last executing test programs: 1.931941113s ago: executing program 0 (id=1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x74b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0xffffffff, 0x100002c1}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r2 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000003c0)={0x4}) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000100081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = dup(r7) ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) writev(r5, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000004c0)="0e9a", 0x2}], 0x2) syz_clone3(&(0x7f00000007c0)={0x241100000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x11}, &(0x7f00000002c0)=""/127, 0x7f, &(0x7f0000000680)=""/245, &(0x7f0000000780)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5, {r3}}, 0x58) syz_clone(0x1b04200, &(0x7f0000000840)="d4048925ec6ef3daa24303d5a85b88639af5a1682d96b393405759e81a03a6d0a9feca6e9cf9a568d9eeab81c87f6c871e4d4bd6efccb50c01bfe8c9f7264f1af05a379d5dad0287cc4bf78e515771c3441f8f1af33313d2f22fdb4567fd463ca83dd5037e5dad09f2e7d8bc904210908f002c5b2c1169b441e86a93beee3fd219b3029abd7bd00ad4b21b9b666449dca984ecd22d4441914767b4ab16b07edc9293337961f5af528c", 0xa9, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="fdf171aed935195ea561ececedc17768544796fd65425fac3c771e93e42db731113dc8cb3029d089ddaf2411eb59bb7655633af4c9006faa0698116718639ef9ee92712ae5c5eda146be2f3c61b2a11752") ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000340)={0x6, 0xc1, 0x2}) r9 = fcntl$dupfd(r0, 0x406, r0) sendmmsg$inet(r9, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) 1.360074125s ago: executing program 4 (id=5): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x0, 0x7, 0x3d6be741dd94f3d5, @dev={0xfe, 0x80, '\x00', 0x12}, @private1, 0x8, 0x7, 0x5, 0x9cee}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x3, 0x1, 0x1b, 0x2}, {0x3, 0xf, 0x9, 0x7}]}) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) (async) fsopen(0x0, 0x0) (async) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) (async) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0xff01, {"40ffff00000006000000000022925ce3", "d2b9315dd3ba494ff574458eb6417d55", "a34d3bcc6b26fe399bde00"}, 0x7, 0x4}) (async) r6 = syz_open_dev$sndpcmc(&(0x7f0000004c40), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc25c4110, &(0x7f0000000000)={0xffffffff, [[0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [0x6, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0xb], [0x8, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0xfffffff8]], '\x00', [{0x0, 0x1}, {}, {0xb}, {0xffffffff, 0xfffffffc, 0x1}, {}, {0x0, 0x202}, {}, {}, {0x0, 0x4}, {}, {}, {0x4, 0x7}], '\x00', 0x0, 0x0, 0x0, 0x18}) (async) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) (async) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00002702000000000000000000000900030073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000002400)={0x5, 0x0, [{0x40000001, 0xe63, 0x3, 0x2, 0x20002df3, 0x106, 0x5}, {0xa, 0x4, 0x3, 0x8002, 0x27, 0x7, 0x3}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0x80000000, 0x222be, 0x0, 0xd, 0x3, 0x107fd, 0x6}, {0x80000007, 0xc28, 0x3, 0xfffffffc, 0x5, 0xae, 0xffff}]}) socket(0x10, 0x3, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) 1.190065942s ago: executing program 1 (id=2): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11070000006641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e2400200000008133455d000040cb31a5fc97fc294891f7c08b96fcd151fba110c30183df23ea32db0e8f", 0x3a}], 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x100010, r2, 0x4000) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2800}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x404c0c4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x7, 0x12) r8 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac00000004080102000000000000000002000006060002400806000006000240004e00003c00048008000240000000090800014000007fff08000140000007ff080002400000a0a406d5a828e6b400050800024000000005080001400000000206000240001b00000600024088e700003c000480080002400000000e0800094000f51f9c6b9e0001ff0800014000000009080004401000000908000b400000000408000a4000000200080009"], 0xac}}, 0x40) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0x0) 843.437827ms ago: executing program 0 (id=6): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x36f}}], 0x1, &(0x7f0000000340)={0x2e, 0x70, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (fail_nth: 22) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 0s ago: executing program 3 (id=4): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beefff5d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000140)="8d8a239a47c5392729fb576f12615f45294197843801c350a83a2f4f051dce18d1006175ac580ef8632f5cd521f59840ad9a9ad68ea4ad9cede6f5c7a98105d35e6831b988020ce5cf1ad56419fbf2acf92f77a0a31f6415c22e3c2e28f88f8bfad46f063a0ff4eef8cdfc5a0f695022d35888dad558162b8edac3ab0bd6edf5e29bd7fe5bead008a20b1f4ef0accb43a84ccacd312321afadbc44c8d24b8dcf96943094af2d803e0a36c89c03e5bda575", 0xb1}, {&(0x7f0000000680)="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", 0x96f}], 0x2, 0x0, 0x0, 0x9cde14b4b725c073}], 0x1, 0x448d4) r3 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2001, 0x48, 0x2}, 0x18) execveat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000200)='\x82\x00', &(0x7f0000000240)='$!}\x00', &(0x7f00000002c0)='ecb(camellia)\x00', &(0x7f0000000300)='\x00', &(0x7f0000000380)='ecb(camellia)\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='$.\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='ecb(camellia)\x00']}, &(0x7f00000010c0)={[&(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='\x00', &(0x7f0000001000)='\x00', &(0x7f0000001040)='skcipher\x00', &(0x7f0000001080)='ecb(camellia)\x00']}, 0x100) recvmmsg(r2, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000000, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e25, 0x80000, @private1, 0x7}, 0x1c, 0x0}, 0x240400d0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. [ 82.239592][ T5611] cgroup: Unknown subsys name 'net' [ 82.394286][ T5611] cgroup: Unknown subsys name 'cpuset' [ 82.404911][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.089479][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.904072][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.925735][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.934852][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.946752][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.954575][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.962908][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.971984][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.981564][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.989581][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.990055][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.003856][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.011610][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.017499][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.027120][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.035093][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.045161][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.053659][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.063430][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.070711][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.083321][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.087224][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.102363][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.123545][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.137003][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.145721][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.406250][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.414735][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.422164][ T5643] bridge_slave_0: entered allmulticast mode [ 88.430049][ T5643] bridge_slave_0: entered promiscuous mode [ 88.481225][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.488484][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.496117][ T5643] bridge_slave_1: entered allmulticast mode [ 88.503606][ T5643] bridge_slave_1: entered promiscuous mode [ 88.588323][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.595877][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.603345][ T5639] bridge_slave_0: entered allmulticast mode [ 88.611589][ T5639] bridge_slave_0: entered promiscuous mode [ 88.640303][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.647473][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.654796][ T5642] bridge_slave_0: entered allmulticast mode [ 88.662166][ T5642] bridge_slave_0: entered promiscuous mode [ 88.681851][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.689206][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.696568][ T5639] bridge_slave_1: entered allmulticast mode [ 88.704132][ T5639] bridge_slave_1: entered promiscuous mode [ 88.726563][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.748098][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.755439][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.763401][ T5642] bridge_slave_1: entered allmulticast mode [ 88.771059][ T5642] bridge_slave_1: entered promiscuous mode [ 88.778889][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.787163][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.794530][ T5641] bridge_slave_0: entered allmulticast mode [ 88.802201][ T5641] bridge_slave_0: entered promiscuous mode [ 88.824341][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.863693][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.871015][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.878214][ T5641] bridge_slave_1: entered allmulticast mode [ 88.886466][ T5641] bridge_slave_1: entered promiscuous mode [ 88.896563][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.916939][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.924217][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.931811][ T5644] bridge_slave_0: entered allmulticast mode [ 88.939217][ T5644] bridge_slave_0: entered promiscuous mode [ 88.973603][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.994730][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.002306][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.009553][ T5644] bridge_slave_1: entered allmulticast mode [ 89.017017][ T5644] bridge_slave_1: entered promiscuous mode [ 89.026756][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.059947][ T5643] team0: Port device team_slave_0 added [ 89.081009][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.092982][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.105369][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.121593][ T4941] Bluetooth: hci0: command tx timeout [ 89.121612][ T50] Bluetooth: hci2: command tx timeout [ 89.131125][ T4941] Bluetooth: hci1: command tx timeout [ 89.146625][ T5643] team0: Port device team_slave_1 added [ 89.189452][ T5639] team0: Port device team_slave_0 added [ 89.203649][ T50] Bluetooth: hci4: command tx timeout [ 89.209696][ T4941] Bluetooth: hci3: command tx timeout [ 89.238522][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.272563][ T5639] team0: Port device team_slave_1 added [ 89.279223][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.286576][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.313907][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.328787][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.351942][ T5642] team0: Port device team_slave_0 added [ 89.362231][ T5641] team0: Port device team_slave_0 added [ 89.383870][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.391245][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.417633][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.441958][ T5642] team0: Port device team_slave_1 added [ 89.449701][ T5641] team0: Port device team_slave_1 added [ 89.476714][ T5644] team0: Port device team_slave_0 added [ 89.504040][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.511463][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.537680][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.553829][ T5644] team0: Port device team_slave_1 added [ 89.582912][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.590023][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.616128][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.646537][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.653894][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.679973][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.692232][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.699331][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.725762][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.768341][ T5643] hsr_slave_0: entered promiscuous mode [ 89.775513][ T5643] hsr_slave_1: entered promiscuous mode [ 89.794052][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.801299][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.827444][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.839896][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.847211][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.873922][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.911164][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.918254][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.945312][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.979486][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.986818][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.013331][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.064858][ T5639] hsr_slave_0: entered promiscuous mode [ 90.071442][ T5639] hsr_slave_1: entered promiscuous mode [ 90.077884][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 90.084044][ T5639] Cannot create hsr debugfs directory [ 90.128017][ T5642] hsr_slave_0: entered promiscuous mode [ 90.135263][ T5642] hsr_slave_1: entered promiscuous mode [ 90.142121][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 90.147895][ T5642] Cannot create hsr debugfs directory [ 90.225438][ T5641] hsr_slave_0: entered promiscuous mode [ 90.232092][ T5641] hsr_slave_1: entered promiscuous mode [ 90.238357][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 90.245289][ T5641] Cannot create hsr debugfs directory [ 90.361258][ T5644] hsr_slave_0: entered promiscuous mode [ 90.368281][ T5644] hsr_slave_1: entered promiscuous mode [ 90.380353][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 90.392620][ T5644] Cannot create hsr debugfs directory [ 90.902239][ T5643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.921109][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.930055][ T5643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.944254][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.954681][ T5643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.967580][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.987164][ T5643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.998153][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.063139][ T5639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.076604][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.085774][ T5639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.097113][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.105546][ T5639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.117364][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.126318][ T5639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.136733][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.202823][ T5636] Bluetooth: hci1: command tx timeout [ 91.208659][ T50] Bluetooth: hci0: command tx timeout [ 91.214497][ T4941] Bluetooth: hci2: command tx timeout [ 91.261940][ T5642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.274670][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.283692][ T4941] Bluetooth: hci3: command tx timeout [ 91.289556][ T50] Bluetooth: hci4: command tx timeout [ 91.298061][ T5642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.309955][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.318988][ T5642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.329688][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.338021][ T5642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.353089][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.508760][ T5641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.520120][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.542474][ T5641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.554829][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.564102][ T5641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.574203][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.592279][ T5641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.606194][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.637065][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.742419][ T5644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.752856][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.763445][ T5644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.774111][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.782515][ T5644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.793750][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.813650][ T5644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.824554][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.848060][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.888293][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.899350][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.907209][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.927700][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.947258][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.954456][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.027196][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.049022][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.079996][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.087461][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.102646][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.107428][ T24] cfg80211: failed to load regulatory.db [ 92.111936][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.146794][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.154094][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.192631][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.200100][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.255955][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.333397][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.364114][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.396119][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.403345][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.434193][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.441483][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.479951][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.555910][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.588503][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.601541][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.608772][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.627375][ T5643] veth0_vlan: entered promiscuous mode [ 92.654656][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.663826][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.671043][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.689398][ T5643] veth1_vlan: entered promiscuous mode [ 92.818893][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.854144][ T5643] veth0_macvtap: entered promiscuous mode [ 92.884318][ T5642] veth0_vlan: entered promiscuous mode [ 92.896408][ T5643] veth1_macvtap: entered promiscuous mode [ 92.905421][ T5639] veth0_vlan: entered promiscuous mode [ 92.924920][ T5642] veth1_vlan: entered promiscuous mode [ 92.959717][ T5639] veth1_vlan: entered promiscuous mode [ 92.975902][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.006645][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.019480][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.046323][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.067097][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.077699][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.103621][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.181577][ T5642] veth0_macvtap: entered promiscuous mode [ 93.202155][ T5641] veth0_vlan: entered promiscuous mode [ 93.249115][ T5639] veth0_macvtap: entered promiscuous mode [ 93.257751][ T5642] veth1_macvtap: entered promiscuous mode [ 93.274811][ T5641] veth1_vlan: entered promiscuous mode [ 93.281014][ T50] Bluetooth: hci2: command tx timeout [ 93.286723][ T4941] Bluetooth: hci0: command tx timeout [ 93.292576][ T5636] Bluetooth: hci1: command tx timeout [ 93.326171][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.330097][ T5639] veth1_macvtap: entered promiscuous mode [ 93.338801][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.361496][ T4941] Bluetooth: hci4: command tx timeout [ 93.367001][ T50] Bluetooth: hci3: command tx timeout [ 93.432853][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.450050][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.457616][ T5644] veth0_vlan: entered promiscuous mode [ 93.463741][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.477661][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.492452][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.514683][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.528811][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.549018][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.564592][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.574485][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.622234][ T5643] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.646689][ T82] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.656680][ T82] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.666595][ T82] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.677230][ T82] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.692469][ T5644] veth1_vlan: entered promiscuous mode [ 93.704915][ T5643] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 93.715661][ T5641] veth0_macvtap: entered promiscuous mode [ 93.726140][ T5643] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 93.739680][ T5641] veth1_macvtap: entered promiscuous mode [ 93.742806][ T5643] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 93.758302][ T5643] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 93.958022][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.962766][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.973643][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.076353][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.095789][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.108043][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.136864][ T5644] veth0_macvtap: entered promiscuous mode [ 94.143447][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.158607][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.181872][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.191780][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.243307][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.253904][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.291373][ T5644] veth1_macvtap: entered promiscuous mode [ 94.324400][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.334402][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.454241][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.545976][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.696959][ T5738] sg_write: data in/out 2097152/12 bytes for SCSI command 0xc3-- guessing data in; [ 94.696959][ T5738] program syz.1.2 not setting count and/or reply_len properly [ 94.749735][ T1173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.791882][ T1173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.821083][ T1173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.831949][ T1173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.894695][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.913159][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.031619][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.047688][ T5741] FAULT_INJECTION: forcing a failure. [ 95.047688][ T5741] name failslab, interval 1, probability 0, space 0, times 1 [ 95.082901][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.106757][ T5741] CPU: 0 UID: 0 PID: 5741 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 95.106787][ T5741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.106808][ T5741] Call Trace: [ 95.106816][ T5741] [ 95.106825][ T5741] dump_stack_lvl+0xe8/0x150 [ 95.106864][ T5741] should_fail_ex+0x40c/0x560 [ 95.106894][ T5741] ? alloc_slab_obj_exts+0xba/0x230 [ 95.106925][ T5741] should_failslab+0xa8/0x100 [ 95.106949][ T5741] __kmalloc_flags_noprof+0x129/0x7f0 [ 95.106983][ T5741] ? alloc_slab_obj_exts+0xba/0x230 [ 95.107018][ T5741] alloc_slab_obj_exts+0xba/0x230 [ 95.107049][ T5741] __memcg_slab_post_alloc_hook+0x5d3/0xf10 [ 95.107099][ T5741] kmem_cache_alloc_noprof+0x350/0x5f0 [ 95.107129][ T5741] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 95.107156][ T5741] ? alloc_empty_file+0x5b/0x1d0 [ 95.107185][ T5741] ? alloc_empty_file+0x5b/0x1d0 [ 95.107222][ T5741] alloc_empty_file+0x5b/0x1d0 [ 95.107254][ T5741] alloc_file_pseudo+0x115/0x1e0 [ 95.107285][ T5741] ? __might_fault+0xaf/0x130 [ 95.107314][ T5741] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 95.107356][ T5741] __anon_inode_getfile+0x129/0x200 [ 95.107400][ T5741] io_uring_create+0x57f/0x990 [ 95.107429][ T5741] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 95.107460][ T5741] ? __fget_files+0x2a/0x420 [ 95.107480][ T5741] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 95.107540][ T5741] __do_fast_syscall_32+0x23e/0x6f0 [ 95.107573][ T5741] ? do_fast_syscall_32+0x33/0x70 [ 95.107601][ T5741] ? lockdep_hardirqs_on+0x7a/0x110 [ 95.107628][ T5741] ? asm_int80_emulation+0x1a/0x20 [ 95.107647][ T5741] ? do_int80_emulation+0x29f/0x550 [ 95.107676][ T5741] ? trace_irq_disable+0x3b/0x140 [ 95.107710][ T5741] do_fast_syscall_32+0x33/0x70 [ 95.107739][ T5741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.107763][ T5741] RIP: 0023:0xf7f990ec [ 95.107788][ T5741] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 95.107805][ T5741] RSP: 002b:00000000f543543c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 95.107853][ T5741] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 95.107867][ T5741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.107878][ T5741] RBP: 00000000f54354fc R08: 0000000000000000 R09: 0000000000000000 [ 95.107890][ T5741] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 95.107900][ T5741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.107927][ T5741] [ 95.109774][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.376867][ T50] Bluetooth: hci0: command tx timeout [ 95.387714][ T50] Bluetooth: hci2: command tx timeout [ 95.393555][ T50] Bluetooth: hci1: command tx timeout [ 95.445599][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.461485][ T4941] Bluetooth: hci3: command tx timeout [ 95.463757][ T50] Bluetooth: hci4: command tx timeout [ 95.480403][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 95.493066][ T11] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 95.501852][ T11] usb 2-1: config 0 has an invalid descriptor of length 195, skipping remainder of the config [ 95.521395][ T11] usb 2-1: config 0 has no interface number 0 [ 95.527509][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.529610][ T11] usb 2-1: too many endpoints for config 0 interface 150 altsetting 252: 209, using maximum allowed: 30 [ 95.570100][ T11] usb 2-1: config 0 interface 150 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 209 [ 95.623434][ T11] usb 2-1: config 0 interface 150 has no altsetting 0 [ 95.649148][ T11] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 95.660378][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.673948][ T11] usb 2-1: Product: syz [ 95.687316][ T11] usb 2-1: Manufacturer: syz [ 95.692551][ T11] usb 2-1: SerialNumber: syz [ 95.709557][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.728263][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.746303][ T11] usb 2-1: config 0 descriptor?? [ 95.787295][ T5740] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 95.787480][ T5740] [ 95.787488][ T5740] ====================================================== [ 95.787497][ T5740] WARNING: possible circular locking dependency detected [ 95.787512][ T5740] syzkaller #0 Not tainted [ 95.787521][ T5740] ------------------------------------------------------ [ 95.787529][ T5740] syz.0.6/5740 is trying to acquire lock: [ 95.787540][ T5740] ffffffff8e94bf00 (console_owner){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 95.787597][ T5740] [ 95.787597][ T5740] but task is already holding lock: [ 95.787604][ T5740] ffff88802608a4f8 (&tty->write_wait){-.-.}-{3:3}, at: __wake_up_common_lock+0x30/0x1f0 [ 95.787655][ T5740] [ 95.787655][ T5740] which lock already depends on the new lock. [ 95.787655][ T5740] [ 95.787662][ T5740] [ 95.787662][ T5740] the existing dependency chain (in reverse order) is: [ 95.787669][ T5740] [ 95.787669][ T5740] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 95.787697][ T5740] _raw_spin_lock_irqsave+0x40/0x60 [ 95.787722][ T5740] __wake_up_common_lock+0x30/0x1f0 [ 95.787747][ T5740] tty_port_default_wakeup+0xc8/0x100 [ 95.787771][ T5740] serial8250_tx_chars+0x70e/0x950 [ 95.787791][ T5740] serial8250_handle_irq+0x166/0x550 [ 95.787812][ T5740] serial8250_default_handle_irq+0xbf/0x1e0 [ 95.787837][ T5740] serial8250_interrupt+0x8d/0x160 [ 95.787866][ T5740] __handle_irq_event_percpu+0x216/0x9a0 [ 95.787893][ T5740] handle_irq_event+0x8b/0x1e0 [ 95.787919][ T5740] handle_edge_irq+0x1f4/0x8a0 [ 95.787943][ T5740] __common_interrupt+0x141/0x1f0 [ 95.787961][ T5740] common_interrupt+0xb6/0xe0 [ 95.787981][ T5740] asm_common_interrupt+0x26/0x40 [ 95.788000][ T5740] _raw_spin_unlock_irqrestore+0x47/0x80 [ 95.788024][ T5740] uart_write+0x3c0/0x9f0 [ 95.788042][ T5740] n_tty_write+0xd49/0x11e0 [ 95.788066][ T5740] file_tty_write+0x509/0x9c0 [ 95.788084][ T5740] vfs_write+0x612/0xba0 [ 95.788103][ T5740] ksys_write+0x150/0x270 [ 95.788123][ T5740] do_syscall_64+0x174/0x580 [ 95.788148][ T5740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.788166][ T5740] [ 95.788166][ T5740] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 95.788192][ T5740] _raw_spin_lock_irqsave+0x40/0x60 [ 95.788215][ T5740] serial8250_console_write+0x153/0x1ba0 [ 95.788236][ T5740] console_flush_all+0x6ea/0xaf0 [ 95.788259][ T5740] console_unlock+0xd1/0x1c0 [ 95.788281][ T5740] vprintk_emit+0x485/0x560 [ 95.788303][ T5740] _printk+0xdd/0x130 [ 95.788327][ T5740] register_console+0xbc3/0xfc0 [ 95.788351][ T5740] univ8250_console_init+0x3a/0x70 [ 95.788369][ T5740] console_init+0x10b/0x4a0 [ 95.788395][ T5740] start_kernel+0x238/0x3e0 [ 95.788412][ T5740] x86_64_start_reservations+0x24/0x30 [ 95.788437][ T5740] x86_64_start_kernel+0x137/0x1b0 [ 95.788460][ T5740] common_startup_64+0x13e/0x157 [ 95.788495][ T5740] [ 95.788495][ T5740] -> #0 (console_owner){....}-{0:0}: [ 95.788522][ T5740] __lock_acquire+0x1520/0x2cf0 [ 95.788545][ T5740] lock_acquire+0x106/0x350 [ 95.788561][ T5740] console_flush_all+0x693/0xaf0 [ 95.788586][ T5740] console_unlock+0xd1/0x1c0 [ 95.788607][ T5740] vprintk_emit+0x485/0x560 [ 95.788629][ T5740] _printk+0xdd/0x130 [ 95.788654][ T5740] __queue_work+0xf63/0x10a0 [ 95.788682][ T5740] queue_work_on+0x106/0x1d0 [ 95.788708][ T5740] io_fallback_tw+0xc9/0x1b0 [ 95.788728][ T5740] io_poll_wake+0x373/0x460 [ 95.788746][ T5740] __wake_up_common_lock+0x13a/0x1f0 [ 95.788772][ T5740] n_hdlc_send_frames+0x53e/0xa40 [ 95.788792][ T5740] n_hdlc_tty_write+0x7c2/0x960 [ 95.788811][ T5740] file_tty_write+0x509/0x9c0 [ 95.788828][ T5740] vfs_write+0x612/0xba0 [ 95.788847][ T5740] ksys_write+0x150/0x270 [ 95.788866][ T5740] __do_fast_syscall_32+0x23e/0x6f0 [ 95.788894][ T5740] do_fast_syscall_32+0x33/0x70 [ 95.788928][ T5740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.788951][ T5740] [ 95.788951][ T5740] other info that might help us debug this: [ 95.788951][ T5740] [ 95.788957][ T5740] Chain exists of: [ 95.788957][ T5740] console_owner --> &port_lock_key --> &tty->write_wait [ 95.788957][ T5740] [ 95.788990][ T5740] Possible unsafe locking scenario: [ 95.788990][ T5740] [ 95.788996][ T5740] CPU0 CPU1 [ 95.789001][ T5740] ---- ---- [ 95.789006][ T5740] lock(&tty->write_wait); [ 95.789019][ T5740] lock(&port_lock_key); [ 95.789034][ T5740] lock(&tty->write_wait); [ 95.789049][ T5740] lock(console_owner); [ 95.789062][ T5740] [ 95.789062][ T5740] *** DEADLOCK *** [ 95.789062][ T5740] [ 95.789067][ T5740] 5 locks held by syz.0.6/5740: [ 95.789079][ T5740] #0: ffff88802608a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 95.789127][ T5740] #1: ffff88802608a128 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x1e4/0x9c0 [ 95.789173][ T5740] #2: ffff88802608a4f8 (&tty->write_wait){-.-.}-{3:3}, at: __wake_up_common_lock+0x30/0x1f0 [ 95.789225][ T5740] #3: ffffffff8e94bf60 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 95.789279][ T5740] #4: ffffffff8e8337f8 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 95.789334][ T5740] [ 95.789334][ T5740] stack backtrace: [ 95.789345][ T5740] CPU: 1 UID: 0 PID: 5740 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 95.789367][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.789380][ T5740] Call Trace: [ 95.789388][ T5740] [ 95.789396][ T5740] dump_stack_lvl+0xe8/0x150 [ 95.789419][ T5740] print_circular_bug+0x2e1/0x300 [ 95.789447][ T5740] check_noncircular+0x12e/0x150 [ 95.789483][ T5740] __lock_acquire+0x1520/0x2cf0 [ 95.789515][ T5740] ? console_flush_all+0x123/0xaf0 [ 95.789541][ T5740] lock_acquire+0x106/0x350 [ 95.789559][ T5740] ? console_flush_all+0x123/0xaf0 [ 95.789590][ T5740] ? do_raw_spin_unlock+0xf5/0x210 [ 95.789617][ T5740] ? console_flush_all+0x123/0xaf0 [ 95.789644][ T5740] console_flush_all+0x693/0xaf0 [ 95.789669][ T5740] ? console_flush_all+0x123/0xaf0 [ 95.789696][ T5740] ? console_flush_all+0x123/0xaf0 [ 95.789724][ T5740] ? __pfx_console_flush_all+0x10/0x10 [ 95.789754][ T5740] ? is_printk_cpu_sync_owner+0x32/0x40 [ 95.789786][ T5740] console_unlock+0xd1/0x1c0 [ 95.789810][ T5740] ? __pfx_console_unlock+0x10/0x10 [ 95.789866][ T5740] ? _raw_spin_unlock+0x20/0x50 [ 95.789890][ T5740] ? _printk+0xdd/0x130 [ 95.789920][ T5740] vprintk_emit+0x485/0x560 [ 95.789943][ T5740] ? n_hdlc_send_frames+0x53e/0xa40 [ 95.789963][ T5740] ? n_hdlc_tty_write+0x7c2/0x960 [ 95.789983][ T5740] ? __pfx_vprintk_emit+0x10/0x10 [ 95.790005][ T5740] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.790036][ T5740] _printk+0xdd/0x130 [ 95.790064][ T5740] ? __pfx_io_tctx_fallback_work+0x10/0x10 [ 95.790088][ T5740] ? __pfx__printk+0x10/0x10 [ 95.790122][ T5740] __queue_work+0xf63/0x10a0 [ 95.790153][ T5740] ? task_work_add+0x3d1/0x420 [ 95.790179][ T5740] queue_work_on+0x106/0x1d0 [ 95.790210][ T5740] io_fallback_tw+0xc9/0x1b0 [ 95.790234][ T5740] io_poll_wake+0x373/0x460 [ 95.790256][ T5740] __wake_up_common_lock+0x13a/0x1f0 [ 95.790288][ T5740] n_hdlc_send_frames+0x53e/0xa40 [ 95.790318][ T5740] n_hdlc_tty_write+0x7c2/0x960 [ 95.790343][ T5740] ? n_hdlc_tty_write+0x18a/0x960 [ 95.790379][ T5740] ? __pfx_n_hdlc_tty_write+0x10/0x10 [ 95.790399][ T5740] ? __pfx_default_wake_function+0x10/0x10 [ 95.790432][ T5740] ? __pfx_n_hdlc_tty_write+0x10/0x10 [ 95.790450][ T5740] file_tty_write+0x509/0x9c0 [ 95.790482][ T5740] vfs_write+0x612/0xba0 [ 95.790511][ T5740] ? __pfx_vfs_write+0x10/0x10 [ 95.790536][ T5740] ? __fget_files+0x2a/0x420 [ 95.790560][ T5740] ksys_write+0x150/0x270 [ 95.790584][ T5740] ? __pfx_ksys_write+0x10/0x10 [ 95.790612][ T5740] __do_fast_syscall_32+0x23e/0x6f0 [ 95.790644][ T5740] ? do_fast_syscall_32+0x33/0x70 [ 95.790674][ T5740] ? lockdep_hardirqs_on+0x7a/0x110 [ 95.790703][ T5740] ? irqentry_exit+0x10f/0x8f0 [ 95.790732][ T5740] do_fast_syscall_32+0x33/0x70 [ 95.790771][ T5740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.790797][ T5740] RIP: 0023:0xf7f990ec [ 95.790814][ T5740] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 95.790832][ T5740] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 95.790869][ T5740] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001040 [ 95.790888][ T5740] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000 [ 95.790901][ T5740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.790913][ T5740] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 95.790925][ T5740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.790946][ T5740] [ 98.007836][ T11] sr9700 2-1:0.150: probe with driver sr9700 failed with error -22 [ 98.023858][ T11] usb 2-1: USB disconnect, device number 2