last executing test programs:

6m11.546882696s ago: executing program 3 (id=1471):
modify_ldt$auto(0x2, &(0x7f0000001a00), 0x80)

6m11.425670517s ago: executing program 3 (id=1475):
pwrite64$auto(0xc8, &(0x7f0000000300)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\x9cbZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00`^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\x1e\x01\x0e#\xff\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;%\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\x05\x00\x00\x00\xb6\x1a\x7f\xc0%\xb0\rfO\xd4I+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf8\x16\xd3\xc2\xe8\xaf\xe5S]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8u\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004DS\x01\xd3\x14M\xf7\xe7\x90\xe9\x93\x80\xec\xff\n0\xe2\xda\x95\'\xf2\xed\xcbg\\\xc2\xd9\xf8\xb1\xac\x94v\xa2.J\b\x98\xdae{\xcc\x9d\xf7E\n&\xce\xc0*\x88\xcf\x13+c\xc4\xe2\xbc\xdd<3\x11\x9b_+\xaec{l\x80\x1f\x81\xc4\xd1\x99$\x9a\x10\xf6\x9f\xa2\xf9\x05E4\xc6\xb9\x1a6E?\x9717\xb7\xa5\x1bN\xd4\xf3\xfb\xe9\x98&N\xc2P\x10\x97^M\f\xb4\xe7bW}$\xb45\xe727O\x9c\x89\xad\xcb~\xb5gQ[\xf2\xf4\xb7\x9cq\xfe<~\xdd\x1a\x11\xff\xf6\xbb\xf4D\x93N7?\x89\xe1\x96\xa4\x81\xfb\xb4\x97\xdf]~\xeeO\rV\x83\x95\\\xc8\x18\xa1\xb0\xb1\xdc\xb1\xfd\x00\xa1\x11Se\xc4\xe9:w\x06\x15k\xf6\xa5\x8e\x18\xdaqb\xd4DJ\xcd7\xcc\xbf\x8c.\x137\x88\x91\xc2\xa2y\xf1\xb3\xc3\xab\xf1\x86\x1a\x17\xf9\x91\xb3\xcd\x99\x05\x99\xee\x93\xa7\xed\x97\x91C&\xba\x01|\x02\x10\x18\xb7\xe4\x0e\xac\xb6\x9e,\x00'/497, 0xfdef, 0x2)

6m11.256983112s ago: executing program 3 (id=1479):
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)

6m11.058697858s ago: executing program 3 (id=1485):
prctl$auto_PR_LOCK_SHADOW_STACK_STATUS(0x4c, 0x95b6, 0x0, 0x0, 0x0)

6m10.892990402s ago: executing program 3 (id=1489):
rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}})

6m10.306302282s ago: executing program 3 (id=1502):
ioctl$auto(0x4000000000000c8, 0x400454d0, 0x3)

6m10.019514611s ago: executing program 32 (id=1502):
ioctl$auto(0x4000000000000c8, 0x400454d0, 0x3)

4m22.999322204s ago: executing program 1 (id=4253):
r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000001100), 0x400, 0x0)
read$auto_evm_key_ops_evm_secfs(r0, 0x0, 0x0)

4m22.852647813s ago: executing program 1 (id=4256):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.3/usb4/ep_00/uevent\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000040)=' ', 0x4)

4m22.619524878s ago: executing program 1 (id=4261):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/dirtytime_expire_seconds\x00', 0x202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x7fffe000)

4m22.478355068s ago: executing program 1 (id=4265):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="35b918", 0x3)

4m22.303930978s ago: executing program 1 (id=4270):
tkill$auto(0x1, 0x7)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79)

4m21.910381402s ago: executing program 1 (id=4278):
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000004c0), 0x2002, 0x0)
ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000500)={0xe})

4m21.606160682s ago: executing program 33 (id=4278):
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000004c0), 0x2002, 0x0)
ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000500)={0xe})

4m20.593868793s ago: executing program 0 (id=4299):
ioperm$auto(0x7, 0x5ad2, 0xc)
io_pgetevents$auto(0x8, 0xc313, 0x7, 0x0, 0x0, 0xffffffffffffffff)

4m20.395490086s ago: executing program 0 (id=4302):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_loaded\x00', 0x40100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f)

4m20.271970921s ago: executing program 0 (id=4304):
socket(0x28, 0x1, 0x0)
getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4)

4m20.159902509s ago: executing program 0 (id=4306):
r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x80, 0x0)
mmap$auto(0x804000, 0x10, 0x100000001, 0x80000011, r0, 0x82000000)

4m20.055447437s ago: executing program 0 (id=4308):
tkill$auto(0x1, 0x7)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79)

4m19.7434792s ago: executing program 4 (id=4311):
write$auto(0xca, &(0x7f0000000040)='\x04\x92K\xfa8j\xf0L3\x9b<\xe9\'\xa7H\xef\x9bOa\rVwx\xbfZp\xd55>h6~Dz\xe4\x00}\xf1\x1d\x00.R\xd5\x89|d\v', 0x10)
bpf$auto(0x5, &(0x7f0000000000)=@test={0x9, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171)

4m19.598996579s ago: executing program 4 (id=4313):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$auto_SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000002200))

4m19.559133986s ago: executing program 0 (id=4314):
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x5, 0x0, 0x8001)

4m19.063052592s ago: executing program 34 (id=4314):
r0 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r0, 0x29, 0x5, 0x0, 0x8001)

4m19.053469808s ago: executing program 4 (id=4317):
r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0)
ioctl$auto_snd_seq_f_ops_seq_clientmgr(r0, 0x9, 0x0)

4m18.90243949s ago: executing program 4 (id=4319):
openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy3/hwflags\x00', 0x40081, 0x0)
write$auto(0x3, 0x0, 0xfdf3)

4m18.710671071s ago: executing program 4 (id=4321):
tkill$auto(0x1, 0x7)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79)

4m16.614038951s ago: executing program 4 (id=4336):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/gather_data_sampling\x00', 0x80000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4105, 0x1009)

4m16.056153707s ago: executing program 35 (id=4336):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/gather_data_sampling\x00', 0x80000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4105, 0x1009)

2.124338006s ago: executing program 7 (id=8634):
socket(0xa, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8)

1.602738501s ago: executing program 7 (id=8642):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0)
select$auto(0x7, &(0x7f0000000180)={[0x9, 0x0, 0x3, 0x8, 0xfffffffffffffffa, 0x6, 0x8249, 0x5, 0x7, 0x7, 0x8e82, 0xd02, 0x2, 0x7, 0x71c, 0xffffffffffffffff]}, 0x0, 0x0, 0x0)

1.403135s ago: executing program 2 (id=8645):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
madvise$auto(0x0, 0x200007, 0x19)

1.143219322s ago: executing program 6 (id=8649):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0)

967.561346ms ago: executing program 6 (id=8652):
mmap$auto(0x0, 0x400005, 0xdf, 0x400000000009b72, 0x5, 0x8000)
r0 = socket(0x11, 0x3, 0x2)
getsockopt$auto(r0, 0x107, 0x12, 0x0, 0x0)

898.910929ms ago: executing program 2 (id=8653):
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x405, 0x8000)
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_START(r0, 0x5452, 0x0)

846.737089ms ago: executing program 5 (id=8654):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004)

778.756957ms ago: executing program 2 (id=8655):
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000)
madvise$auto_MADV_HUGEPAGE(0x0, 0x80000001, 0xe)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x9, 0x0, 0x5, 0x8)

720.901482ms ago: executing program 5 (id=8656):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x48, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x2c, 0x3, 0x0, 0x1, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x106, 0x0, 0x1, [@nested={0x1d, 0x74, 0x0, 0x1, [@nested={0x4, 0x4d}, @typed={0xa888, 0xd0, 0x0, 0x0, @fd}, @typed={0x8, 0x3, 0x0, 0x0, @pid}, @generic="2a9d272f66"]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)

646.392758ms ago: executing program 2 (id=8657):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
read$auto(r0, 0x0, 0x10001)

607.583189ms ago: executing program 7 (id=8658):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/neigh/veth1_to_team/delay_first_probe_time\x00', 0x101002, 0x0)
write$auto(r0, 0x0, 0x73)

564.220491ms ago: executing program 5 (id=8659):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r0)
sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f00000006c0)={0x0, 0x34000, &(0x7f0000000680)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x7fffffff}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80)

534.453077ms ago: executing program 6 (id=8660):
mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd2\x00', 0x8001, 0x0)
ioctl$auto_BLKROTATIONAL(r0, 0x127e, 0x0)

476.152333ms ago: executing program 2 (id=8661):
r0 = pidfd_open$auto(0x1, 0x0)
setns(r0, 0x60020000)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)

427.634004ms ago: executing program 7 (id=8662):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000003c0)="22e030b1f1193fd495b7432f5493d1187f016e4838a0a6c56fbfa2f370311662e39dc20de5c1184cf39787ac657b4a454b6ba4d1ee032dc8199463097233f8594827ae3e7bdfda7f2163bde7698f2e6fc4b1f42ef93bb3e4cadcb573c49710804b003370e754f106630ed8fa0754f14f2fd7441c4edcdbeb21f8e71a8a07b4e7ac3ef2faa97dd39548c3c1dc62f80bb2878706ccc829e1c6d9bff3f4455ec091aa6c27350cb83cef590ff5025caa372b2be22f0af688db6092f792202315", 0xbe)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)

375.53168ms ago: executing program 5 (id=8663):
setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0)
r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0)
writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x4}, 0x2)

345.576549ms ago: executing program 6 (id=8664):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0)
write$auto(r0, 0x0, 0x1)

250.30301ms ago: executing program 7 (id=8665):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8)

213.494273ms ago: executing program 5 (id=8666):
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x13, r1, 0x7904a4a47fe859c7, 0x70bd22, 0x25dfdbfc}, 0x14}}, 0x40810)

177.23033ms ago: executing program 6 (id=8667):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setresuid$auto(0x2, 0x7, 0x8080)
bind$auto(r0, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x20400000}, 0x10)

84.118972ms ago: executing program 7 (id=8668):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0)

38.136846ms ago: executing program 2 (id=8669):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/sockstat6\x00', 0x20100, 0x0)
read$auto(r0, 0x0, 0x8)

22.203475ms ago: executing program 5 (id=8670):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0xffffffff, 0x6, 0x6, 0x0)
keyctl$auto(0xa, 0xfffffffffffffffd, 0x0, 0x0, 0x0)

0s ago: executing program 6 (id=8671):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.15.192' (ED25519) to the list of known hosts.
[   75.491670][ T5816] cgroup: Unknown subsys name 'net'
[   75.638731][ T5816] cgroup: Unknown subsys name 'cpuset'
[   75.647253][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   77.094099][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.462612][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.470736][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.479913][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.488299][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.496911][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.504990][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.519082][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.533401][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.541393][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.549168][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.557005][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.558537][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.564877][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.576364][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.579516][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.586120][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.592359][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.610296][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.618162][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.628021][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.023343][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   80.107720][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   80.286285][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   80.300275][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.307810][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.316314][ T5832] bridge_slave_0: entered allmulticast mode
[   80.323413][ T5832] bridge_slave_0: entered promiscuous mode
[   80.336323][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   80.374255][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.381674][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.389225][ T5832] bridge_slave_1: entered allmulticast mode
[   80.397063][ T5832] bridge_slave_1: entered promiscuous mode
[   80.504355][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.513861][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.522079][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.530327][ T5826] bridge_slave_0: entered allmulticast mode
[   80.537667][ T5826] bridge_slave_0: entered promiscuous mode
[   80.546279][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.553400][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.560849][ T5826] bridge_slave_1: entered allmulticast mode
[   80.567930][ T5826] bridge_slave_1: entered promiscuous mode
[   80.609711][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.633783][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.641696][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.649035][ T5827] bridge_slave_0: entered allmulticast mode
[   80.657094][ T5827] bridge_slave_0: entered promiscuous mode
[   80.691709][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.711017][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.718488][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.726264][ T5827] bridge_slave_1: entered allmulticast mode
[   80.733373][ T5827] bridge_slave_1: entered promiscuous mode
[   80.753715][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.786773][ T5832] team0: Port device team_slave_0 added
[   80.802645][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.812028][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.819673][ T5825] bridge_slave_0: entered allmulticast mode
[   80.827521][ T5825] bridge_slave_0: entered promiscuous mode
[   80.847813][ T5832] team0: Port device team_slave_1 added
[   80.856540][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.878846][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.886681][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.894373][ T5825] bridge_slave_1: entered allmulticast mode
[   80.902921][ T5825] bridge_slave_1: entered promiscuous mode
[   80.933348][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.946428][ T5826] team0: Port device team_slave_0 added
[   80.986572][ T5826] team0: Port device team_slave_1 added
[   80.996342][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.009414][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.019727][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.027156][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.053443][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.067148][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.074232][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.101753][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.161750][ T5827] team0: Port device team_slave_0 added
[   81.171441][ T5827] team0: Port device team_slave_1 added
[   81.206573][ T5825] team0: Port device team_slave_0 added
[   81.224289][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.231353][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.257802][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.300337][ T5825] team0: Port device team_slave_1 added
[   81.330542][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.338751][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.365488][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.387772][ T5832] hsr_slave_0: entered promiscuous mode
[   81.394245][ T5832] hsr_slave_1: entered promiscuous mode
[   81.412927][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.420841][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.447952][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.462887][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.470910][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.498648][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.517968][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.525323][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.551388][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.556025][   T55] Bluetooth: hci3: command tx timeout
[   81.563943][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.574436][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.605809][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.634874][   T55] Bluetooth: hci1: command tx timeout
[   81.714963][   T55] Bluetooth: hci2: command tx timeout
[   81.715288][ T5840] Bluetooth: hci0: command tx timeout
[   81.746864][ T5827] hsr_slave_0: entered promiscuous mode
[   81.753757][ T5827] hsr_slave_1: entered promiscuous mode
[   81.760713][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.769016][ T5827] Cannot create hsr debugfs directory
[   81.782712][ T5825] hsr_slave_0: entered promiscuous mode
[   81.789069][ T5825] hsr_slave_1: entered promiscuous mode
[   81.795391][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.802953][ T5825] Cannot create hsr debugfs directory
[   81.825191][ T5826] hsr_slave_0: entered promiscuous mode
[   81.831500][ T5826] hsr_slave_1: entered promiscuous mode
[   81.838205][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.845901][ T5826] Cannot create hsr debugfs directory
[   82.263022][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.289875][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.302293][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.322181][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.363079][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.396251][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.407697][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.441652][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.492031][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.512364][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.523148][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.538028][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.637230][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.650731][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.675259][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.702747][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.717737][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.757139][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   82.817117][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.824458][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.858929][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.866151][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.886276][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.963359][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   83.023852][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.031425][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.069385][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.076812][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.099281][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.122935][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.190729][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   83.219410][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   83.241427][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.248569][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.258741][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.265925][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.292126][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.299382][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.312404][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.319642][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.399864][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.572787][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.601606][ T5832] veth0_vlan: entered promiscuous mode
[   83.634885][ T5840] Bluetooth: hci3: command tx timeout
[   83.671788][ T5832] veth1_vlan: entered promiscuous mode
[   83.715071][ T5840] Bluetooth: hci1: command tx timeout
[   83.739056][ T5825] veth0_vlan: entered promiscuous mode
[   83.776386][ T5832] veth0_macvtap: entered promiscuous mode
[   83.790030][ T5825] veth1_vlan: entered promiscuous mode
[   83.795880][ T5840] Bluetooth: hci0: command tx timeout
[   83.808994][ T5840] Bluetooth: hci2: command tx timeout
[   83.818424][ T5832] veth1_macvtap: entered promiscuous mode
[   83.857349][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.888778][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.915731][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.964499][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.977575][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.988022][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.998286][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.010070][ T5826] veth0_vlan: entered promiscuous mode
[   84.021600][ T5825] veth0_macvtap: entered promiscuous mode
[   84.038146][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.052312][ T5826] veth1_vlan: entered promiscuous mode
[   84.064488][ T5825] veth1_macvtap: entered promiscuous mode
[   84.129627][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.141320][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.157723][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.217899][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.228739][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.240424][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.266227][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.276994][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.287413][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.296637][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.312468][ T5826] veth0_macvtap: entered promiscuous mode
[   84.323891][ T5826] veth1_macvtap: entered promiscuous mode
[   84.326751][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.350100][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.385941][ T5827] veth0_vlan: entered promiscuous mode
[   84.418203][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.421654][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.439049][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.447093][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.449790][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.467175][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.478878][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.488772][ T5827] veth1_vlan: entered promiscuous mode
[   84.507555][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.522027][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.532947][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.544174][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.556871][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.580938][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.602273][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.611891][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.621113][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.701500][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.730561][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.765936][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   84.792699][ T5827] veth0_macvtap: entered promiscuous mode
[   84.815733][ T5827] veth1_macvtap: entered promiscuous mode
[   84.822767][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.847699][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.891748][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.909819][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.934563][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.949873][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.960496][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.994679][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.004548][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.018600][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.038197][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.111367][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.128616][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.143338][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.160160][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.170386][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.185134][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.209417][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.209841][   T30] audit: type=1800 audit(1745715340.357:2): pid=5899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7" name="version" dev="configfs" ino=5876 res=0 errno=0
[   85.226085][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.242275][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.251701][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.269460][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.278598][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.278846][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.621525][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.678317][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.714996][ T5840] Bluetooth: hci3: command tx timeout
[   85.790782][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.800053][ T5840] Bluetooth: hci1: command tx timeout
[   85.837932][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.885927][ T5840] Bluetooth: hci2: command tx timeout
[   85.891398][ T5840] Bluetooth: hci0: command tx timeout
[   86.726206][ T5950] nfs: Bad value for 'source'
[   86.928953][  T978] cfg80211: failed to load regulatory.db
[   87.794865][ T5840] Bluetooth: hci3: command tx timeout
[   87.874906][ T5840] Bluetooth: hci1: command tx timeout
[   87.956410][ T5840] Bluetooth: hci0: command tx timeout
[   87.956444][   T55] Bluetooth: hci2: command tx timeout
[   88.599084][ T6029] random: crng reseeded on system resumption
[   89.323586][ T6062] mmap: syz.1.83 (6062) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   92.746466][ T6221] Process accounting resumed
[   92.906805][ T6233] syz.0.168 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   94.134960][ T6295] capability: warning: `syz.1.199' uses deprecated v2 capabilities in a way that may be insecure
[   95.613427][ T6367] Unable to find swap-space signature
[  100.413613][   T30] audit: type=1800 audit(6040683678.557:3): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.333" name="lu_gp_id" dev="configfs" ino=9108 res=0 errno=0
[  100.882704][   T55] Bluetooth: hci2: unexpected event 0x17 length: 123 > 6
[  105.602617][   T55] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7
[  107.352257][   T30] audit: type=1800 audit(6040684708.498:4): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.475" name="discovery_nqn" dev="configfs" ino=10548 res=0 errno=0
[  109.816020][ T6967] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.631588][   T55] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13
[  112.211612][ T7080] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[7080]
[  113.122526][ T7122] syz.3.607(7122): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  113.520014][ T7131] ima: policy update failed
[  113.525704][   T30] audit: type=1802 audit(6040684714.665:5): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.612" res=0 errno=0
[  115.237104][ T7124] kexec: Could not allocate control_code_buffer
[  122.863891][ T7552] Process accounting paused
[  123.145987][   T30] audit: type=1800 audit(4294967299.108:6): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.828" name="members" dev="configfs" ino=12424 res=0 errno=0
[  125.253362][ T7590] kexec: Could not allocate control_code_buffer
[  126.053498][   T55] Bluetooth: hci0: unexpected event 0x32 length: 10 > 9
[  129.698166][ T7875] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[7875]
[  130.523773][ T7914] syz_tun: tun_chr_ioctl cmd 1074025680
[  132.701500][ T8023] =======================================================
[  132.701500][ T8023] WARNING: The mand mount option has been deprecated and
[  132.701500][ T8023]          and is ignored by this kernel. Remove the mand
[  132.701500][ T8023]          option from the mount to silence this warning.
[  132.701500][ T8023] =======================================================
[  133.021967][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  133.028979][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  137.322018][   T30] audit: type=1800 audit(4294969361.285:7): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1160" name="trace_pipe" dev="tracefs" ino=1299 res=0 errno=0
[  139.874293][   T30] audit: type=1800 audit(4294969363.867:8): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1219" name="dummy_udc" dev="gadgetfs" ino=6428 res=0 errno=0
[  140.089121][   T30] audit: type=1800 audit(4294969364.068:9): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1223" name="members" dev="configfs" ino=13935 res=0 errno=0
[  140.442697][   T55] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5
[  141.489505][   T30] audit: type=1326 audit(4294969365.484:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.1256" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77ad98e969 code=0x0
[  141.735976][   T55] Bluetooth: hci0: Malformed LE Event: 0x0b
[  144.030003][   T30] audit: type=1800 audit(4294969368.036:11): pid=8559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1316" name="trace_pipe" dev="tracefs" ino=1257 res=0 errno=0
[  144.156700][ T8565] futex_wake_op: syz.3.1319 tries to shift op by 64; fix this program
[  147.998346][   T55] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9
[  151.466461][ T1002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.565083][ T1002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.638819][ T1002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.718709][ T1002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.035566][ T1002] bridge_slave_1: left allmulticast mode
[  152.051186][ T1002] bridge_slave_1: left promiscuous mode
[  152.081456][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.151433][ T1002] bridge_slave_0: left allmulticast mode
[  152.170508][ T1002] bridge_slave_0: left promiscuous mode
[  152.176439][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.477888][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.493884][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.503481][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.512483][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.520527][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  152.915440][ T8987] Process accounting resumed
[  153.638947][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.699126][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.714448][ T1002] bond0 (unregistering): Released all slaves
[  154.607270][   T55] Bluetooth: hci3: command tx timeout
[  155.118169][ T1002] hsr_slave_0: left promiscuous mode
[  155.151029][ T1002] hsr_slave_1: left promiscuous mode
[  155.173731][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.201569][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.220951][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.246709][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.306448][ T1002] veth1_macvtap: left promiscuous mode
[  155.325112][ T1002] veth0_macvtap: left promiscuous mode
[  155.331552][ T1002] veth1_vlan: left promiscuous mode
[  155.341506][ T1002] veth0_vlan: left promiscuous mode
[  155.728993][   T30] audit: type=1800 audit(1025.915:12): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1579" name="dbroot" dev="configfs" ino=17083 res=0 errno=0
[  156.583139][ T1002] team0 (unregistering): Port device team_slave_1 removed
[  156.672381][ T1002] team0 (unregistering): Port device team_slave_0 removed
[  156.688748][   T55] Bluetooth: hci3: command tx timeout
[  157.782422][ T8967] chnl_net:caif_netlink_parms(): no params data found
[  158.226570][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.237974][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.275732][ T8967] bridge_slave_0: entered allmulticast mode
[  158.303803][ T8967] bridge_slave_0: entered promiscuous mode
[  158.363512][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.386950][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.408945][ T8967] bridge_slave_1: entered allmulticast mode
[  158.416691][ T8967] bridge_slave_1: entered promiscuous mode
[  158.607100][ T8967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.627962][ T8967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.746338][   T55] Bluetooth: hci3: command tx timeout
[  158.848525][ T8967] team0: Port device team_slave_0 added
[  158.881343][ T8967] team0: Port device team_slave_1 added
[  159.065490][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.072491][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.099389][    C1] vkms_vblank_simulate: vblank timer overrun
[  159.109714][ T8967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.143136][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.173462][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.233032][ T8967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.458230][ T8967] hsr_slave_0: entered promiscuous mode
[  159.488101][ T8967] hsr_slave_1: entered promiscuous mode
[  160.411324][ T8967] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  160.527564][ T8967] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  160.576097][ T8967] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  160.588744][ T9321] can: request_module (can-proto-3) failed.
[  160.598919][ T8967] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  160.816358][   T55] Bluetooth: hci3: command tx timeout
[  160.860890][ T8967] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.908293][ T8967] 8021q: adding VLAN 0 to HW filter on device team0
[  160.929654][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.936968][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.065735][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.072961][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.252296][ T8967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.528764][ T8967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.809469][ T8967] veth0_vlan: entered promiscuous mode
[  161.826753][ T8967] veth1_vlan: entered promiscuous mode
[  161.881556][ T8967] veth0_macvtap: entered promiscuous mode
[  161.897352][ T8967] veth1_macvtap: entered promiscuous mode
[  161.919875][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.935045][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.948795][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.960976][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.971450][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.985665][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.999244][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.017695][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.035192][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.046011][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.059552][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.070277][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.082956][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.095644][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.116846][ T8967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.127201][ T8967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.138195][ T8967] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.147189][ T8967] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.231944][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.244419][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.282852][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.292478][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.590149][ T9619] Process accounting resumed
[  166.889132][ T9636] Unable to find swap-space signature
[  169.331336][ T9780] syz_tun: tun_chr_ioctl cmd 1074025680
[  171.408396][ T9894] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  172.284149][ T9946] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  174.704741][T10078] Setting dangerous option i915.mitigations - tainting kernel
[  175.521202][T10125] kafs: addr_prefs: Too many elements in string
[  175.925623][T10150] block nbd8: NBD_DISCONNECT
[  175.946190][T10147] block2mtd: parameter too long
[  179.800811][   T30] audit: type=1800 audit(1048.019:13): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2098" name="dbroot" dev="configfs" ino=20362 res=0 errno=0
[  179.929645][T10362] delete_channel: no stack
[  181.736936][T10473] program syz.0.2140 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  181.750902][T10473] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  182.826154][T10532] Process accounting paused
[  184.273062][   T30] audit: type=1800 audit(1052.502:14): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2206" name="discovery_nqn" dev="configfs" ino=21269 res=0 errno=0
[  184.407555][T10630] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma?
[  184.624759][T10642] delete_channel: no stack
[  184.643295][T10647] mmap: syz.2.2216 (10647): VmData 39489536 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data.
[  184.918800][T10663] ICMPv6: process `syz.2.2225' is using deprecated sysctl (syscall) net.ipv6.neigh.macsec0.base_reachable_time - use net.ipv6.neigh.macsec0.base_reachable_time_ms instead
[  185.837538][T10716] cougar: G6 mapped to F18
[  187.956710][T10855] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in;
[  187.956710][T10855]    program syz.2.2319 not setting count and/or reply_len properly
[  188.779912][T10906] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string
[  191.727107][T11083] block2mtd: Using custom MTD label '' for dev 
[  191.744690][T11083] block2mtd: error: cannot open device 
[  192.048768][T11105] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706].
[  192.089956][   T30] audit: type=1800 audit(1060.363:15): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2444" name="dbroot" dev="configfs" ino=23610 res=0 errno=0
[  192.116229][T11109] db_root: cannot open: �
[  192.810643][T11152] vivid-007: =================  START STATUS  =================
[  192.838255][T11152] vivid-007: Generate PTS: true
[  192.843452][T11152] vivid-007: Generate SCR: true
[  192.870830][T11152] tpg source WxH: 640x360 (Y'CbCr)
[  192.876136][T11152] tpg field: 1
[  192.900483][T11152] tpg crop: (0,0)/640x360
[  192.908131][T11152] tpg compose: (0,0)/640x360
[  192.918741][T11152] tpg colorspace: 8
[  192.926532][T11152] tpg transfer function: 0/0
[  192.936418][T11152] tpg Y'CbCr encoding: 0/0
[  192.951804][T11152] tpg quantization: 0/0
[  192.961372][T11152] tpg RGB range: 0/2
[  192.972786][T11152] vivid-007: ==================  END STATUS  ==================
[  193.654639][T11193] process 'syz.0.2483' launched '/dev/fd/3' with NULL argv: empty string added
[  194.178204][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.185470][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  196.539107][T11365] Process accounting paused
[  197.039379][T11402] program syz.4.2586 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  197.872199][   T30] audit: type=1800 audit(1066.173:16): pid=11454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2612" name="features" dev="configfs" ino=24207 res=0 errno=0
[  197.892066][    C0] vkms_vblank_simulate: vblank timer overrun
[  198.082353][T11468] blkio.reset_stats is deprecated
[  199.310669][T11551] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  199.348022][T11551] CIFS mount error: No usable UNC path provided in device string!
[  199.348022][T11551] 
[  199.359043][T11551] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  199.741858][   T30] audit: type=1800 audit(1068.053:17): pid=11576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2672" name="features" dev="configfs" ino=24728 res=0 errno=0
[  200.050772][T11596] aoe: invalid device specification 
[  200.720098][   T30] audit: type=1400 audit(1069.038:18): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11635 comm="syz.2.2702"
[  200.925755][T11648] sysfs_service_op_show: Client not running :-5:
[  203.667640][T11805] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations!
[  204.564947][T11850] block2mtd: illegal erase size
[  205.069533][T11882] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5)
[  205.668052][T11919] kafs: addr_prefs: Invalid Command
[  205.790582][T11927] tipc: Can't bind to reserved service type 1
[  206.420809][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  206.427470][ T5144] Bluetooth: hci2: command 0x0406 tx timeout
[  206.433598][ T5144] Bluetooth: hci0: command 0x0406 tx timeout
[  206.989516][T11993] aoe: copy from user failed
[  207.013671][T11993] aoe: could not set interface list: too many interfaces
[  207.371870][T12011] kafs: addr_prefs: Invalid Command
[  207.987189][T12037] ecryptfs_miscdev_write: Invalid packet size [192]
[  208.518467][T12051] syz.0.2905 uses obsolete (PF_INET,SOCK_PACKET)
[  209.183799][T12087] writes to the poll attribute are ignored.
[  209.201270][T12087] please use driver specific parameters instead.
[  211.092452][T12201] ima: policy update failed
[  211.106052][   T30] audit: type=1802 audit(1079.482:19): pid=12201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2978" res=0 errno=0
[  211.211872][ T5840] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  211.390887][   T55] Bluetooth: Frame is too long (len 5, expected len 4)
[  212.728093][T12274] Process accounting resumed
[  214.515946][T12339] : Can't lookup blockdev
[  215.841656][T12403] nvme_fcloop: unknown parameter or missing value '7'
[  217.057429][T12452] Debayer A: =================  START STATUS  =================
[  217.088896][T12452] Debayer A: Debayer Mean Window Size: 3
[  217.102395][T12452] Debayer A: ==================  END STATUS  ==================
[  221.096755][T12672] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  221.274901][T12683] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582)
[  221.442575][T12692] CIFS mount error: No usable UNC path provided in device string!
[  221.442575][T12692] 
[  221.454284][T12692] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  222.192867][T12738] bond0: option lp_interval: invalid value (/sys/devices/platform/vkms/graphics/fb0/rotate)
[  222.265528][T12738] bond0: option lp_interval: allowed values 1 - 2147483647
[  222.449210][   T30] audit: type=1400 audit(1090.891:20): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12747 comm="syz.1.3246"
[  223.810230][T12810] synth uevent: /bus/memstick: unknown uevent action string
[  224.195305][   T55] Bluetooth: hci0: unexpected event 0x3d length: 726 > 14
[  224.482070][T12846] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed.
[  224.498540][   T55] Bluetooth: hci2: Malformed Event: 0x13
[  225.663208][   T55] Bluetooth: hci2: unexpected event for opcode 0x7c89
[  226.429977][   T55] Bluetooth: hci1: unexpected event for opcode 0x7c89
[  226.533266][T12952] Process accounting resumed
[  228.514085][   T55] Bluetooth: hci0: unexpected event for opcode 0x7c89
[  228.976447][T13090] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  229.392917][T13133] cougar: G6 mapped to space
[  230.488666][   T55] Bluetooth: hci2: unexpected event for opcode 0x7c89
[  230.805025][T13207] block2mtd: device name too long
[  231.005733][T13217] synth uevent: /module/l2tp_ip6: unknown uevent action string
[  233.085103][T13333] kAFS: Invalid Command on /proc/fs/afs/cells file
[  233.521407][   T30] audit: type=1400 audit(1102.018:21): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=13359 comm="syz.0.3545"
[  233.661025][T13369] vivid-007: =================  START STATUS  =================
[  233.669156][T13369] vivid-007: Enable Output Cropping: true
[  233.675662][T13369] vivid-007: Enable Output Composing: true
[  233.701030][T13369] vivid-007: Enable Output Scaler: true
[  233.708590][T13369] vivid-007: Tx RGB Quantization Range: Automatic
[  233.715365][T13369] vivid-007: Transmit Mode: HDMI
[  233.722021][T13369] vivid-007: Hotplug Present: 0x00000000
[  233.729223][T13369] vivid-007: RxSense Present: 0x00000000
[  233.737705][T13369] vivid-007: EDID Present: 0x00000000
[  233.743509][T13369] vivid-007: ==================  END STATUS  ==================
[  234.159206][T13393] warning: `syz.0.3560' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  235.589926][T13453] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  236.602834][T13522] ima: Unable to open file: /surit��R�y/integrity?iqa/policy (-2)
[  236.603305][T13520] ima: policy update failed
[  236.626670][   T30] audit: type=1802 audit(1105.135:22): pid=13520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3623" res=0 errno=0
[  237.107881][T13557] kafs: addr_prefs: Invalid Command
[  238.170830][T13610] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.926874][T13622] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  240.483056][T13751] zswap: compressor Ȯ9Q��z%;0*l��H`Bk�j�wj�ӳ<85��'.Y[�`��2�Y$�`�Yv�gִ�q�"b%�z�N[O	EiF�i�
�(Sh��3Kx�>ԝ�RS=��kH�ɟ���{�?B����b��ޝ4)�>��� not available
[  241.978510][T13843] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request
[  249.262770][   T22] process 5827 (syz-executor) no longer affine to cpu1
[  249.263239][   T22] process 14311 (syz-executor) no longer affine to cpu1
[  249.312088][ T5871] smpboot: CPU 1 is now offline
[  250.273787][T14359] zram: Added device: zram1
[  251.316118][T14417] sysfs_service_op_store: Client not running :-5:
[  252.342369][T14470] 
[  253.935674][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  253.944592][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  254.101185][T14567] vivid-003: =================  START STATUS  =================
[  254.150889][T14567] vivid-003: Radio HW Seek Mode: Bounded
[  254.157053][T14567] vivid-003: Radio Programmable HW Seek: false
[  254.211434][T14567] vivid-003: RDS Rx I/O Mode: Block I/O
[  254.240551][T14567] vivid-003: Generate RBDS Instead of RDS: false
[  254.257817][T14567] vivid-003: RDS Reception: true
[  254.285142][T14567] vivid-003: RDS Program Type: 0 inactive
[  254.319169][T14567] vivid-003: RDS PS Name:  inactive
[  254.349742][T14567] vivid-003: RDS Radio Text:  inactive
[  254.379449][T14567] vivid-003: RDS Traffic Announcement: false inactive
[  254.407626][T14567] vivid-003: RDS Traffic Program: false inactive
[  254.435903][T14567] vivid-003: RDS Music: false inactive
[  254.460179][T14567] vivid-003: ==================  END STATUS  ==================
[  255.163734][T14624] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in;
[  255.163734][T14624]    program syz.4.4157 not setting count and/or reply_len properly
[  256.394576][T14684] Process accounting paused
[  256.956710][T14721] ecryptfs_miscdev_write: Error while inspecting packet size
[  258.869049][T14821] deleting an unspecified loop device is not supported.
[  258.905098][T14823] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string
[  258.954631][T14823]  ep_00: uevent: failed to send synthetic uevent: -22
[  259.268350][T14842] i2c i2c-0: delete_device: Extra parameters
[  259.293159][T14845] ubi0: attaching mtd0
[  259.314626][T14845] ubi0 error: ubi_attach_mtd_dev: bad VID header (3969) or data offsets (4033)
[  259.560542][T14857] Setting dangerous option i915.mitigations - tainting kernel
[  259.862432][ T1002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.935455][ T1002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.014272][ T1002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.141889][ T1002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.612551][ T1002] bridge_slave_1: left allmulticast mode
[  260.647985][ T1002] bridge_slave_1: left promiscuous mode
[  260.653734][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.757559][ T1002] bridge_slave_0: left allmulticast mode
[  260.763265][ T1002] bridge_slave_0: left promiscuous mode
[  260.831765][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.104362][T14907] Setting dangerous option i915.mitigations - tainting kernel
[  261.118429][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  261.133331][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  261.141709][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  261.151429][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  261.159989][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  261.864785][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.893445][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.914727][ T1002] bond0 (unregistering): Released all slaves
[  262.532716][ T1002] hsr_slave_0: left promiscuous mode
[  262.567863][ T1002] hsr_slave_1: left promiscuous mode
[  262.587970][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.650119][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.740165][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.806350][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.871056][ T1002] veth1_macvtap: left promiscuous mode
[  262.937231][ T1002] veth0_macvtap: left promiscuous mode
[  262.942846][ T1002] veth1_vlan: left promiscuous mode
[  262.987524][ T1002] veth0_vlan: left promiscuous mode
[  263.243994][ T5840] Bluetooth: hci0: command tx timeout
[  263.388654][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  263.405052][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  263.413069][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  263.420791][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  263.430148][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  264.021473][ T1002] team0 (unregistering): Port device team_slave_1 removed
[  264.101435][ T1002] team0 (unregistering): Port device team_slave_0 removed
[  265.312916][ T5840] Bluetooth: hci0: command tx timeout
[  265.471546][ T5840] Bluetooth: hci1: command tx timeout
[  265.525541][ T1002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.588645][T14908] chnl_net:caif_netlink_parms(): no params data found
[  265.775704][ T1002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.807396][T15010] hub 8-0:1.0: Interface 0 is not authorized for usage
[  265.844760][T15010] usbtest 8-0:1.0: Interface 0 is not authorized for usage
[  266.078562][ T1002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.309761][ T1002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.443262][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  266.454866][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  266.463622][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  266.472782][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  266.480935][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  266.523295][T14908] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.557339][T14908] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.568673][T14908] bridge_slave_0: entered allmulticast mode
[  266.576260][T14908] bridge_slave_0: entered promiscuous mode
[  266.583833][T14973] chnl_net:caif_netlink_parms(): no params data found
[  266.633028][T14908] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.667145][T14908] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.680982][T14908] bridge_slave_1: entered allmulticast mode
[  266.696703][T14908] bridge_slave_1: entered promiscuous mode
[  266.868329][T14908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.918673][T14908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.126225][T14908] team0: Port device team_slave_0 added
[  267.175150][T14908] team0: Port device team_slave_1 added
[  267.188738][T14973] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.217187][T14973] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.244611][T14973] bridge_slave_0: entered allmulticast mode
[  267.276605][T14973] bridge_slave_0: entered promiscuous mode
[  267.362586][T14973] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.384258][   T55] Bluetooth: hci0: command tx timeout
[  267.401631][T14973] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.432498][T14973] bridge_slave_1: entered allmulticast mode
[  267.461657][T14973] bridge_slave_1: entered promiscuous mode
[  267.542337][   T55] Bluetooth: hci1: command tx timeout
[  267.585597][T14908] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.606143][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.664174][T14908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.705353][T14908] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.721409][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.786060][T14908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.925233][T14973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.966285][T14973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.110682][T14908] hsr_slave_0: entered promiscuous mode
[  268.130014][T14908] hsr_slave_1: entered promiscuous mode
[  268.149478][T14908] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  268.163225][T14908] Cannot create hsr debugfs directory
[  268.224172][T14973] team0: Port device team_slave_0 added
[  268.262963][T14973] team0: Port device team_slave_1 added
[  268.411779][ T1002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.494804][   T55] Bluetooth: hci3: command tx timeout
[  268.684956][ T1002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.785698][T14973] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.792667][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.904114][T14973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.960160][T14973] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.995992][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.996015][T14973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.083073][ T1002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.174566][T15030] chnl_net:caif_netlink_parms(): no params data found
[  269.228179][T14973] hsr_slave_0: entered promiscuous mode
[  269.240615][T14973] hsr_slave_1: entered promiscuous mode
[  269.259220][T14973] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.283326][T14973] Cannot create hsr debugfs directory
[  269.450543][   T55] Bluetooth: hci0: command tx timeout
[  269.609096][   T55] Bluetooth: hci1: command tx timeout
[  269.657726][ T1002] bridge_slave_1: left allmulticast mode
[  269.678839][ T1002] bridge_slave_1: left promiscuous mode
[  269.684557][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.749143][ T1002] bridge_slave_0: left allmulticast mode
[  269.754892][ T1002] bridge_slave_0: left promiscuous mode
[  269.788242][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.823936][ T1002] bridge_slave_1: left allmulticast mode
[  269.851456][ T1002] bridge_slave_1: left promiscuous mode
[  269.857295][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.914810][ T1002] bridge_slave_0: left allmulticast mode
[  269.950206][ T1002] bridge_slave_0: left promiscuous mode
[  269.955950][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.564290][   T55] Bluetooth: hci3: command tx timeout
[  271.443657][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.467719][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.491251][ T1002] bond0 (unregistering): Released all slaves
[  271.680432][   T55] Bluetooth: hci1: command tx timeout
[  271.727617][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.751489][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.780621][ T1002] bond0 (unregistering): Released all slaves
[  272.022550][T15030] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.052230][T15030] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.077550][T15030] bridge_slave_0: entered allmulticast mode
[  272.084495][T15030] bridge_slave_0: entered promiscuous mode
[  272.102977][T15030] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.123258][T15030] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.146148][T15030] bridge_slave_1: entered allmulticast mode
[  272.153346][T15030] bridge_slave_1: entered promiscuous mode
[  272.478291][T14908] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  272.512571][T14908] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  272.551476][T15030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.599468][T15030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.634089][   T55] Bluetooth: hci3: command tx timeout
[  272.741518][T14908] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  272.911126][T14908] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  272.975558][T15030] team0: Port device team_slave_0 added
[  273.014451][T15030] team0: Port device team_slave_1 added
[  273.178324][ T1002] hsr_slave_0: left promiscuous mode
[  273.197481][ T1002] hsr_slave_1: left promiscuous mode
[  273.208310][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.233660][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.247583][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.269625][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  273.294086][ T1002] hsr_slave_0: left promiscuous mode
[  273.308709][ T1002] hsr_slave_1: left promiscuous mode
[  273.323464][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.343302][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.362855][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.377755][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  273.394185][T15225] ubi0: attaching mtd0
[  273.412438][T15225] ubi0: scanning is finished
[  273.417080][T15225] ubi0: empty MTD device detected
[  273.438168][ T1002] veth1_macvtap: left promiscuous mode
[  273.443921][T15225] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  273.458258][ T1002] veth0_macvtap: left promiscuous mode
[  273.464207][ T1002] veth1_vlan: left promiscuous mode
[  273.471891][ T1002] veth0_vlan: left promiscuous mode
[  273.477872][ T1002] veth1_macvtap: left promiscuous mode
[  273.491872][ T1002] veth0_macvtap: left promiscuous mode
[  273.502824][ T1002] veth1_vlan: left promiscuous mode
[  273.516603][ T1002] veth0_vlan: left promiscuous mode
[  273.563836][T15225] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  274.457820][ T1002] team0 (unregistering): Port device team_slave_1 removed
[  274.557090][ T1002] team0 (unregistering): Port device team_slave_0 removed
[  274.709743][   T55] Bluetooth: hci3: command tx timeout
[  275.955813][ T1002] team0 (unregistering): Port device team_slave_1 removed
[  276.048959][ T1002] team0 (unregistering): Port device team_slave_0 removed
[  276.493022][T15296] i2c i2c-0: new_device: Missing parameters
[  276.974666][T15030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  277.001793][T15030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.061362][T15030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.097331][T14973] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  277.142302][T15030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.174276][T15030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.248791][T15030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.278452][T14973] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  277.305455][T14973] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  277.347649][T14973] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  277.531464][T15030] hsr_slave_0: entered promiscuous mode
[  277.561735][T15030] hsr_slave_1: entered promiscuous mode
[  277.771302][T14908] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.922817][T14973] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.048513][T14973] 8021q: adding VLAN 0 to HW filter on device team0
[  278.132488][T14908] 8021q: adding VLAN 0 to HW filter on device team0
[  278.201813][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.208992][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.273124][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.280401][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.417983][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.428582][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.540973][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.548379][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.802970][T14908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  278.907468][T15030] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  278.982173][T15030] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  279.040849][T15030] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  279.106391][T15030] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  279.206812][T14973] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.463576][T14908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.592877][T15030] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.692715][T15030] 8021q: adding VLAN 0 to HW filter on device team0
[  279.773431][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.780615][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.835067][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.842227][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.184198][T15403] Setting dangerous option i915.mitigations - tainting kernel
[  280.226574][T15403] Bad "i915.mitigations=!h��@�S�", 'h��@�S�' is unknown
[  280.318567][T14973] veth0_vlan: entered promiscuous mode
[  280.350015][T14908] veth0_vlan: entered promiscuous mode
[  280.389625][T14973] veth1_vlan: entered promiscuous mode
[  280.431272][T14908] veth1_vlan: entered promiscuous mode
[  280.577085][T14908] veth0_macvtap: entered promiscuous mode
[  280.627603][T15030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.656293][T14908] veth1_macvtap: entered promiscuous mode
[  280.759358][T14973] veth0_macvtap: entered promiscuous mode
[  280.815798][T14973] veth1_macvtap: entered promiscuous mode
[  280.849310][T14908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.884856][T14908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.932329][T14908] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.979372][T14973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.040976][T14973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.081290][T14973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  281.125946][T14973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.169811][T14973] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.187318][T14908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.252462][T14908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.281330][T14908] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.322533][T14973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.375174][T14973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.438680][T14973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.481327][T14973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.521911][T14973] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.573872][T14908] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.606641][T14908] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.615361][T14908] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.646621][T14908] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.694255][T14973] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.713097][T14973] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.733951][T14973] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.757517][T14973] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.957711][T15030] veth0_vlan: entered promiscuous mode
[  282.030128][T15030] veth1_vlan: entered promiscuous mode
[  282.097096][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.128149][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.223157][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.261141][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.316451][T15030] veth0_macvtap: entered promiscuous mode
[  282.349448][T15030] veth1_macvtap: entered promiscuous mode
[  282.440993][T15030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.483588][T15030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.522120][T15030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.557548][T15030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.606778][T15030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.642320][T15030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.667182][T15030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.706756][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.726821][T15476] syz_tun: tun_chr_ioctl cmd 35108
[  282.741845][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.766709][T15030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.816170][T15030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.856151][T15030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.877655][T15030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.897307][T15030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.916358][T15030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.938408][T15030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.003408][T15030] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.044266][T15030] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.068569][T15030] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.090114][T15030] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.124403][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.180784][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.414448][ T4570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.498872][ T4570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.545556][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.603663][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.421992][T15569] kAFS: Invalid Command on /proc/fs/afs/cells file
[  286.097459][   T30] audit: type=1806 audit(1154.832:23): xattr=2EC7871B res=-22
[  288.648200][T15693] Invalid ELF header magic: != ELF
[  290.641925][T15773] Scaler: =================  START STATUS  =================
[  290.649343][T15773] Scaler: ==================  END STATUS  ==================
[  292.390493][T15842] i2c i2c-0: new_device: Can't parse I2C address
[  292.595783][T15850] program syz.5.4624 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  296.326763][T15994] ima: policy update failed
[  296.371080][   T30] audit: type=1802 audit(1165.185:24): pid=15994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.4683" res=0 errno=0
[  296.610312][T16007] block2mtd: illegal erase size
[  303.469718][T16296] block2mtd: illegal erase size
[  304.169032][T16323] bcache: register_bcache() error : failed to open device
[  304.901910][T16309] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  305.786828][T16381] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT
[  307.790783][T16458] ecryptfs_parse_packet_length: Error parsing packet length
[  307.851786][T16458] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22]
[  310.653314][   T55] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260
[  310.653339][   T55] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260
[  310.669584][   T55] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  310.669636][   T55] Bluetooth: hci2: Malformed LE Event: 0x0d
[  311.206836][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  311.218697][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  313.579070][T16685] kAFS: No cell specified
[  316.441625][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  316.451574][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  316.533521][T16792] syz_tun: tun_chr_ioctl cmd 2147767519
[  316.704678][T16802] cifs: Unknown parameter '#�ʑ���C�	ˀH�/R{�<'
[  319.998041][T16931] Process accounting resumed
[  320.472352][T16950] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead.
[  324.344543][T17117] dyndbg: bad flag-op �, at start of �
[  324.350210][T17117] dyndbg: flags parse failed
[  324.416327][T17117] dyndbg: bad flag-op �, at start of �
[  324.421947][T17117] dyndbg: flags parse failed
[  325.940149][   T30] audit: type=1800 audit(1194.919:25): pid=17189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5147" name="lu_gp_id" dev="configfs" ino=44409 res=0 errno=0
[  326.137470][   T30] audit: type=1806 audit(1194.949:26): xattr="" res=-22
[  327.273578][T17247] Invalid input. Must be >= 4608
[  328.837680][   T30] audit: type=1800 audit(1197.814:27): pid=17311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5195" name="discovery_nqn" dev="configfs" ino=44737 res=0 errno=0
[  329.790253][   T30] audit: type=1807 audit(1198.789:28): UNKNOWN=0"�]$|�1j�0B|d���ӉO��+��/��x����WӦ��^��gq%Ḧr�O� res=0
[  329.820697][T17352] ima: policy update failed
[  329.879920][   T30] audit: type=1802 audit(1198.789:29): pid=17354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.5212" res=0 errno=0
[  330.039558][   T30] audit: type=1802 audit(1198.849:30): pid=17352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.5212" res=0 errno=0
[  332.014698][T17438] kAFS: unparsable volume name
[  335.529279][T17584] QAT: failed to copy from user.
[  336.281587][T17617] program syz.6.5312 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.636907][   T55] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[  338.636931][   T55] Bluetooth: hci0: unexpected subevent 0x05 length: 725 > 12
[  338.811378][T17715] : Can't lookup blockdev
[  339.541435][T17749] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd
[  340.680316][   T55] Bluetooth: hci0: command tx timeout
[  340.782552][T17801] usbip-vudc usbip-vudc.0: gadget not bound
[  341.497947][T17832] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  343.215042][T17908] ceph: Failed to parse sending metrics switch value 'P^'
[  344.423293][   T10] Process accounting resumed
[  346.583419][T18051] afs: Bad value for 'source'
[  350.364094][T18216] syz.6.5545 (18216): drop_caches: 0
[  350.407426][T18220] nfsd: Unknown parameter '^B�-'
[  350.836642][   T30] audit: type=1806 audit(1219.938:31):  res=-14
[  351.763334][T18275] bcache: register_bcache() error : Not a bcache superblock (bad offset)
[  354.036060][T18363] usbcore.quirks: string doesn't fit in 127 chars.
[  354.127761][T18369] bond0: no command found in slaves file - use +ifname or -ifname
[  354.527491][T18386] WARNING! power/level is deprecated; use power/control instead
[  358.779692][T18554] scsi_strcpy_devinfo: vendor string '��/&c��~n]	�|
[  358.779692][T18554] M�' is too long
[  358.871839][T18554] scsi_strcpy_devinfo: model string '�Dd5��K�2b�
[  358.871839][T18554] ���W����� ��' is too long
[  359.405282][T18576] bond0: Unable to set down delay as MII monitoring is disabled
[  366.128216][T18839] scsi_dev_info_list_add_str: bad dev info string ')���zD���5fk+*X��#�R8��4*�
�Vs�n�dv���qQW�}���~YrȀ-8VGDƘ���L�B�%v�†�v�}�Ypq|��?�O��[��,!��7xWDr���%�[�}�E�$3?�G����9��Ff=��l�r�GH;2L<��=��|�����8�-c��F�ո��"����[v�9�q��4��Mm�vq���k��[����(i���NDС�M��XPS��q��qX4�X`V��!;r�֍���)y]�W��zfI�H0���,�������v�{q8���שU�ܹ䑉m؛�H��T��w�C��z�-��nR%�2]��x0��5o�����Օ|3>�l�S*L���/�Cdgӑ��[C=Cw�e��m)����l#�' '��'�S���.�sHgi-��TY%ܹF��*8��nFT�H����?����i{' ''
[  366.175580][    C0] vkms_vblank_simulate: vblank timer overrun
[  366.714343][T18858] Format for deleting device is "id" (uint).
[  369.768244][T18965] ubi0: attaching mtd0
[  369.788928][T18965] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127)
[  371.231967][T19016] ICMPv6: process `syz.5.5848' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead
[  377.533106][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  377.542081][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  379.349189][   T55] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260
[  379.349213][   T55] Bluetooth: hci2: unexpected subevent 0x03 length: 727 > 9
[  381.562847][T19427] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36
[  382.909942][T19474] block nbd14: the capability attribute has been deprecated.
[  383.123450][   T30] audit: type=1800 audit(1252.386:32): pid=19485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6072" name="dbroot" dev="configfs" ino=50651 res=0 errno=0
[  383.150068][T19485] db_root: not a directory: /dev/audio1
[  383.518330][T19501] ICMPv6: process `syz.6.6080' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead
[  383.906124][T19516] block2mtd: device name too long
[  384.231405][T19530] queue_state_write: operation too long
[  384.259339][T19530] queue_state_write: use 'run', 'start' or 'kick'
[  384.560415][T19539] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  384.613954][T19539] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  384.670945][T19539] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  384.693250][ T5840] Bluetooth: hci0: command 0x0406 tx timeout
[  384.733730][T19539] page_type: f5(slab)
[  384.755089][T19539] raw: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000
[  384.791544][T19539] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  384.840272][T19539] head: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000
[  384.904548][T19539] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  384.968728][T19539] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  385.010129][T19539] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  385.068618][T19539] page dumped because: unmovable page
[  385.110400][T19539] page_owner tracks the page as allocated
[  385.137060][T19539] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 81, tgid 81 (kworker/u8:4), ts 380852933462, free_ts 380847722763
[  385.248429][T19539]  post_alloc_hook+0x181/0x1b0
[  385.289911][T19539]  get_page_from_freelist+0x135c/0x3920
[  385.313567][T19539]  __alloc_frozen_pages_noprof+0x263/0x23a0
[  385.360980][T19539]  alloc_pages_mpol+0x1fb/0x550
[  385.365880][T19539]  new_slab+0x244/0x340
[  385.469542][T19574] rtc_cmos 00:00: Alarms can be up to one day in the future
[  385.486437][T19539]  ___slab_alloc+0xd9c/0x1940
[  385.499954][T19539]  __slab_alloc.constprop.0+0x56/0xb0
[  385.505421][T19539]  __kmalloc_node_track_caller_noprof+0x2ee/0x510
[  385.592197][T19539]  kmalloc_reserve+0xef/0x2c0
[  385.609014][T19539]  __alloc_skb+0x166/0x380
[  385.613483][T19539]  nsim_dev_trap_report_work+0x2b1/0xcf0
[  385.666732][T19539]  process_one_work+0x9cc/0x1b70
[  385.695654][T19539]  worker_thread+0x6c8/0xf10
[  385.700320][T19539]  kthread+0x3c2/0x780
[  385.767069][T19539]  ret_from_fork+0x45/0x80
[  385.771549][T19539]  ret_from_fork_asm+0x1a/0x30
[  385.815223][T19539] page last free pid 5204 tgid 5204 stack trace:
[  385.855117][T19539]  __free_frozen_pages+0x69d/0xff0
[  385.877498][T19539]  __put_partials+0x16d/0x1c0
[  385.916019][T19539]  qlist_free_all+0x4e/0x120
[  385.920657][T19539]  kasan_quarantine_reduce+0x195/0x1e0
[  385.995887][T19539]  __kasan_slab_alloc+0x69/0x90
[  386.000839][T19539]  __kmalloc_noprof+0x1d4/0x510
[  386.026316][T19593] rnbd_client L202: map_device: Unknown parameter or missing value '('
[  386.047383][T19539]  tomoyo_realpath_from_path+0xc2/0x6e0
[  386.068640][T19539]  tomoyo_path_perm+0x274/0x460
[  386.120085][T19539]  security_inode_getattr+0x116/0x290
[  386.155403][T19539]  vfs_fstat+0x4b/0xd0
[  386.159520][T19539]  vfs_fstatat+0xbc/0xf0
[  386.197835][T19539]  __do_sys_newfstatat+0xa1/0x130
[  386.228921][T19539]  do_syscall_64+0xcd/0x230
[  386.246076][T19539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.787706][ T5144] Bluetooth: hci1: command 0x0406 tx timeout
[  389.795562][ T5831] Bluetooth: hci3: command 0x0406 tx timeout
[  390.743793][T19780] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes
[  392.988729][T19880] : Can't lookup blockdev
[  393.534624][T19897] Ignoring unsupported numa_zonelist_order value:  
[  393.534624][T19897] 
[  394.103988][T19919] ptrace attach of "./syz-executor exec"[14908] was attempted by ""[19919]
[  394.123297][T19920] kAFS: Invalid Command on /proc/fs/afs/cells file
[  395.204372][T19964] futex_wake_op: syz.5.6306 tries to shift op by 64; fix this program
[  395.924649][T19995] rnbd_client L213: map_device: Parameters missing
[  397.643263][T20067] udc dummy_udc.0: soft-connect without a gadget driver
[  398.169308][ T5840] Bluetooth: hci2: Unable to find connection for big 0xd2
[  400.466471][T20147] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  400.511878][T20147] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  400.636501][T20147] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  400.674329][T20147] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  400.755114][T20147] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  400.806845][T20147] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  400.904314][T20147] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  400.928261][T20147] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  402.043859][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  402.682808][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  402.757945][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  402.916871][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  404.110293][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  404.172087][T20305] bond0: no command found in slaves file - use +ifname or -ifname
[  404.629745][T20320] usb usb2: usbfs: process 20320 (syz.2.6478) did not claim interface 1 before use
[  404.749238][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  404.825990][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  404.985397][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  410.233406][T20537] delete_channel: no stack
[  412.088380][T20626] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1.  Contact your vendor for updates.
[  413.066977][T20671] block2mtd: error: cannot open device �inX�����±��jFB�B>U�;߸�Ilk�
[  413.214441][T20677] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6653'.
[  414.668027][T20707] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  414.687236][T20707] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  414.710635][T20707] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  414.737270][T20707] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  416.047997][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  416.690940][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  416.765318][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  416.771471][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  417.659049][T20821] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  417.706637][T20821] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  417.744297][T20821] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  417.782151][T20821] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  418.993576][ T5840] Bluetooth: hci2: command 0x0406 tx timeout
[  419.709202][ T5840] Bluetooth: hci0: command 0x0406 tx timeout
[  419.790066][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  419.796107][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  420.167287][T20949] syz.2.6785: vmalloc error: size 141863388262170624, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  420.246748][T20949] CPU: 0 UID: 0 PID: 20949 Comm: syz.2.6785 Tainted: G     U    I         6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) 
[  420.246783][T20949] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[  420.246789][T20949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  420.246800][T20949] Call Trace:
[  420.246805][T20949]  <TASK>
[  420.246814][T20949]  dump_stack_lvl+0x16c/0x1f0
[  420.246835][T20949]  warn_alloc+0x248/0x3a0
[  420.246852][T20949]  ? __pfx_warn_alloc+0x10/0x10
[  420.246870][T20949]  ? check_path.constprop.0+0x24/0x50
[  420.246894][T20949]  __vmalloc_node_range_noprof+0x10ea/0x1540
[  420.246922][T20949]  ? disksize_store+0x117/0x670
[  420.246945][T20949]  ? __pfx___might_resched+0x10/0x10
[  420.246959][T20949]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  420.246982][T20949]  ? down_write+0x14d/0x200
[  420.247000][T20949]  ? __pfx_down_write+0x10/0x10
[  420.247016][T20949]  ? disksize_store+0x117/0x670
[  420.247035][T20949]  vzalloc_noprof+0x6b/0x90
[  420.247055][T20949]  ? disksize_store+0x117/0x670
[  420.247071][T20949]  disksize_store+0x117/0x670
[  420.247095][T20949]  ? __pfx_disksize_store+0x10/0x10
[  420.247112][T20949]  dev_attr_store+0x55/0x80
[  420.247135][T20949]  ? __pfx_dev_attr_store+0x10/0x10
[  420.247151][T20949]  sysfs_kf_write+0xef/0x150
[  420.247180][T20949]  kernfs_fop_write_iter+0x351/0x510
[  420.247197][T20949]  ? __pfx_sysfs_kf_write+0x10/0x10
[  420.247217][T20949]  vfs_write+0x5ba/0x1180
[  420.247231][T20949]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  420.247249][T20949]  ? __pfx___mutex_lock+0x10/0x10
[  420.247266][T20949]  ? __pfx_vfs_write+0x10/0x10
[  420.247292][T20949]  ksys_write+0x12a/0x240
[  420.247304][T20949]  ? __pfx_ksys_write+0x10/0x10
[  420.247315][T20949]  ? rcu_is_watching+0x12/0xc0
[  420.247332][T20949]  do_syscall_64+0xcd/0x230
[  420.247350][T20949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.247363][T20949] RIP: 0033:0x7f61f318e969
[  420.247375][T20949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  420.247387][T20949] RSP: 002b:00007f61f3f59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  420.247401][T20949] RAX: ffffffffffffffda RBX: 00007f61f33b5fa0 RCX: 00007f61f318e969
[  420.247409][T20949] RDX: 0000000000000002 RSI: 0000200000000ec0 RDI: 0000000000000003
[  420.247417][T20949] RBP: 00007f61f3210ab1 R08: 0000000000000000 R09: 0000000000000000
[  420.247424][T20949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  420.247432][T20949] R13: 0000000000000000 R14: 00007f61f33b5fa0 R15: 00007fffc9509b48
[  420.247451][T20949]  </TASK>
[  420.248797][T20949] Mem-Info:
[  420.992676][T20968] syz.5.6794 (20968): attempted to duplicate a private mapping with mremap.  This is not supported.
[  421.630237][T20949] active_anon:6244 inactive_anon:0 isolated_anon:0
[  421.630237][T20949]  active_file:13844 inactive_file:40582 isolated_file:0
[  421.630237][T20949]  unevictable:768 dirty:196 writeback:0
[  421.630237][T20949]  slab_reclaimable:10612 slab_unreclaimable:97410
[  421.630237][T20949]  mapped:23617 shmem:1445 pagetables:1103
[  421.630237][T20949]  sec_pagetables:0 bounce:0
[  421.630237][T20949]  kernel_misc_reclaimable:0
[  421.630237][T20949]  free:1340659 free_pcp:1819 free_cma:0
[  421.675691][    C0] vkms_vblank_simulate: vblank timer overrun
[  422.063661][T20949] Node 0 active_anon:25288kB inactive_anon:0kB active_file:57248kB inactive_file:162264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96336kB dirty:784kB writeback:0kB shmem:4296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  422.096945][    C0] vkms_vblank_simulate: vblank timer overrun
[  422.240313][T20949] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  422.272014][    C0] vkms_vblank_simulate: vblank timer overrun
[  422.465811][T20949] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  422.493626][    C0] vkms_vblank_simulate: vblank timer overrun
[  422.527228][T21020] <
[  422.626951][T20949] lowmem_reserve[]: 0 2484 2486 2486 2486
[  422.663041][T20949] Node 0 DMA32 free:1434928kB boost:0kB min:34356kB low:42944kB high:51532kB reserved_highatomic:0KB active_anon:25124kB inactive_anon:0kB active_file:59440kB inactive_file:160440kB unevictable:1536kB writepending:836kB present:3129332kB managed:2544212kB mlocked:0kB bounce:0kB free_pcp:1168kB local_pcp:1168kB free_cma:0kB
[  422.694259][    C0] vkms_vblank_simulate: vblank timer overrun
[  422.879124][T20949] lowmem_reserve[]: 0 0 1 1 1
[  422.926056][T20949] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  423.117070][T20949] lowmem_reserve[]: 0 0 0 0 0
[  423.133565][T20949] Node 1 Normal free:3907364kB boost:0kB min:55520kB low:69400kB high:83280kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6092kB local_pcp:6092kB free_cma:0kB
[  423.299513][T20949] lowmem_reserve[]: 0 0 0 0 0
[  423.337678][T20949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  423.429470][T20949] Node 0 DMA32: 644*4kB (UM) 894*8kB (UME) 902*16kB (UME) 460*32kB (UME) 169*64kB (UME) 137*128kB (UM) 171*256kB (UME) 150*512kB (UM) 81*1024kB (UM) 8*2048kB (UME) 281*4096kB (UM) = 1438112kB
[  423.514550][T20949] Node 0 Normal: 2*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  423.588733][T20949] Node 1 Normal: 1*4kB (E) 6*8kB (UE) 7*16kB (UE) 170*32kB (UE) 91*64kB (UME) 27*128kB (UE) 9*256kB (UE) 10*512kB (UE) 4*1024kB (UM) 3*2048kB (UME) 946*4096kB (UM) = 3907364kB
[  423.669533][T20949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  423.717622][T20949] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  423.775675][T20949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  423.823488][T20949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  423.876756][T20949] 57405 total pagecache pages
[  423.902441][T20949] 0 pages in swap cache
[  423.923651][T20949] Free swap  = 124996kB
[  423.945598][T20949] Total swap = 124996kB
[  423.966333][T20949] 2097051 pages RAM
[  423.998216][T20949] 0 pages HighMem/MovableOnly
[  424.022712][T20949] 428892 pages reserved
[  424.042678][T20949] 0 pages cma reserved
[  425.470451][T21129] [U] ���y
[  425.490171][T21129] [U] 9�zG�-a�o�P��]:��]�V�
[  428.260085][T21230] nvme_fabrics: missing parameter 'transport=%s'
[  428.294572][T21230] nvme_fabrics: missing parameter 'nqn=%s'
[  429.451802][T21295] ima: policy update failed
[  429.466532][   T30] audit: type=1802 audit(1298.967:33): pid=21295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.6940" res=0 errno=0
[  430.304798][T21339] aoe: can't write to that file.
[  436.257294][T21633] Line length is too long: Should be less than 4094
[  437.044884][ T5840] Bluetooth: hci0: Malformed Event: 0x02
[  437.967444][T21741] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there
[  437.967444][T21741]  
[  438.328506][T21763] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26)
[  438.414511][T21760] ima: policy update failed
[  438.493321][   T30] audit: type=1802 audit(1308.044:34): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.7112" res=0 errno=0
[  438.660273][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  438.667150][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  440.936687][T21906] overlayfs: "check_copy_up" module option is obsolete
[  441.364442][T21930] i2c i2c-0: delete_device: Can't parse I2C address
[  441.991201][ T5840] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260
[  446.174500][T22213] Unable to find swap-space signature
[  446.278252][T22216] kAFS: Invalid Command on /proc/fs/afs/cells file
[  447.560625][T22293] program syz.6.7309 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  447.611482][T22293] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  447.917101][T22315] misc userio: Invalid payload size
[  448.103097][T22323] syz_tun: tun_chr_ioctl cmd 2147767511
[  448.706527][T22357] delete_channel: no stack
[  449.082420][T22379] ima: policy update failed
[  449.087925][   T30] audit: type=1807 audit(4294967298.849:35): UNKNOWN=� res=0
[  449.139069][   T30] audit: type=1802 audit(4294967298.849:36): pid=22380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.7344" res=0 errno=0
[  449.255297][   T30] audit: type=1802 audit(4294967298.889:37): pid=22379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.7344" res=0 errno=0
[  449.621489][ T5840] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11
[  450.122533][T22428] nvme_fcloop: unknown parameter or missing value '^/]'
[  453.569385][T22590] program syz.2.7429 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  456.764539][T22741] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  461.425109][T22976] 
[  462.118001][   T30] audit: type=1800 audit(4294967311.957:38): pid=23020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7599" name="members" dev="configfs" ino=60651 res=0 errno=0
[  464.465433][T23137] usb usb24: check_ctrlrecip: process 23137 (syz.6.7645) requesting ep 01 but needs 81
[  464.521400][T23137] usb usb24: usbfs: process 23137 (syz.6.7645) did not claim interface 0 before use
[  469.515363][T23413] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT
[  470.903393][   T30] audit: type=1800 audit(4294967320.772:39): pid=23493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7786" name="members" dev="configfs" ino=61847 res=0 errno=0
[  470.924002][    C0] vkms_vblank_simulate: vblank timer overrun
[  475.165987][T23730] queue_state_write: unsupported operation ''
[  475.200189][T23730] queue_state_write: use 'run', 'start' or 'kick'
[  478.104369][T23890] ecryptfs_miscdev_write: memdup_user returned error [-14]
[  478.497092][T23913] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  478.605678][T23917] usb usb15: usbfs: process 23917 (syz.7.7952) did not claim interface 0 before use
[  479.182908][T23951] ICMPv6: process `syz.7.7966' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead
[  481.650792][T24090] : Can't lookup blockdev
[  484.615061][T24240] QAT: Invalid ioctl 21531
[  484.922933][T24254] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007
[  485.292986][T24277] openvswitch: netlink: IP tunnel TTL not specified.
[  485.706830][T24294] openvswitch: netlink: Duplicate or invalid key (type 0).
[  486.737456][T24348] netlink: 'syz.2.8121': attribute type 1 has an invalid length.
[  486.746279][T24346] sctp: [Deprecated]: syz.7.8120 (pid 24346) Use of int in maxseg socket option.
[  486.746279][T24346] Use struct sctp_assoc_value instead
[  487.008843][T24357] usb usb18: usbfs: process 24357 (syz.7.8124) did not claim interface 0 before use
[  487.573306][T24385] openvswitch: netlink: IP tunnel TTL not specified.
[  487.702350][T24389] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  488.815758][T24446] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  488.822987][T24446] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  490.965180][T24546] netlink: 206 bytes leftover after parsing attributes in process `syz.6.8193'.
[  491.027829][T24546] Zero length message leads to an empty skb
[  491.220983][T24557] capability: warning: `syz.5.8196' uses 32-bit capabilities (legacy support in use)
[  491.413845][T24567] ubi0: attaching mtd0
[  491.435038][T24567] ubi0: scanning is finished
[  491.476319][T24567] ubi0: empty MTD device detected
[  491.506930][T24567] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  491.708914][T24567] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  492.195161][T24600] 
[  492.823651][T24630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8223'.
[  493.581263][T24669] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8237'.
[  493.625458][T24671] vivid-003: =================  START STATUS  =================
[  493.644095][T24671] vivid-003: Radio HW Seek Mode: Bounded
[  493.660473][T24671] vivid-003: Radio Programmable HW Seek: false
[  493.677488][T24671] vivid-003: RDS Rx I/O Mode: Block I/O
[  493.691664][T24671] vivid-003: Generate RBDS Instead of RDS: false
[  493.711140][T24671] vivid-003: RDS Reception: true
[  493.727917][T24671] vivid-003: RDS Program Type: 0 inactive
[  493.744899][T24671] vivid-003: RDS PS Name:  inactive
[  493.756042][T24671] vivid-003: RDS Radio Text:  inactive
[  493.765530][T24671] vivid-003: RDS Traffic Announcement: false inactive
[  493.781972][T24671] vivid-003: RDS Traffic Program: false inactive
[  493.796520][T24671] vivid-003: RDS Music: false inactive
[  493.811379][T24671] vivid-003: ==================  END STATUS  ==================
[  495.749547][   T30] audit: type=1800 audit(4294967345.752:40): pid=24763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8270" name="features" dev="configfs" ino=65080 res=0 errno=0
[  496.668828][T24806] delete_channel: no stack
[  497.054987][T24825] openvswitch: netlink: Missing valid actions attribute.
[  497.519006][T24844] netlink: 'syz.2.8298': attribute type 1 has an invalid length.
[  498.088064][T24870] netlink: zone id is out of range
[  498.115851][T24870] netlink: zone id is out of range
[  498.145606][T24870] netlink: zone id is out of range
[  498.317626][T24881] openvswitch: netlink: VXLAN extension 64 out of range max 1
[  498.599588][T24897] netlink: 'syz.6.8319': attribute type 1 has an invalid length.
[  498.658137][T24897] netlink: 33 bytes leftover after parsing attributes in process `syz.6.8319'.
[  498.681386][T24902] netlink: 'syz.7.8320': attribute type 22 has an invalid length.
[  498.809825][T24905] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8
[  499.069476][T24918] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  499.783351][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  499.789921][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  499.890199][T24957] netlink: get zone limit has 8 unknown bytes
[  500.821668][T24994] openvswitch: netlink: IPv4 tunnel dst address is zero
[  500.982911][T24986] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint).
[  502.963187][T25079] nfsd: Unknown parameter 'DJ'
[  503.787542][T25106] svc: failed to register nfsdv3 RPC service (errno 111).
[  503.844963][T25106] svc: failed to register nfsaclv3 RPC service (errno 111).
[  504.508711][T25153] openvswitch: netlink: Message has 1 unknown bytes.
[  505.905055][T25209] netlink: zone id is out of range
[  505.922540][T25209] netlink: get zone limit has 4 unknown bytes
[  507.331076][T25269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8442'.
[  507.865907][T25294] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43
[  507.906414][T25298] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  508.601118][T25340] netlink: 'syz.6.8463': attribute type 1 has an invalid length.
[  509.710652][T25390] ubi0: attaching mtd0
[  509.715766][T25390] ubi0: scanning is finished
[  509.778348][T25390] ubi0: empty MTD device detected
[  509.943659][T25390] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  509.981582][T25390] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  510.022328][T25390] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  510.051155][T25390] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  510.075144][T25390] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  510.105761][T25390] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  510.138129][T25390] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2946005195
[  510.170146][T25390] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  510.211485][T25400] ubi0: background thread "ubi_bgt0d" started, PID 25400
[  510.224310][T25398] ubi: mtd0 is already attached to ubi0
[  511.454471][T25458] program syz.7.8502 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  512.733395][T25526] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  512.949317][T25539] openvswitch: netlink: Message has 4 unknown bytes.
[  514.394102][T25607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8557'.
[  515.196759][T25639] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44
[  515.547348][T25648] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45
[  518.017422][T25773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8603'.
[  518.060715][T25778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8605'.
[  518.983739][T25826] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  560.901538][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  560.909997][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  622.022361][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  622.028758][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  666.584703][   T31] INFO: task kworker/u8:4:81 blocked for more than 143 seconds.
[  666.592377][   T31]       Tainted: G     U    I         6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0
[  666.607917][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  666.618183][   T31] task:kworker/u8:4    state:D stack:22632 pid:81    tgid:81    ppid:2      task_flags:0x4248160 flags:0x00004000
[  666.631947][   T31] Workqueue: writeback wb_workfn (flush-8:0)
[  666.638329][   T31] Call Trace:
[  666.641602][   T31]  <TASK>
[  666.646301][   T31]  __schedule+0x116f/0x5de0
[  666.650808][   T31]  ? blk_mq_flush_plug_list+0x75a/0x1c70
[  666.656733][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  666.661757][   T31]  ? __pfx___schedule+0x10/0x10
[  666.668421][   T31]  ? __blk_flush_plug+0x2f3/0x4b0
[  666.673448][   T31]  ? find_held_lock+0x2b/0x80
[  666.679776][   T31]  ? schedule+0x2d7/0x3a0
[  666.686979][   T31]  schedule+0xe7/0x3a0
[  666.691054][   T31]  io_schedule+0xbf/0x130
[  666.695690][   T31]  bit_wait_io+0x15/0xe0
[  666.700593][   T31]  __wait_on_bit+0x62/0x180
[  666.707842][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  666.712946][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  666.720354][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  666.729165][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  666.734866][   T31]  do_get_write_access+0x93d/0x12a0
[  666.740088][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  666.750785][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  666.757071][   T31]  ext4_mb_mark_context+0x175/0xd40
[  666.762273][   T31]  ? find_held_lock+0x2b/0x80
[  666.768804][   T31]  ? __pfx_ext4_mb_mark_context+0x10/0x10
[  666.774855][   T31]  ext4_mb_mark_diskspace_used+0x466/0x8c0
[  666.782101][   T31]  ? ext4_mb_use_preallocated.constprop.0+0xec/0x1550
[  666.790707][   T31]  ? __pfx_ext4_mb_mark_diskspace_used+0x10/0x10
[  666.798308][   T31]  ? ext4_mb_new_blocks+0x977/0x4f00
[  666.805845][   T31]  ext4_mb_new_blocks+0xa5b/0x4f00
[  666.810971][   T31]  ? __pfx___might_resched+0x10/0x10
[  666.817457][   T31]  ? bh_uptodate_or_lock+0x3c/0x140
[  666.822663][   T31]  ? __read_extent_tree_block+0x2ca/0x640
[  666.834231][   T31]  ? __pfx_ext4_mb_new_blocks+0x10/0x10
[  666.839804][   T31]  ? ext4_ext_search_right+0x2c2/0xb90
[  666.847066][   T31]  ext4_ext_map_blocks+0x1b95/0x5d60
[  666.852366][   T31]  ? stack_trace_save+0x8e/0xc0
[  666.857537][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  666.864658][   T31]  ? __pfx_ext4_ext_map_blocks+0x10/0x10
[  666.870297][   T31]  ? __kasan_slab_alloc+0x89/0x90
[  666.875686][   T31]  ? ext4_do_writepages+0x1432/0x3490
[  666.882510][   T31]  ? __pfx___might_resched+0x10/0x10
[  666.889673][   T31]  ? __pfx_down_write+0x10/0x10
[  666.894717][   T31]  ? ext4_es_lookup_extent+0xc7/0xc50
[  666.900093][   T31]  ext4_map_blocks+0x45b/0x1390
[  666.910558][   T31]  ? __pfx_ext4_map_blocks+0x10/0x10
[  666.916085][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  666.921455][   T31]  ? kmem_cache_alloc_noprof+0x21e/0x3b0
[  666.929743][   T31]  ext4_do_writepages+0x1a2c/0x3490
[  666.937399][   T31]  ? arch_stack_walk+0x85/0x100
[  666.942275][   T31]  ? __pfx_ext4_do_writepages+0x10/0x10
[  666.950347][   T31]  ? ext4_writepages+0x37a/0x7d0
[  666.955492][   T31]  ext4_writepages+0x37a/0x7d0
[  666.960258][   T31]  ? __pfx_ext4_writepages+0x10/0x10
[  666.967344][   T31]  ? do_writepages+0x6b6/0x820
[  666.972112][   T31]  ? __pfx_ext4_writepages+0x10/0x10
[  666.977717][   T31]  do_writepages+0x1b2/0x820
[  666.985432][   T31]  ? __pfx_do_writepages+0x10/0x10
[  666.990553][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  666.995854][   T31]  ? reacquire_held_locks+0xcd/0x1f0
[  667.001139][   T31]  __writeback_single_inode+0x160/0xfb0
[  667.008966][   T31]  ? __pfx___writeback_single_inode+0x10/0x10
[  667.016358][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  667.021596][   T31]  writeback_sb_inodes+0x601/0xf90
[  667.028499][   T31]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  667.035230][   T31]  ? _raw_spin_unlock+0x28/0x50
[  667.040082][   T31]  ? move_expired_inodes+0x5a0/0x850
[  667.048810][   T31]  __writeback_inodes_wb+0xf8/0x2d0
[  667.055393][   T31]  ? __pfx___writeback_inodes_wb+0x10/0x10
[  667.061204][   T31]  ? queue_io+0x3f6/0x520
[  667.067954][   T31]  wb_writeback+0x7f3/0xb70
[  667.072668][   T31]  ? __pfx_wb_writeback+0x10/0x10
[  667.077692][   T31]  ? get_nr_dirty_inodes+0x170/0x1e0
[  667.086105][   T31]  wb_workfn+0x748/0xbe0
[  667.090364][   T31]  ? try_to_wake_up+0x157/0x1680
[  667.095801][   T31]  ? __pfx_wb_workfn+0x10/0x10
[  667.100576][   T31]  ? rcu_is_watching+0x12/0xc0
[  667.107700][   T31]  process_one_work+0x9cc/0x1b70
[  667.112901][   T31]  ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10
[  667.120442][   T31]  ? __pfx_process_one_work+0x10/0x10
[  667.128691][   T31]  ? assign_work+0x1a0/0x250
[  667.133544][   T31]  worker_thread+0x6c8/0xf10
[  667.138143][   T31]  ? __kthread_parkme+0x19e/0x250
[  667.146978][   T31]  ? __pfx_worker_thread+0x10/0x10
[  667.153821][   T31]  kthread+0x3c2/0x780
[  667.158079][   T31]  ? __pfx_kthread+0x10/0x10
[  667.165264][   T31]  ? __pfx_kthread+0x10/0x10
[  667.169885][   T31]  ? __pfx_kthread+0x10/0x10
[  667.174798][   T31]  ? __pfx_kthread+0x10/0x10
[  667.179387][   T31]  ? rcu_is_watching+0x12/0xc0
[  667.187260][   T31]  ? __pfx_kthread+0x10/0x10
[  667.192083][   T31]  ret_from_fork+0x45/0x80
[  667.196503][   T31]  ? __pfx_kthread+0x10/0x10
[  667.201172][   T31]  ret_from_fork_asm+0x1a/0x30
[  667.208404][   T31]  </TASK>
[  667.211850][   T31] INFO: task syz-executor:5816 blocked for more than 143 seconds.
[  667.219663][   T31]       Tainted: G     U    I         6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0
[  667.232853][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  667.242585][   T31] task:syz-executor    state:D stack:23112 pid:5816  tgid:5816  ppid:5814   task_flags:0x440100 flags:0x00000002
[  667.256893][   T31] Call Trace:
[  667.260181][   T31]  <TASK>
[  667.265645][   T31]  __schedule+0x116f/0x5de0
[  667.270167][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  667.276825][   T31]  ? __pfx___schedule+0x10/0x10
[  667.282720][   T31]  ? find_held_lock+0x2b/0x80
[  667.288859][   T31]  ? schedule+0x2d7/0x3a0
[  667.294176][   T31]  schedule+0xe7/0x3a0
[  667.298246][   T31]  io_schedule+0xbf/0x130
[  667.304748][   T31]  bit_wait_io+0x15/0xe0
[  667.308996][   T31]  __wait_on_bit+0x62/0x180
[  667.315146][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  667.320092][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  667.326530][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  667.333674][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  667.339142][   T31]  do_get_write_access+0x93d/0x12a0
[  667.346503][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  667.353427][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  667.359499][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  667.367408][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  667.375330][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  667.382418][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  667.388448][   T31]  ? rcu_is_watching+0x12/0xc0
[  667.395843][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  667.402454][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  667.407659][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  667.414929][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  667.421747][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  667.426712][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  667.433183][   T31]  ext4_dirty_inode+0xd9/0x130
[  667.437951][   T31]  ? rcu_is_watching+0x12/0xc0
[  667.443843][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  667.448893][   T31]  generic_update_time+0xcf/0xf0
[  667.456202][   T31]  file_update_time+0x17d/0x1c0
[  667.462691][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  667.467736][   T31]  ? tcp_recvmsg+0x1f9/0x680
[  667.474100][   T31]  ? __pfx_tcp_recvmsg+0x10/0x10
[  667.479068][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  667.487402][   T31]  ? vm_normal_page+0x13b/0x2b0
[  667.495416][   T31]  ? find_held_lock+0x2b/0x80
[  667.501171][   T31]  ? find_held_lock+0x2b/0x80
[  667.505854][   T31]  do_page_mkwrite+0x171/0x380
[  667.511681][   T31]  do_wp_page+0xb9e/0x58e0
[  667.516694][   T31]  ? __pfx_do_wp_page+0x10/0x10
[  667.522634][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[  667.527666][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  667.534162][   T31]  ? ___pte_offset_map+0x1bc/0x540
[  667.539291][   T31]  __handle_mm_fault+0x1ada/0x2a40
[  667.546314][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  667.552703][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  667.557903][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  667.565508][   T31]  handle_mm_fault+0x3fe/0xad0
[  667.571695][   T31]  do_user_addr_fault+0x60c/0x1370
[  667.576822][   T31]  exc_page_fault+0x5c/0xc0
[  667.582910][   T31]  asm_exc_page_fault+0x26/0x30
[  667.587763][   T31] RIP: 0033:0x7ff9fa677dcf
[  667.596517][   T31] RSP: 002b:00007ffe66f87f50 EFLAGS: 00010246
[  667.604330][   T31] RAX: 00007ff9f8e14000 RBX: 000055556cb7af20 RCX: 0000000000000000
[  667.613282][   T31] RDX: 1ffffffff12a6338 RSI: 000055556cb85338 RDI: 0000000000000001
[  667.623681][   T31] RBP: 00007ffe66f88240 R08: 000055556cb85368 R09: 0000000000000c67
[  667.632693][   T31] R10: 0000000000000001 R11: 00007ffe66f88450 R12: 00007ffe66f882a0
[  667.641769][   T31] R13: 0000000000000004 R14: 00007ffe66f87fc0 R15: 00007ffe66f88090
[  667.650750][   T31]  </TASK>
[  667.653831][   T31] INFO: task syz.7.8668:25941 blocked for more than 144 seconds.
[  667.665927][   T31]       Tainted: G     U    I         6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0
[  667.677658][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  667.687281][   T31] task:syz.7.8668      state:D stack:28344 pid:25941 tgid:25941 ppid:15030  task_flags:0x440040 flags:0x00000004
[  667.704483][   T31] Call Trace:
[  667.707794][   T31]  <TASK>
[  667.711819][   T31]  __schedule+0x116f/0x5de0
[  667.716513][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  667.723787][   T31]  ? __pfx___schedule+0x10/0x10
[  667.728964][   T31]  ? find_held_lock+0x2b/0x80
[  667.733660][   T31]  ? schedule+0x2d7/0x3a0
[  667.738013][   T31]  schedule+0xe7/0x3a0
[  667.744154][   T31]  io_schedule+0xbf/0x130
[  667.748848][   T31]  bit_wait_io+0x15/0xe0
[  667.753123][   T31]  __wait_on_bit+0x62/0x180
[  667.757640][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  667.764738][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  667.770307][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  667.776287][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  667.788938][   T31]  do_get_write_access+0x93d/0x12a0
[  667.794168][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  667.803260][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  667.812022][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  667.817590][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  667.826148][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  667.831729][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  667.837742][   T31]  ? rcu_is_watching+0x12/0xc0
[  667.844337][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  667.850151][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  667.855349][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  667.864486][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  667.870380][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  667.875317][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  667.882816][   T31]  ext4_dirty_inode+0xd9/0x130
[  667.887590][   T31]  ? rcu_is_watching+0x12/0xc0
[  667.893705][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  667.901785][   T31]  generic_update_time+0xcf/0xf0
[  667.906731][   T31]  file_update_time+0x17d/0x1c0
[  667.911943][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  667.916972][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  667.927122][   T31]  do_page_mkwrite+0x171/0x380
[  667.933413][   T31]  do_pte_missing+0x29c/0x3fb0
[  667.939852][   T31]  ? __handle_mm_fault+0x1010/0x2a40
[  667.945152][   T31]  __handle_mm_fault+0x103d/0x2a40
[  667.950579][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  667.956047][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  667.963025][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  667.968483][   T31]  handle_mm_fault+0x3fe/0xad0
[  667.973250][   T31]  do_user_addr_fault+0x60c/0x1370
[  667.978630][   T31]  exc_page_fault+0x5c/0xc0
[  667.983131][   T31]  asm_exc_page_fault+0x26/0x30
[  667.989696][   T31] RIP: 0033:0x7f2ce8c6eada
[  667.994200][   T31] RSP: 002b:00007ffc139b4480 EFLAGS: 00010202
[  668.002885][   T31] RAX: 0000001b2e01b000 RBX: 00007f2ce9ae5720 RCX: 0000001b2e01aff8
[  668.012549][   T31] RDX: 0000001b2da2021c RSI: 0000000000000008 RDI: 00007f2ce9ae5720
[  668.020849][   T31] RBP: ffffffff8b600986 R08: 00007f2ce8fb6038 R09: 00007f2ce8fa2000
[  668.033568][   T31] R10: 00007f2ce83ff008 R11: 0000000000000001 R12: 0000000000000001
[  668.042921][   T31] R13: 0000000000000022 R14: ffffffff8b600bfa R15: 0000000000000022
[  668.052612][   T31]  ? mtree_load+0x37a/0xa40
[  668.057321][   T31]  ? mtree_load+0x106/0xa40
[  668.061828][   T31]  </TASK>
[  668.064871][   T31] INFO: task syz.2.8669:25943 blocked for more than 144 seconds.
[  668.074490][   T31]       Tainted: G     U    I         6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0
[  668.083887][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  668.094203][   T31] task:syz.2.8669      state:D stack:28632 pid:25943 tgid:25943 ppid:5827   task_flags:0x440040 flags:0x00000004
[  668.111067][   T31] Call Trace:
[  668.114361][   T31]  <TASK>
[  668.117626][   T31]  __schedule+0x116f/0x5de0
[  668.122134][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  668.129545][   T31]  ? __pfx___schedule+0x10/0x10
[  668.134426][   T31]  ? find_held_lock+0x2b/0x80
[  668.141921][   T31]  ? schedule+0x2d7/0x3a0
[  668.149140][   T31]  schedule+0xe7/0x3a0
[  668.153223][   T31]  io_schedule+0xbf/0x130
[  668.157954][   T31]  bit_wait_io+0x15/0xe0
[  668.162285][   T31]  __wait_on_bit+0x62/0x180
[  668.168592][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  668.173531][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  668.180345][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  668.188084][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  668.193563][   T31]  do_get_write_access+0x93d/0x12a0
[  668.199106][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  668.208259][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  668.214371][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  668.221444][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  668.229220][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  668.234638][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  668.240970][   T31]  ? rcu_is_watching+0x12/0xc0
[  668.249951][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  668.255611][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  668.262899][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  668.270431][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  668.276290][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  668.281226][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  668.288351][   T31]  ext4_dirty_inode+0xd9/0x130
[  668.293119][   T31]  ? rcu_is_watching+0x12/0xc0
[  668.298328][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  668.303355][   T31]  generic_update_time+0xcf/0xf0
[  668.311433][   T31]  file_update_time+0x17d/0x1c0
[  668.316508][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  668.321537][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  668.330330][   T31]  ? __pfx_filemap_map_pages+0x10/0x10
[  668.336359][   T31]  ? pte_alloc_one+0x2b1/0x380
[  668.341151][   T31]  do_page_mkwrite+0x171/0x380
[  668.347835][   T31]  do_pte_missing+0x29c/0x3fb0
[  668.352615][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  668.361109][   T31]  ? __pmd_alloc+0x3c2/0x870
[  668.368107][   T31]  __handle_mm_fault+0x103d/0x2a40
[  668.373230][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  668.379001][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  668.384202][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  668.391276][   T31]  handle_mm_fault+0x3fe/0xad0
[  668.396428][   T31]  do_user_addr_fault+0x60c/0x1370
[  668.401560][   T31]  exc_page_fault+0x5c/0xc0
[  668.409297][   T31]  asm_exc_page_fault+0x26/0x30
[  668.414164][   T31] RIP: 0033:0x7f61f306547b
[  668.418938][   T31] RSP: 002b:00007fffc9509cb0 EFLAGS: 00010246
[  668.426737][   T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000
[  668.436534][   T31] RDX: 0000001b2fb20000 RSI: 0000000000600000 RDI: 00007f61f3298d50
[  668.444536][   T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000
[  668.454409][   T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  668.462788][   T31] R13: 00000000000927c0 R14: 000000000007fcc1 R15: 00007fffc9509f60
[  668.476162][   T31]  </TASK>
[  668.479674][   T31] INFO: task syz.6.8671:25944 blocked for more than 145 seconds.
[  668.488525][   T31]       Tainted: G     U    I         6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0
[  668.498985][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  668.508652][   T31] task:syz.6.8671      state:D stack:28488 pid:25944 tgid:25944 ppid:14973  task_flags:0x440040 flags:0x00000004
[  668.522966][   T31] Call Trace:
[  668.527373][   T31]  <TASK>
[  668.530339][   T31]  __schedule+0x116f/0x5de0
[  668.536555][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  668.541528][   T31]  ? __pfx___schedule+0x10/0x10
[  668.548370][   T31]  ? find_held_lock+0x2b/0x80
[  668.553053][   T31]  ? schedule+0x2d7/0x3a0
[  668.558449][   T31]  schedule+0xe7/0x3a0
[  668.562523][   T31]  io_schedule+0xbf/0x130
[  668.567852][   T31]  bit_wait_io+0x15/0xe0
[  668.572093][   T31]  __wait_on_bit+0x62/0x180
[  668.581140][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  668.588017][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  668.593416][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  668.600609][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  668.607157][   T31]  do_get_write_access+0x93d/0x12a0
[  668.614856][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  668.620858][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  668.628138][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  668.635276][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  668.640771][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  668.647234][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  668.653248][   T31]  ? rcu_is_watching+0x12/0xc0
[  668.661051][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  668.667733][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  668.672968][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  668.679805][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  668.688935][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  668.696438][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  668.701882][   T31]  ext4_dirty_inode+0xd9/0x130
[  668.707806][   T31]  ? rcu_is_watching+0x12/0xc0
[  668.712785][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  668.720426][   T31]  generic_update_time+0xcf/0xf0
[  668.726393][   T31]  file_update_time+0x17d/0x1c0
[  668.731251][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  668.737939][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  668.744450][   T31]  ? __pfx_filemap_map_pages+0x10/0x10
[  668.749917][   T31]  ? pte_alloc_one+0x2b1/0x380
[  668.755744][   T31]  do_page_mkwrite+0x171/0x380
[  668.760520][   T31]  do_pte_missing+0x29c/0x3fb0
[  668.767317][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  668.772532][   T31]  ? __pmd_alloc+0x3c2/0x870
[  668.778403][   T31]  __handle_mm_fault+0x103d/0x2a40
[  668.784469][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  668.789925][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  668.798609][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  668.805871][   T31]  handle_mm_fault+0x3fe/0xad0
[  668.810649][   T31]  do_user_addr_fault+0x60c/0x1370
[  668.820838][   T31]  exc_page_fault+0x5c/0xc0
[  668.826428][   T31]  asm_exc_page_fault+0x26/0x30
[  668.831287][   T31] RIP: 0033:0x7fd14dc6547b
[  668.836755][   T31] RSP: 002b:00007ffe3ef966d0 EFLAGS: 00010246
[  668.844296][   T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000
[  668.852270][   T31] RDX: 0000001b32320000 RSI: 0000000000600000 RDI: 00007fd14de98d50
[  668.861306][   T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000
[  668.870216][   T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  668.880290][   T31] R13: 00000000000927c0 R14: 000000000007fd3d R15: 00007ffe3ef96980
[  668.889390][   T31]  </TASK>
[  668.893932][   T31] INFO: task syz.5.8670:25946 blocked for more than 145 seconds.
[  668.901692][   T31]       Tainted: G     U    I         6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0
[  668.915952][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  668.927226][   T31] task:syz.5.8670      state:D stack:28488 pid:25946 tgid:25946 ppid:14908  task_flags:0x440040 flags:0x00000004
[  668.941249][   T31] Call Trace:
[  668.945149][   T31]  <TASK>
[  668.948082][   T31]  __schedule+0x116f/0x5de0
[  668.954142][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  668.959167][   T31]  ? __pfx___schedule+0x10/0x10
[  668.964936][   T31]  ? find_held_lock+0x2b/0x80
[  668.969631][   T31]  ? schedule+0x2d7/0x3a0
[  668.975455][   T31]  schedule+0xe7/0x3a0
[  668.979535][   T31]  io_schedule+0xbf/0x130
[  668.985602][   T31]  bit_wait_io+0x15/0xe0
[  668.989852][   T31]  __wait_on_bit+0x62/0x180
[  668.995757][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  669.000699][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  669.006754][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  669.014054][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  669.020990][   T31]  do_get_write_access+0x93d/0x12a0
[  669.029629][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  669.038002][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  669.045269][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  669.050829][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  669.057803][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  669.063759][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  669.069828][   T31]  ? rcu_is_watching+0x12/0xc0
[  669.075959][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  669.081817][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  669.087015][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  669.095563][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  669.101209][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  669.106438][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  669.113504][   T31]  ext4_dirty_inode+0xd9/0x130
[  669.118269][   T31]  ? rcu_is_watching+0x12/0xc0
[  669.124757][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  669.129794][   T31]  generic_update_time+0xcf/0xf0
[  669.140161][   T31]  file_update_time+0x17d/0x1c0
[  669.146389][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  669.153177][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  669.158638][   T31]  ? __pfx_filemap_map_pages+0x10/0x10
[  669.164466][   T31]  ? pte_alloc_one+0x2b1/0x380
[  669.169248][   T31]  do_page_mkwrite+0x171/0x380
[  669.175760][   T31]  do_pte_missing+0x29c/0x3fb0
[  669.180524][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  669.186028][   T31]  ? __pmd_alloc+0x3c2/0x870
[  669.190623][   T31]  __handle_mm_fault+0x103d/0x2a40
[  669.197515][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  669.204411][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  669.209634][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  669.217811][   T31]  handle_mm_fault+0x3fe/0xad0
[  669.224290][   T31]  do_user_addr_fault+0x60c/0x1370
[  669.229427][   T31]  exc_page_fault+0x5c/0xc0
[  669.235783][   T31]  asm_exc_page_fault+0x26/0x30
[  669.244350][   T31] RIP: 0033:0x7fa10ac6547b
[  669.249458][   T31] RSP: 002b:00007ffc32fdcb40 EFLAGS: 00010246
[  669.258008][   T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000
[  669.266279][   T31] RDX: 0000001b2d220000 RSI: 0000000000600000 RDI: 00007fa10ae98d50
[  669.275932][   T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000
[  669.284400][   T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  669.295075][   T31] R13: 00000000000927c0 R14: 000000000007fd17 R15: 00007ffc32fdcdf0
[  669.303312][   T31]  </TASK>
[  669.306358][   T31] 
[  669.306358][   T31] Showing all locks held in the system:
[  669.316949][   T31] 1 lock held by khungtaskd/31:
[  669.322036][   T31]  #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  669.335282][   T31] 6 locks held by kworker/u8:4/81:
[  669.340641][   T31]  #0: ffff8881412dd148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  669.356055][   T31]  #1: ffffc900015bfd18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  669.368664][   T31]  #2: ffff88814d8b00e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0
[  669.381265][   T31]  #3: ffff88814d8b2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820
[  669.392256][   T31]  #4: ffff88814d8b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  669.403189][   T31]  #5: ffff88807aeb4820 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390
[  669.413562][   T31] 3 locks held by syz-executor/5816:
[  669.418837][   T31]  #0: ffff888032e39808 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  669.432860][   T31]  #1: ffff88814d8b0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  669.442706][   T31]  #2: ffff88814d8b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  669.454930][   T31] 2 locks held by getty/20280:
[  669.462526][   T31]  #0: ffff88803652a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  669.474709][   T31]  #1: ffffc900057c92f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  669.485128][   T31] 3 locks held by syz.7.8668/25941:
[  669.492032][   T31]  #0: ffff88807d3c5448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  669.501713][   T31]  #1: ffff88814d8b0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  669.512927][   T31]  #2: ffff88814d8b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  669.522746][   T31] 3 locks held by syz.2.8669/25943:
[  669.527933][   T31]  #0: ffff8880332021c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  669.542053][   T31]  #1: ffff88814d8b0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  669.552856][   T31]  #2: ffff88814d8b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  669.564170][   T31] 3 locks held by syz.6.8671/25944:
[  669.571971][   T31]  #0: ffff88804e3d3448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  669.583903][   T31]  #1: ffff88814d8b0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  669.593728][   T31]  #2: ffff88814d8b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  669.605110][   T31] 3 locks held by syz.5.8670/25946:
[  669.611370][   T31]  #0: ffff8880354821c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  669.622363][   T31]  #1: ffff88814d8b0518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  669.633584][   T31]  #2: ffff88814d8b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  669.644981][   T31] 
[  669.647302][   T31] =============================================
[  669.647302][   T31] 
[  669.658269][   T31] NMI backtrace for cpu 0
[  669.658285][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U    I         6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) 
[  669.658307][   T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[  669.658312][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  669.658320][   T31] Call Trace:
[  669.658325][   T31]  <TASK>
[  669.658330][   T31]  dump_stack_lvl+0x116/0x1f0
[  669.658350][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  669.658373][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  669.658399][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  669.658426][   T31]  watchdog+0xf70/0x12c0
[  669.658446][   T31]  ? __pfx_watchdog+0x10/0x10
[  669.658461][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  669.658477][   T31]  ? __kthread_parkme+0x19e/0x250
[  669.658493][   T31]  ? __pfx_watchdog+0x10/0x10
[  669.658509][   T31]  kthread+0x3c2/0x780
[  669.658526][   T31]  ? __pfx_kthread+0x10/0x10
[  669.658542][   T31]  ? __pfx_kthread+0x10/0x10
[  669.658558][   T31]  ? __pfx_kthread+0x10/0x10
[  669.658574][   T31]  ? __pfx_kthread+0x10/0x10
[  669.658589][   T31]  ? rcu_is_watching+0x12/0xc0
[  669.658602][   T31]  ? __pfx_kthread+0x10/0x10
[  669.658619][   T31]  ret_from_fork+0x45/0x80
[  669.658638][   T31]  ? __pfx_kthread+0x10/0x10
[  669.658654][   T31]  ret_from_fork_asm+0x1a/0x30
[  669.658680][   T31]  </TASK>
[  669.803366][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  669.810240][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U    I         6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) 
[  669.823602][   T31] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND
[  669.829556][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  669.839681][   T31] Call Trace:
[  669.842944][   T31]  <TASK>
[  669.845880][   T31]  dump_stack_lvl+0x3d/0x1f0
[  669.850461][   T31]  panic+0x71c/0x800
[  669.854344][   T31]  ? __pfx_panic+0x10/0x10
[  669.858747][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  669.864112][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  669.870079][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  669.875451][   T31]  ? watchdog+0xdda/0x12c0
[  669.879869][   T31]  ? watchdog+0xdcd/0x12c0
[  669.884296][   T31]  watchdog+0xdeb/0x12c0
[  669.888575][   T31]  ? __pfx_watchdog+0x10/0x10
[  669.893247][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  669.898436][   T31]  ? __kthread_parkme+0x19e/0x250
[  669.903457][   T31]  ? __pfx_watchdog+0x10/0x10
[  669.908120][   T31]  kthread+0x3c2/0x780
[  669.912203][   T31]  ? __pfx_kthread+0x10/0x10
[  669.916788][   T31]  ? __pfx_kthread+0x10/0x10
[  669.921365][   T31]  ? __pfx_kthread+0x10/0x10
[  669.925961][   T31]  ? __pfx_kthread+0x10/0x10
[  669.930539][   T31]  ? rcu_is_watching+0x12/0xc0
[  669.935285][   T31]  ? __pfx_kthread+0x10/0x10
[  669.939861][   T31]  ret_from_fork+0x45/0x80
[  669.944270][   T31]  ? __pfx_kthread+0x10/0x10
[  669.948848][   T31]  ret_from_fork_asm+0x1a/0x30
[  669.953608][   T31]  </TASK>
[  669.956680][   T31] Kernel Offset: disabled
[  669.960992][   T31] Rebooting in 86400 seconds..