e0 [ 31.082572][ T4820] platform_device_add+0x3dc/0x6f0 [ 31.083605][ T4820] platform_device_register_full+0x4fc/0x5ac [ 31.084847][ T4820] acpi_create_platform_device+0x50c/0x6e4 [ 31.086054][ T4820] acpi_default_enumeration+0x200/0x438 [ 31.087143][ T4820] acpi_bus_attach+0x64c/0x7e0 [ 31.088149][ T4820] acpi_dev_for_one_check+0xa0/0xb4 [ 31.089216][ T4820] device_for_each_child+0xf4/0x184 [ 31.090212][ T4820] acpi_dev_for_each_child+0x98/0xe4 [ 31.091257][ T4820] acpi_bus_attach+0x20c/0x7e0 [ 31.092175][ T4820] acpi_dev_for_one_check+0xa0/0xb4 [ 31.093137][ T4820] device_for_each_child+0xf4/0x184 [ 31.094139][ T4820] acpi_dev_for_each_child+0x98/0xe4 [ 31.095191][ T4820] acpi_bus_attach+0x20c/0x7e0 [ 31.096083][ T4820] acpi_bus_scan+0x104/0x310 [ 31.096974][ T4820] acpi_scan_init+0x168/0x3cc [ 31.097892][ T4820] acpi_init+0x15c/0x1f4 [ 31.098715][ T4820] do_one_initcall+0x274/0xc38 [ 31.099646][ T4820] do_initcall_level+0x12c/0x1c4 [ 31.100618][ T4820] do_initcalls+0x70/0xd0 [ 31.101442][ T4820] do_basic_setup+0x7c/0x90 [ 31.102310][ T4820] kernel_init_freeable+0x268/0x3a8 [ 31.103302][ T4820] kernel_init+0x24/0x1dc [ 31.104185][ T4820] ret_from_fork+0x10/0x20 [ 31.105036][ T4820] [ 31.105036][ T4820] -> #1 (&port->mutex){+.+.}-{4:4}: [ 31.106381][ T4820] __mutex_lock+0x164/0xf14 [ 31.107256][ T4820] mutex_lock_nested+0x24/0x30 [ 31.108174][ T4820] uart_set_termios+0x74/0x58c [ 31.109073][ T4820] tty_set_termios+0x3b0/0x6d0 [ 31.109971][ T4820] set_termios+0x428/0x618 [ 31.110822][ T4820] tty_mode_ioctl+0x45c/0x7f4 [ 31.111740][ T4820] n_tty_ioctl_helper+0xa8/0x2d8 [ 31.112705][ T4820] n_tty_ioctl+0x190/0x434 [ 31.113568][ T4820] tty_ioctl+0x900/0xd50 [ 31.114431][ T4820] __arm64_sys_ioctl+0x154/0x1cc [ 31.115393][ T4820] invoke_syscall+0x98/0x244 [ 31.116341][ T4820] el0_svc_common+0xec/0x23c [ 31.117223][ T4820] do_el0_svc+0x4c/0x5c [ 31.118049][ T4820] el0_svc+0x64/0x260 [ 31.118861][ T4820] el0t_64_sync_handler+0x48/0x148 [ 31.119855][ T4820] el0t_64_sync+0x198/0x19c [ 31.120752][ T4820] [ 31.120752][ T4820] -> #0 (&tty->termios_rwsem){++++}-{4:4}: [ 31.122152][ T4820] __lock_acquire+0x17c0/0x2ebc [ 31.123113][ T4820] lock_acquire+0x140/0x364 [ 31.123959][ T4820] down_write+0x50/0xc0 [ 31.124766][ T4820] n_tty_flush_buffer+0x2c/0xa4 [ 31.125658][ T4820] tty_buffer_flush+0x1b8/0x2b4 [ 31.126586][ T4820] tty_ldisc_flush+0x30/0x7c [ 31.127478][ T4820] __do_SAK+0x21c/0x604 [ 31.128315][ T4820] vc_SAK+0x74/0xa4 [ 31.129042][ T4820] process_scheduled_works+0x788/0x10b8 [ 31.130123][ T4820] worker_thread+0x798/0xbd0 [ 31.131055][ T4820] kthread+0x304/0x3d4 [ 31.131905][ T4820] ret_from_fork+0x10/0x20 [ 31.132798][ T4820] [ 31.132798][ T4820] other info that might help us debug this: [ 31.132798][ T4820] [ 31.134664][ T4820] Chain exists of: [ 31.134664][ T4820] &tty->termios_rwsem --> console_lock --> &buf->lock [ 31.134664][ T4820] [ 31.136904][ T4820] Possible unsafe locking scenario: [ 31.136904][ T4820] [ 31.138228][ T4820] CPU0 CPU1 [ 31.139120][ T4820] ---- ---- [ 31.140110][ T4820] lock(&buf->lock); [ 31.140916][ T4820] lock(console_lock); [ 31.142217][ T4820] lock(&buf->lock); [ 31.143428][ T4820] lock(&tty->termios_rwsem); [ 31.144356][ T4820] [ 31.144356][ T4820] *** DEADLOCK *** [ 31.144356][ T4820] [ 31.145908][ T4820] 5 locks held by kworker/0:9/4820: [ 31.146803][ T4820] #0: ffff0000c002b540 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 31.148772][ T4820] #1: ffff800097fb7c40 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 31.151191][ T4820] #2: ffff800088cec860 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x2c/0xa4 [ 31.152748][ T4820] #3: ffff0000d6d930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x20/0x90 [ 31.154353][ T4820] #4: ffff0000c006a0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x78/0x2b4 [ 31.156040][ T4820] [ 31.156040][ T4820] stack backtrace: [ 31.157018][ T4820] CPU: 0 UID: 0 PID: 4820 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT [ 31.158509][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 31.160269][ T4820] Workqueue: events vc_SAK [ 31.161046][ T4820] Call trace: [ 31.161606][ T4820] show_stack+0x2c/0x3c (C) [ 31.162383][ T4820] __dump_stack+0x30/0x40 [ 31.163139][ T4820] dump_stack_lvl+0xd8/0x12c [ 31.163934][ T4820] dump_stack+0x1c/0x28 [ 31.164655][ T4820] print_circular_bug+0x328/0x330 [ 31.165504][ T4820] check_noncircular+0x158/0x174 [ 31.166367][ T4820] __lock_acquire+0x17c0/0x2ebc [ 31.167170][ T4820] lock_acquire+0x140/0x364 [ 31.167933][ T4820] down_write+0x50/0xc0 [ 31.168622][ T4820] n_tty_flush_buffer+0x2c/0xa4 [ 31.169451][ T4820] tty_buffer_flush+0x1b8/0x2b4 [ 31.170299][ T4820] tty_ldisc_flush+0x30/0x7c [ 31.171097][ T4820] __do_SAK+0x21c/0x604 [ 31.171790][ T4820] vc_SAK+0x74/0xa4 [ 31.172422][ T4820] process_scheduled_works+0x788/0x10b8 [ 31.173349][ T4820] worker_thread+0x798/0xbd0 [ 31.174133][ T4820] kthread+0x304/0x3d4 [ 31.174842][ T4820] ret_from_fork+0x10/0x20 [ 31.185331][ T866] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 31.238633][ T4921] hid: drivers/hid/hid-core.c: report 0 is too short, (5 < 10) [ 31.240478][ T4921] CPU: 1 UID: 0 PID: 4921 Comm: syz.0.12 Not tainted syzkaller #0 PREEMPT [ 31.240498][ T4921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 31.240505][ T4921] Call trace: [ 31.240508][ T4921] show_stack+0x2c/0x3c (C) [ 31.240534][ T4921] __dump_stack+0x30/0x40 [ 31.240548][ T4921] dump_stack_lvl+0xd8/0x12c [ 31.240560][ T4921] dump_stack+0x1c/0x28 [ 31.240571][ T4921] hid_report_raw_event+0x1204/0x1228 [ 31.240584][ T4921] __hid_input_report+0x360/0x408 [ 31.240596][ T4921] hid_safe_input_report+0x50/0x68 [ 31.240607][ T4921] uhid_dev_input2+0xb0/0x134 [ 31.240616][ T4921] uhid_char_write+0x40c/0xa24 [ 31.240625][ T4921] vfs_write+0x2a4/0xa0c [ 31.240633][ T4921] ksys_write+0x12c/0x228 [ 31.240640][ T4921] __arm64_sys_write+0x84/0x98 [ 31.240647][ T4921] invoke_syscall+0x98/0x244 [ 31.240659][ T4921] el0_svc_common+0xec/0x23c [ 31.240671][ T4921] do_el0_svc+0x4c/0x5c [ 31.240682][ T4921] el0_svc+0x64/0x260 [ 31.240694][ T4921] el0t_64_sync_handler+0x48/0x148 [ 31.240706][ T4921] el0t_64_sync+0x198/0x19c [ 33.032467][ T4712] Bluetooth: hci2: command tx timeout [ 33.032543][ T4718] Bluetooth: hci4: command tx timeout [ 33.042527][ T4724] Bluetooth: hci1: command tx timeout [ 33.042564][ T4712] Bluetooth: hci0: command tx timeout [ 33.042597][ T4718] Bluetooth: hci3: command tx timeout [ 35.112966][ T4718] Bluetooth: hci3: command tx timeout [ 35.113251][ T4724] Bluetooth: hci1: command tx timeout [ 35.113272][ T4724] Bluetooth: hci4: command tx timeout [ 35.113287][ T4724] Bluetooth: hci2: command tx timeout [ 35.114789][ T4712] Bluetooth: hci0: command tx timeout [ 37.192454][ T4718] Bluetooth: hci0: command tx timeout [ 37.192482][ T4712] Bluetooth: hci2: command tx timeout [ 37.192494][ T4714] Bluetooth: hci1: command tx timeout [ 37.202481][ T4718] Bluetooth: hci3: command tx timeout [ 37.202488][ T4714] Bluetooth: hci4: command tx timeout