last executing test programs: 4.313970795s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='0000:00:04.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8086 100e ffffffff ffffffff 0 0 e\x00', 0x22) (async) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r4 = socket(0x2, 0x2, 0x0) ioctl(r4, 0x8914, &(0x7f0000000b00)="657468300000000000000000000000000100"/40) ioctl(r4, 0x8914, &(0x7f0000000c00)="657468310000000000000000000000000100"/40) ioctl(r4, 0x8914, &(0x7f0000000d00)="657468320000000000000000000000000100"/40) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 3.343440328s ago: executing program 2 (id=3): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='disk\n', 0x5) 3.260490371s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) write(r0, &(0x7f0000000140)='1', 0x1) 3.167881539s ago: executing program 0 (id=5): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40450580800001010203010902200001010080320904000002ffffff000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) read(r0, &(0x7f0000000300), 0x1000) 3.097265243s ago: executing program 2 (id=6): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0e0104100002020001000000000000"], 0x11) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="2d000000010001", 0x7) close(r0) 2.758050972s ago: executing program 2 (id=7): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) read(r0, &(0x7f00000000c0)=""/1, 0x1) read(r0, &(0x7f0000000100)=""/1, 0x1) read(r0, &(0x7f0000000140)=""/1, 0x1) read(r0, &(0x7f0000000180)=""/1, 0x1) 2.656672774s ago: executing program 3 (id=8): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000044)=0x1) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x40) write$ppp(r1, &(0x7f0000000200)="150329", 0x3) ioctl(r1, 0x4010744d, &(0x7f0000000180)="00020000007f00000300000000000000") r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(r3, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) 2.558625638s ago: executing program 1 (id=2): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x605, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x11e1a300}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x1234, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120) 1.706669248s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000940)='naa.6001405123456789\x00', 0x14) symlinkat(&(0x7f0000000980)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f0000000200)=""/28}, &(0x7f0000000300)="5f000000000000001c00", &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) 1.29302943s ago: executing program 2 (id=10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) write(r0, &(0x7f0000000200)="700000c0", 0x4) 853.766028ms ago: executing program 3 (id=11): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl(r2, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x40) write$ppp(r1, &(0x7f0000000200)="150329", 0x3) ioctl(r1, 0x4010744d, &(0x7f0000000180)) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x3, 0x1}, 0x14) sendto$packet(r3, &(0x7f0000000400)="000000000000000000000000886411000001000980fd02010007150329", 0x1d, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000500)="000000000000000000000000886411000001000600fd00000000", 0x1a, 0x0, 0x0, 0x0) 752.153846ms ago: executing program 1 (id=12): openat$userio(0xffffffffffffff9c, 0x0, 0x2, 0x0) 534.472448ms ago: executing program 1 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:04.0\x00', 0xd) 485.940862ms ago: executing program 2 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000005000), 0x88, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000002000), 0xb2, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/dlm/cluster/spaces/foo\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)="020000007f00000100"/128, 0x80) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/dlm/cluster/spaces/foo/nodes/1\x00', 0x1ff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write(r2, &(0x7f0000000d00)="060000000000000002000000040100000000000000000000666f6f00"/128, 0x80) (async) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000f00)='./sys\x00', &(0x7f0000001000)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./sys/kernel/dlm/foo/event_done\x00', 0x2, 0x0) write(r3, &(0x7f0000001200)='0\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/kernel/dlm/foo/control\x00', 0x2, 0x0) write(r4, &(0x7f0000001400)='1\x00', 0x2) close(r4) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/dlm_foo\x00', 0x2, 0x0) write(r5, &(0x7f0000001800)="060000000000000002000000010100000503000080000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000626172", 0x7f) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/dlm_foo\x00', 0x2, 0x0) write(r6, &(0x7f0000001900)="060000000000000002000000010100000503000000400000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000626172", 0x7f) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 52.613328][ T5253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.628634][ T5253] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. syzkaller login: [ 75.064121][ T5577] cgroup: Unknown subsys name 'net' [ 75.302498][ T5577] cgroup: Unknown subsys name 'cpuset' [ 75.358737][ T5577] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.047525][ T5577] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.623353][ T5595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.662469][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.685734][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.691877][ T5601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.695982][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.699831][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.701323][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.702160][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.707677][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.736229][ T5601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.738884][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.739970][ T5599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.745385][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.746550][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.747855][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.749723][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.756949][ T4906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.757333][ T4906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.760682][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.760812][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.905521][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.905713][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.905883][ T5589] bridge_slave_0: entered allmulticast mode [ 82.912550][ T5589] bridge_slave_0: entered promiscuous mode [ 82.939816][ T5605] Bluetooth: hci3: command tx timeout [ 82.974397][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.974566][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.974745][ T5589] bridge_slave_1: entered allmulticast mode [ 82.977028][ T5589] bridge_slave_1: entered promiscuous mode [ 83.018140][ T5605] Bluetooth: hci2: command tx timeout [ 83.018311][ T5605] Bluetooth: hci0: command tx timeout [ 83.018388][ T5605] Bluetooth: hci1: command tx timeout [ 83.122466][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.122669][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.122827][ T5592] bridge_slave_0: entered allmulticast mode [ 83.124754][ T5592] bridge_slave_0: entered promiscuous mode [ 83.140714][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.179597][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.179849][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.180052][ T5592] bridge_slave_1: entered allmulticast mode [ 83.183984][ T5592] bridge_slave_1: entered promiscuous mode [ 83.190771][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.191187][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.191515][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.191828][ T5588] bridge_slave_0: entered allmulticast mode [ 83.195120][ T5588] bridge_slave_0: entered promiscuous mode [ 83.252285][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.252482][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.253761][ T5588] bridge_slave_1: entered allmulticast mode [ 83.255613][ T5588] bridge_slave_1: entered promiscuous mode [ 83.257343][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.257510][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.257840][ T5593] bridge_slave_0: entered allmulticast mode [ 83.264539][ T5593] bridge_slave_0: entered promiscuous mode [ 83.346635][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.346952][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.347260][ T5593] bridge_slave_1: entered allmulticast mode [ 83.350880][ T5593] bridge_slave_1: entered promiscuous mode [ 83.382994][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.501508][ T5589] team0: Port device team_slave_0 added [ 83.505114][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.515724][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.546596][ T5589] team0: Port device team_slave_1 added [ 83.570565][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.574904][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.642237][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.666291][ T5592] team0: Port device team_slave_0 added [ 83.701204][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.701220][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.701234][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.705716][ T5592] team0: Port device team_slave_1 added [ 83.710156][ T5588] team0: Port device team_slave_0 added [ 83.744162][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.744179][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.744204][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.774367][ T5588] team0: Port device team_slave_1 added [ 83.779337][ T5593] team0: Port device team_slave_0 added [ 83.854121][ T5593] team0: Port device team_slave_1 added [ 83.857278][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.857288][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.857301][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.921430][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.921441][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.921455][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.922984][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.922993][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.923006][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.987945][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.987963][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.990443][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.995262][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.995279][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.995304][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.049043][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.049058][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.049083][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.068143][ T5589] hsr_slave_0: entered promiscuous mode [ 84.070497][ T5589] hsr_slave_1: entered promiscuous mode [ 84.192919][ T5592] hsr_slave_0: entered promiscuous mode [ 84.194117][ T5592] hsr_slave_1: entered promiscuous mode [ 84.195227][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 84.195328][ T5592] Cannot create hsr debugfs directory [ 84.249850][ T5588] hsr_slave_0: entered promiscuous mode [ 84.251063][ T5588] hsr_slave_1: entered promiscuous mode [ 84.252035][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 84.252057][ T5588] Cannot create hsr debugfs directory [ 84.305802][ T5593] hsr_slave_0: entered promiscuous mode [ 84.307042][ T5593] hsr_slave_1: entered promiscuous mode [ 84.308958][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 84.308980][ T5593] Cannot create hsr debugfs directory [ 85.018292][ T5596] Bluetooth: hci3: command tx timeout [ 85.099980][ T5596] Bluetooth: hci1: command tx timeout [ 85.100004][ T5605] Bluetooth: hci0: command tx timeout [ 85.100030][ T5605] Bluetooth: hci2: command tx timeout [ 85.489489][ T5589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.541705][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.551070][ T5589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.592015][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.604764][ T5589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.634364][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.653520][ T5589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.690552][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.831802][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.866452][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.874642][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.917472][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.929303][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.962171][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.991829][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.033658][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.190950][ T5588] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.234121][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.253434][ T5588] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.284848][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.289962][ T5588] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.323610][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.353500][ T5588] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.390301][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.514136][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.555263][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.567791][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.612396][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.615958][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.634796][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.654053][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.693384][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.805110][ T9] cfg80211: failed to load regulatory.db [ 86.807834][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.949634][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.998789][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.998964][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.041691][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.069607][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.069754][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.099611][ T5596] Bluetooth: hci3: command tx timeout [ 87.178338][ T5596] Bluetooth: hci1: command tx timeout [ 87.182825][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.189611][ T5606] Bluetooth: hci0: command tx timeout [ 87.189704][ T5596] Bluetooth: hci2: command tx timeout [ 87.241671][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.241797][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.257177][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.299453][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.299622][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.381748][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.405802][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.429357][ T1301] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.429500][ T1301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.534558][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.534754][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.603897][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.672325][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.675447][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.720957][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.721086][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.722393][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.125809][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.171332][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.188182][ T5596] Bluetooth: hci3: command tx timeout [ 89.258864][ T5596] Bluetooth: hci2: command tx timeout [ 89.258897][ T5596] Bluetooth: hci0: command tx timeout [ 89.258918][ T5596] Bluetooth: hci1: command tx timeout [ 89.286064][ T5589] veth0_vlan: entered promiscuous mode [ 89.345580][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.363077][ T5589] veth1_vlan: entered promiscuous mode [ 89.492119][ T5593] veth0_vlan: entered promiscuous mode [ 89.514456][ T5588] veth0_vlan: entered promiscuous mode [ 89.555699][ T5593] veth1_vlan: entered promiscuous mode [ 89.576786][ T5589] veth0_macvtap: entered promiscuous mode [ 89.590857][ T5588] veth1_vlan: entered promiscuous mode [ 89.622531][ T5589] veth1_macvtap: entered promiscuous mode [ 89.633309][ T5592] veth0_vlan: entered promiscuous mode [ 89.681994][ T5592] veth1_vlan: entered promiscuous mode [ 89.706055][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.752739][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.774923][ T5593] veth0_macvtap: entered promiscuous mode [ 89.791350][ T5588] veth0_macvtap: entered promiscuous mode [ 89.808993][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.815153][ T5593] veth1_macvtap: entered promiscuous mode [ 89.827155][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.836002][ T5588] veth1_macvtap: entered promiscuous mode [ 89.850905][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.874406][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.062413][ T5592] veth0_macvtap: entered promiscuous mode [ 90.095052][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.190246][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.228230][ T5592] veth1_macvtap: entered promiscuous mode [ 90.262012][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.313494][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.352888][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.377295][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.395210][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.420875][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.427156][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.442198][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.445405][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.446242][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.471138][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.471167][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.513679][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.596578][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.853235][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.906691][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.918819][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.918837][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.922485][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.927247][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.333611][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.333629][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.551621][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.551643][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.865138][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.865156][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.052728][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.052747][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.196037][ T295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.196056][ T295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.559876][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.559894][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.668443][ T5597] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.989690][ T5597] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 93.989722][ T5597] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 94.020060][ T5597] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 1.00 [ 94.020097][ T5597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.020116][ T5597] usb 1-1: Product: syz [ 94.020129][ T5597] usb 1-1: Manufacturer: syz [ 94.020141][ T5597] usb 1-1: SerialNumber: syz [ 94.285312][ T5764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.296989][ T5764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.402186][ T38] audit: type=1800 audit(1785863678.066:2): pid=5785 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.9" name="enable" dev="configfs" ino=7678 res=0 errno=0 [ 94.724066][ T38] audit: type=1800 audit(1785863678.426:3): pid=5783 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.9" name="UDC" dev="configfs" ino=7694 res=0 errno=0 [ 94.764670][ T5783] UDC core: g1: couldn't find an available UDC or it's busy [ 95.596257][ T824] usb 1-1: USB disconnect, device number 2 [ 96.032596][ T38] audit: type=1800 audit(1785863679.736:4): pid=5810 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.15" name="local" dev="configfs" ino=7718 res=0 errno=0 [ 96.345955][ T5812] dlm: Using TCP for communications [ 96.398049][ T4919] libceph: mon0 (1)127.0.0.1:8080 socket closed (con state V1_BANNER) [ 96.540824][ T5800] ceph: No mds server is up or the cluster is laggy [ 96.742312][ T4919] libceph: mon0 (1)127.0.0.1:8080 socket error on write [ 96.780446][ T5808] dlm: dlm user daemon left 1 lockspaces [ 96.826546][ T5812] dlm: foo: joining the lockspace group... [ 97.322623][ T5837] PM: hibernation: hibernation entry [ 97.427355][ T5702] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.624935][ T5702] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 97.624968][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.624987][ T5702] usb 3-1: Product: syz [ 97.624999][ T5702] usb 3-1: Manufacturer: syz [ 97.625091][ T5702] usb 3-1: SerialNumber: syz [ 98.153240][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.163878][ T5837] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.321506][ C0] usb 3-1: received EP1 urb->status = -2 [ 98.322744][ T5702] usb 3-1: unable to init card! (ret=-110) [ 98.393235][ T5702] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 98.712688][ T5837] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.899324][ T5837] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.899475][ T5837] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.017031][ T5837] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.096992][ T5837] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.097137][ T5837] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.221564][ T5837] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.292019][ T5837] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.292156][ T5837] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.386964][ T5837] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.585747][ T5606] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.145269][ T824] usb 3-1: USB disconnect, device number 2 [ 100.699126][ T295] Filesystems sync: 1.198 seconds [ 100.814170][ T5837] Freezing user space processes [ 100.888292][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.938320][ T5596] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.098170][ T5596] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.338118][ T5596] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.660583][ T5596] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.018761][ T5596] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.178219][ T5596] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.418924][ T5596] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.738175][ T5596] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.098605][ T5596] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.258309][ T5596] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.498157][ T5596] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.058248][ T9] usb 3-1: device descriptor read/64, error -110 [ 106.308131][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.448161][ T9] usb 3-1: device descriptor read/64, error -32 [ 106.565761][ T9] usb usb3-port1: attempt power cycle [ 106.908289][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.928462][ T9] usb 3-1: device descriptor read/8, error -32 [ 107.108575][ T9] raw-gadget.0 gadget.2: failed to queue resume event [ 107.168257][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.190519][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 107.190604][ T9] usb 3-1: device descriptor read/8, error -32 [ 107.301922][ T9] raw-gadget.0 gadget.2: failed to queue suspend event [ 107.302131][ T9] usb usb3-port1: unable to enumerate USB device [ 120.819917][ T5837] Freezing user space processes failed after 20.005 seconds (1 tasks refusing to freeze, wq_busy=0): [ 120.820051][ T5837] task:syz.3.15 state:D stack:26144 pid:5812 tgid:5808 ppid:5588 task_flags:0x400140 flags:0x00080002 [ 120.820101][ T5837] Call Trace: [ 120.820105][ T5837] [ 120.820114][ T5837] __schedule+0x1709/0x5530 [ 120.820145][ T5837] ? __lock_acquire+0x6df/0x2e40 [ 120.820159][ T5837] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.820174][ T5837] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 120.820196][ T5837] ? __pfx___schedule+0x10/0x10 [ 120.820210][ T5837] ? lock_acquire+0x115/0x350 [ 120.820233][ T5837] ? schedule+0x90/0x2b0 [ 120.820250][ T5837] schedule+0x164/0x2b0 [ 120.820267][ T5837] do_uevent+0x2c3/0x570 [ 120.820282][ T5837] ? __pfx_do_uevent+0x10/0x10 [ 120.820293][ T5837] ? kfree+0x1c5/0x6c0 [ 120.820335][ T5837] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.820349][ T5837] ? kobject_uevent_env+0x378/0x9e0 [ 120.820364][ T5837] ? __pfx_autoremove_wake_function+0x10/0x10 [ 120.820381][ T5837] ? kobject_uevent_env+0x378/0x9e0 [ 120.820399][ T5837] __dlm_new_lockspace+0x1aa4/0x2060 [ 120.820412][ T5837] ? __dlm_new_lockspace+0x273/0x2060 [ 120.820426][ T5837] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 120.820471][ T5837] ? __pfx_autoremove_wake_function+0x10/0x10 [ 120.820487][ T5837] ? cap_capable+0x123/0x460 [ 120.820498][ T5837] ? safesetid_security_capable+0xa9/0x1a0 [ 120.820513][ T5837] ? bpf_lsm_capable+0x9/0x20 [ 120.820524][ T5837] ? security_capable+0x74/0x280 [ 120.820537][ T5837] ? dlm_new_user_lockspace+0x3e/0x80 [ 120.820551][ T5837] device_create_lockspace+0xc7/0x350 [ 120.820568][ T5837] ? __pfx_device_create_lockspace+0x10/0x10 [ 120.820585][ T5837] ? _copy_from_user+0x94/0xb0 [ 120.820598][ T5837] device_write+0x875/0xed0 [ 120.820612][ T5837] ? __pfx_device_write+0x10/0x10 [ 120.820624][ T5837] vfs_write+0x29f/0xbb0 [ 120.820679][ T5837] ? __pfx_vfs_write+0x10/0x10 [ 120.820693][ T5837] ? __fget_files+0x2a/0x420 [ 120.820706][ T5837] ? __fget_files+0x2a/0x420 [ 120.820716][ T5837] ? __fget_files+0x3a8/0x420 [ 120.820726][ T5837] ? __fget_files+0x2a/0x420 [ 120.820742][ T5837] ksys_write+0x156/0x270 [ 120.820756][ T5837] ? __pfx_ksys_write+0x10/0x10 [ 120.820775][ T5837] do_syscall_64+0x17b/0x530 [ 120.820786][ T5837] ? irqentry_exit+0x10f/0x8f0 [ 120.820796][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.820807][ T5837] ? clear_bhb_loop+0x40/0x90 [ 120.820821][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.820833][ T5837] RIP: 0033:0x7fd8c65fe019 [ 120.820847][ T5837] RSP: 002b:00007fd8c4835028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.820858][ T5837] RAX: ffffffffffffffda RBX: 00007fd8c6886090 RCX: 00007fd8c65fe019 [ 120.820866][ T5837] RDX: 0000000000000080 RSI: 0000200000000d00 RDI: 0000000000000004 [ 120.820873][ T5837] RBP: 00007fd8c669500c R08: 0000000000000000 R09: 0000000000000000 [ 120.820880][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.820886][ T5837] R13: 00007fd8c6886128 R14: 00007fd8c6886090 R15: 00007ffc9c9690c8 [ 120.820904][ T5837] [ 120.822223][ T5837] OOM killer enabled. [ 120.822229][ T5837] Restarting tasks: Starting [ 121.148393][ T5837] Restarting tasks: Done [ 121.176545][ T5837] PM: hibernation: hibernation exit [ 121.239251][ T5885] raw-gadget.0 gadget.2: failed to queue disconnect event [ 123.105800][ T295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.466286][ T295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.692517][ T295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.913548][ T295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.421236][ T295] bridge_slave_1: left allmulticast mode [ 124.421387][ T295] bridge_slave_1: left promiscuous mode [ 124.442605][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.649368][ T295] bridge_slave_0: left allmulticast mode [ 124.649393][ T295] bridge_slave_0: left promiscuous mode [ 124.649877][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.449224][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.508801][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.552890][ T295] bond0 (unregistering): Released all slaves [ 125.606676][ T5253] 8021q: adding VLAN 0 to HW filter on device eth0 [ 125.925190][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 126.350152][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 126.861813][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 127.178313][ T295] hsr_slave_0: left promiscuous mode [ 127.198183][ T295] hsr_slave_1: left promiscuous mode [ 127.199473][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.199562][ T295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.240945][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.240964][ T295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.331066][ T295] veth1_macvtap: left promiscuous mode [ 127.331235][ T295] veth0_macvtap: left promiscuous mode [ 127.331464][ T295] veth1_vlan: left promiscuous mode [ 127.331698][ T295] veth0_vlan: left promiscuous mode [ 128.088789][ T295] team0 (unregistering): Port device team_slave_1 removed [ 128.128769][ T295] team0 (unregistering): Port device team_slave_0 removed [ 129.564112][ T295] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.840634][ T295] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.048561][ T295] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.270193][ T295] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.892594][ T295] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.948989][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 131.253858][ T295] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.295685][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5 [ 131.580178][ T295] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.610224][ T5253] 8021q: adding VLAN 0 to HW filter on device eth6 [ 131.890859][ T295] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.912686][ T5253] 8021q: adding VLAN 0 to HW filter on device eth7 [ 132.388662][ T295] bridge_slave_1: left allmulticast mode [ 132.388696][ T295] bridge_slave_1: left promiscuous mode [ 132.389042][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.589168][ T295] bridge_slave_0: left allmulticast mode [ 132.589191][ T295] bridge_slave_0: left promiscuous mode [ 132.589389][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.788558][ T295] bridge_slave_1: left allmulticast mode [ 132.788583][ T295] bridge_slave_1: left promiscuous mode [ 132.788753][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.865080][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.865248][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.890026][ T295] bridge_slave_0: left allmulticast mode [ 132.890073][ T295] bridge_slave_0: left promiscuous mode [ 132.890244][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.708783][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.788802][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.810813][ T295] bond0 (unregistering): Released all slaves [ 134.292251][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.368751][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.392261][ T295] bond0 (unregistering): Released all slaves [ 134.431125][ T5253] 8021q: adding VLAN 0 to HW filter on device eth8 [ 135.046369][ T5253] 8021q: adding VLAN 0 to HW filter on device eth9 [ 135.544409][ T5253] 8021q: adding VLAN 0 to HW filter on device eth10 [ 135.883611][ T5253] 8021q: adding VLAN 0 to HW filter on device eth11 [ 137.008202][ T295] hsr_slave_0: left promiscuous mode [ 137.048444][ T295] hsr_slave_1: left promiscuous mode [ 137.050183][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.050211][ T295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.072461][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.072488][ T295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.228281][ T295] hsr_slave_0: left promiscuous mode [ 137.248247][ T295] hsr_slave_1: left promiscuous mode [ 137.249378][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.249396][ T295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.289036][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.289055][ T295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.370190][ T295] veth1_macvtap: left promiscuous mode [ 137.370255][ T295] veth0_macvtap: left promiscuous mode [ 137.370417][ T295] veth1_vlan: left promiscuous mode [ 137.370533][ T295] veth0_vlan: left promiscuous mode [ 137.488443][ T295] veth1_macvtap: left promiscuous mode [ 137.492722][ T295] veth0_macvtap: left promiscuous mode [ 137.493183][ T295] veth1_vlan: left promiscuous mode [ 137.493378][ T295] veth0_vlan: left promiscuous mode [ 138.380046][ T295] team0 (unregistering): Port device team_slave_1 removed [ 138.418997][ T295] team0 (unregistering): Port device team_slave_0 removed [ 138.959397][ T295] team0 (unregistering): Port device team_slave_1 removed [ 138.998895][ T295] team0 (unregistering): Port device team_slave_0 removed [ 194.301413][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.301472][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.752939][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.753041][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.418351][ T39] INFO: task syz.3.15:5812 blocked for more than 143 seconds. [ 279.418390][ T39] Not tainted syzkaller #0 [ 279.418400][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.418409][ T39] task:syz.3.15 state:D stack:26144 pid:5812 tgid:5808 ppid:5588 task_flags:0x400140 flags:0x00080002 [ 279.418482][ T39] Call Trace: [ 279.418489][ T39] [ 279.418501][ T39] __schedule+0x1709/0x5530 [ 279.418535][ T39] ? __lock_acquire+0x6df/0x2e40 [ 279.418559][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 279.418583][ T39] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 279.418631][ T39] ? __pfx___schedule+0x10/0x10 [ 279.418657][ T39] ? lock_acquire+0x115/0x350 [ 279.418696][ T39] ? schedule+0x90/0x2b0 [ 279.418727][ T39] schedule+0x164/0x2b0 [ 279.418758][ T39] do_uevent+0x2c3/0x570 [ 279.418784][ T39] ? __pfx_do_uevent+0x10/0x10 [ 279.418804][ T39] ? kfree+0x1c5/0x6c0 [ 279.418873][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 279.418898][ T39] ? kobject_uevent_env+0x378/0x9e0 [ 279.418924][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 279.418954][ T39] ? kobject_uevent_env+0x378/0x9e0 [ 279.418988][ T39] __dlm_new_lockspace+0x1aa4/0x2060 [ 279.419010][ T39] ? __dlm_new_lockspace+0x273/0x2060 [ 279.419037][ T39] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 279.419067][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 279.419092][ T39] ? cap_capable+0x123/0x460 [ 279.419111][ T39] ? safesetid_security_capable+0xa9/0x1a0 [ 279.419138][ T39] ? bpf_lsm_capable+0x9/0x20 [ 279.419158][ T39] ? security_capable+0x74/0x280 [ 279.419181][ T39] ? dlm_new_user_lockspace+0x3e/0x80 [ 279.419205][ T39] device_create_lockspace+0xc7/0x350 [ 279.419235][ T39] ? __pfx_device_create_lockspace+0x10/0x10 [ 279.419266][ T39] ? _copy_from_user+0x94/0xb0 [ 279.419288][ T39] device_write+0x875/0xed0 [ 279.419314][ T39] ? __pfx_device_write+0x10/0x10 [ 279.419336][ T39] vfs_write+0x29f/0xbb0 [ 279.419368][ T39] ? __pfx_vfs_write+0x10/0x10 [ 279.419392][ T39] ? __fget_files+0x2a/0x420 [ 279.419415][ T39] ? __fget_files+0x2a/0x420 [ 279.419433][ T39] ? __fget_files+0x3a8/0x420 [ 279.419452][ T39] ? __fget_files+0x2a/0x420 [ 279.419480][ T39] ksys_write+0x156/0x270 [ 279.419504][ T39] ? __pfx_ksys_write+0x10/0x10 [ 279.419537][ T39] do_syscall_64+0x17b/0x530 [ 279.419557][ T39] ? irqentry_exit+0x10f/0x8f0 [ 279.419674][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.419694][ T39] ? clear_bhb_loop+0x40/0x90 [ 279.419732][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.419752][ T39] RIP: 0033:0x7fd8c65fe019 [ 279.419767][ T39] RSP: 002b:00007fd8c4835028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 279.419781][ T39] RAX: ffffffffffffffda RBX: 00007fd8c6886090 RCX: 00007fd8c65fe019 [ 279.419789][ T39] RDX: 0000000000000080 RSI: 0000200000000d00 RDI: 0000000000000004 [ 279.419795][ T39] RBP: 00007fd8c669500c R08: 0000000000000000 R09: 0000000000000000 [ 279.419802][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.419808][ T39] R13: 00007fd8c6886128 R14: 00007fd8c6886090 R15: 00007ffc9c9690c8 [ 279.419824][ T39] [ 279.419842][ T39] [ 279.419842][ T39] Showing all locks held in the system: [ 279.419850][ T39] locks held by khungtaskd/39: 1, last CPU#1: [ 279.419857][ T39] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 279.419907][ T39] locks held by getty/5344: 2, on CPU#0: [ 279.419914][ T39] #0: ffff8880367d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 279.419942][ T39] #1: ffffc900044d62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 279.419971][ T39] locks held by syz.3.15/5812: 1, on CPU#1: [ 279.419977][ T39] #0: ffffffff99df7bb8 (&ls_lock){+.+.}-{4:4}, at: __dlm_new_lockspace+0xa3/0x2060 [ 279.420001][ T39] locks held by dlm_recoverd/5820: 1, on CPU#1: [ 279.420008][ T39] #0: ffff88801b738d20 (&ls->ls_in_recovery){+.+.}-{4:4}, at: dlm_recoverd+0xba/0x23e0 [ 279.420034][ T39] [ 279.420037][ T39] ============================================= [ 279.420037][ T39] [ 279.420050][ T39] NMI backtrace for cpu 1 [ 279.420065][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 279.420076][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.420082][ T39] Call Trace: [ 279.420092][ T39] [ 279.420096][ T39] dump_stack_lvl+0xe8/0x150 [ 279.420110][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 279.420124][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 279.420139][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 279.420154][ T39] sys_info+0x135/0x170 [ 279.420166][ T39] watchdog+0xfd7/0x1030 [ 279.420185][ T39] ? watchdog+0x1c7/0x1030 [ 279.420202][ T39] kthread+0x388/0x470 [ 279.420216][ T39] ? __pfx_watchdog+0x10/0x10 [ 279.420229][ T39] ? __pfx_kthread+0x10/0x10 [ 279.420242][ T39] ret_from_fork+0x514/0xb70 [ 279.420258][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 279.420271][ T39] ? __switch_to+0xc89/0x1420 [ 279.420283][ T39] ? __pfx_kthread+0x10/0x10 [ 279.420297][ T39] ret_from_fork_asm+0x1a/0x30 [ 279.420317][ T39] [ 279.420320][ T39] Sending NMI from CPU 1 to CPUs 0: [ 279.420367][ C0] NMI backtrace for cpu 0 [ 279.420385][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 279.420403][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.420412][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 279.420441][ C0] Code: 0c 74 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 66 19 00 fb f4 4c d0 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 279.420454][ C0] RSP: 0018:ffffffff8e007ca0 EFLAGS: 00000246 [ 279.420469][ C0] RAX: 00000000001208e1 RBX: ffffffff8199b400 RCX: 0000000080000001 [ 279.420481][ C0] RDX: 0000000000000001 RSI: ffffffff8d98ba58 RDI: ffffffff8bcbd080 [ 279.420493][ C0] RBP: ffffffff8e007d78 R08: ffff8880b8633d1b R09: 1ffff110170c67a3 [ 279.420505][ C0] R10: dffffc0000000000 R11: ffffed10170c67a4 R12: 0000000000000000 [ 279.420517][ C0] R13: 1ffffffff1c1edf0 R14: 1ffffffff1c00f9c R15: dffffc0000000000 [ 279.420530][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 279.420544][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.420556][ C0] CR2: 0000561f7d209168 CR3: 000000000e1b0000 CR4: 00000000003526f0 [ 279.420570][ C0] Call Trace: [ 279.420576][ C0] [ 279.420582][ C0] default_idle+0x9/0x20 [ 279.420607][ C0] default_idle_call+0x72/0xb0 [ 279.420626][ C0] do_idle+0x2e0/0x540 [ 279.420644][ C0] ? __pfx_do_idle+0x10/0x10 [ 279.420670][ C0] cpu_startup_entry+0x43/0x60 [ 279.420686][ C0] rest_init+0x378/0x3a0 [ 279.420706][ C0] ? __pfx_rest_init+0x10/0x10 [ 279.420731][ C0] ? __pfx_kernel_init+0x10/0x10 [ 279.420752][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 279.420768][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 279.420790][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 279.420812][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 279.420841][ C0] start_kernel+0x392/0x3e0 [ 279.420862][ C0] x86_64_start_reservations+0x24/0x30 [ 279.420888][ C0] x86_64_start_kernel+0x137/0x1b0 [ 279.420912][ C0] common_startup_64+0x13e/0x157 [ 279.420939][ C0] [ 279.421560][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 279.421574][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 279.421594][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.421604][ T39] Call Trace: [ 279.421612][ T39] [ 279.421619][ T39] vpanic+0x56c/0xa60 [ 279.421645][ T39] ? __pfx___schedule+0x10/0x10 [ 279.421670][ T39] ? __pfx_vpanic+0x10/0x10 [ 279.421693][ T39] panic+0xc5/0xd0 [ 279.421709][ T39] ? __pfx_panic+0x10/0x10 [ 279.421725][ T39] ? preempt_schedule_common+0x82/0xd0 [ 279.421752][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 279.421769][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 279.421784][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 279.421799][ T39] watchdog+0x1030/0x1030 [ 279.421824][ T39] ? watchdog+0x1c7/0x1030 [ 279.421848][ T39] kthread+0x388/0x470 [ 279.421864][ T39] ? __pfx_watchdog+0x10/0x10 [ 279.421878][ T39] ? __pfx_kthread+0x10/0x10 [ 279.421891][ T39] ret_from_fork+0x514/0xb70 [ 279.421906][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 279.421919][ T39] ? __switch_to+0xc89/0x1420 [ 279.421931][ T39] ? __pfx_kthread+0x10/0x10 [ 279.421944][ T39] ret_from_fork_asm+0x1a/0x30 [ 279.421964][ T39] [ 279.422244][ T39] Kernel Offset: disabled