last executing test programs: 56.67216211s ago: executing program 3 (id=188): socket(0x11, 0x1, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000900)='./config\x00', &(0x7f0000000940)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) 56.6720229s ago: executing program 3 (id=189): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x17) 56.032308976s ago: executing program 3 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000010a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000011080)={0x0, 0x0, &(0x7f00000110c0)={&(0x7f0000011100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000011140)={0x0, 0x0, &(0x7f0000011180)={&(0x7f0000011540)={0x90, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc1, 0x7f}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000011280)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000112c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000011300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000011340)={0x0, 0x0, &(0x7f0000011380)={&(0x7f00000113c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 55.843896095s ago: executing program 3 (id=196): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) getgroups(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0xff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000640)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt\x00', 0x0, 0x21) bind$inet(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x402) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x1c, 0x2, 0xffd3, 0xf0, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./dev\x00', &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x5}, 0x16, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 54.215036674s ago: executing program 3 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000280)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x0, 0x21) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() clock_nanosleep(0x2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000400)=@v1={0x0, @aes128, 0x1, @desc1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r5, 0x200000) pwrite64(r5, &(0x7f0000000080)="0000010042", 0x5, 0x1be) pwrite64(r5, &(0x7f00000000c0)="55aa", 0x2, 0x1fe) pwrite64(r5, 0x0, 0x0, 0xc0c) pwrite64(r5, 0x0, 0x0, 0xd2b) r6 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x2) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000600)='\x00', &(0x7f0000000640)='omfs\x00', 0x3800800, &(0x7f0000000680)='\x00\x00\x11\x11\"\"33') ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 53.869362979s ago: executing program 3 (id=210): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 38.612846264s ago: executing program 32 (id=210): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 12.609861618s ago: executing program 4 (id=298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100090000000500040000000000080002000300e200080003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10.220638395s ago: executing program 4 (id=298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100090000000500040000000000080002000300e200080003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.088029165s ago: executing program 2 (id=389): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0}) 7.822502413s ago: executing program 4 (id=298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100090000000500040000000000080002000300e200080003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.864298785s ago: executing program 1 (id=392): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 5.795605602s ago: executing program 0 (id=393): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000380), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usbip_server_init(0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) close(0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) 5.568800835s ago: executing program 2 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x1004040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./dev/sda\x00', 0x101002, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffc, 0x6, 0xfe, @buffer={0xf5, 0x40f2, 0x0}, &(0x7f0000000800)="b5c9bf61c5eb", &(0x7f0000000840)=""/225, 0x300, 0x10, 0x2, 0x0}) 5.489112113s ago: executing program 4 (id=298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100090000000500040000000000080002000300e200080003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.456644107s ago: executing program 2 (id=395): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00', 0x100}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) mlock(&(0x7f00009b8000/0x1000)=nil, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(r1, 0x0, 0x0, 0x20008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./tracing\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000840)='p:s/p ./file0:0', 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x2, 0x95, &(0x7f00000003c0)=""/149}, 0x94) mlock(&(0x7f0000800000/0x3000)=nil, 0x3000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000008c0)='1', 0x1) 3.279428052s ago: executing program 0 (id=396): setns(0xc9, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e21, @local}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r1, 0x2}}, 0x18) 3.277973852s ago: executing program 1 (id=397): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000440)=0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001f80)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000580)=0xffffffffffffffc2) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r1, &(0x7f00000005c0)) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000000)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x2, 0x48f, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0xa1}}}, &(0x7f00000000c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r3, &(0x7f0000000140)={0x0, 0xfffffffe, 0x700, 0x4, 0x1f3}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x20, 0x0, 0x40000006}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x0, 0x40040005, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0x164}}], 0x1, 0x0, 0x0) 3.268056823s ago: executing program 2 (id=398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)={@void, @val={0x3, 0x3, 0x8, 0x12, 0x16, 0xc}, @ipv4=@generic={{0x6, 0x4, 0x1, 0xb, 0x18, 0x65, 0x0, 0x8, 0x11, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4, 0x1}]}}}}, 0x22) 3.172044743s ago: executing program 0 (id=399): writev(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3.146114666s ago: executing program 1 (id=400): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.038650486s ago: executing program 0 (id=401): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setresuid(0xee00, 0x0, 0x0) keyctl$session_to_parent(0x12) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000240)="6607388173ab0fc76fb4360fc90f01cb7666ba6bb74189000003c70fae6e2fc416610f2367260f01ca660f38817700c4c2459d78ad", 0x35}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000001100)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x9}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.992114231s ago: executing program 2 (id=402): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x40, 0xa}, 0x0, 0x0}) 2.954016755s ago: executing program 0 (id=403): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x12000) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000100)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) lstat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000400)=@rnullb={'/dev/syzrnull', 0x0}, r1, &(0x7f0000000300)={0x8, 0x5d, 0x6, 0xffff, 0x31c, 0x6, 0x8, 0x9, 0x7}) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000ac0)='pagemap\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='blkio.bfq.time\x00', 0x26e1, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x87e, 0xd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r3, 0x852ac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x13, 0x13, &(0x7f0000002080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32], &(0x7f0000002140)='GPL\x00', 0x2, 0xde, &(0x7f0000002180)=""/222, 0x41100, 0x8}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f0000002280)=""/4106, 0x100a}], 0x1, 0x300, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000f40)={0x1f, 0xffff, 0x3}, 0x6) 2.806834241s ago: executing program 0 (id=404): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000000240)='\v', 0x1) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x1, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0xf9, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x5, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0xfe, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x81, 0x8}}}}}]}}]}}, 0x0) 2.722790319s ago: executing program 4 (id=298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100090000000500040000000000080002000300e200080003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 569.536111ms ago: executing program 1 (id=405): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x234) write(r1, &(0x7f0000000000)='3', 0x4e) sendto(r1, 0x0, 0x0, 0x40840, 0x0, 0x0) close(r0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 260.604573ms ago: executing program 2 (id=406): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 165.832763ms ago: executing program 1 (id=407): setns(0xc9, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @local}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, 0x2}}, 0x18) 82.85µs ago: executing program 1 (id=408): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000440)=0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001f80)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000580)=0xffffffffffffffc2) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r1, &(0x7f00000005c0)) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f0000000000)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x2, 0x48f, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0xa1}}}, &(0x7f00000000c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r3, &(0x7f0000000140)={0x0, 0xfffffffe, 0x700, 0x4, 0x1f3}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x20, 0x0, 0x40000006}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x0, 0x40040005, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0x164}}], 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100090000000500040000000000080002000300e200080003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 74.479778][ T5773] cgroup: Unknown subsys name 'net' [ 74.609678][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.964880][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.945042][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.953326][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.961053][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.969042][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.976832][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.984324][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.023079][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.031705][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.081793][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.090296][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.098664][ T5095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.106000][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.152671][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.160690][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.169292][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.192430][ T5788] (null): rxe_set_mtu: Set mtu to 1024 [ 78.201835][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.205234][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.216942][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.224731][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.232056][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.232206][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.239716][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 78.254869][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.263912][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.271231][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.277930][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.285750][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.308991][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.327304][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.351541][ T5796] (null): rxe_set_mtu: Set mtu to 1024 [ 78.372958][ T5796] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.386608][ T5794] (null): rxe_set_mtu: Set mtu to 1024 [ 78.392332][ T5794] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.505869][ T5784] infiniband rxe0: set active [ 78.512775][ T5784] infiniband rxe0: added rxe_eth0 [ 78.519577][ T5422] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.574745][ T5784] RDS/IB: rxe0: added [ 78.579322][ T5784] smc: adding ib device rxe0 with port count 1 [ 78.605407][ T5784] smc: ib device rxe0 port 1 has pnetid [ 78.612639][ T5422] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.624133][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.864513][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.970883][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 79.008315][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 79.185379][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 79.196628][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.285190][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.293195][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.300566][ T5788] bridge_slave_0: entered allmulticast mode [ 79.310668][ T5788] bridge_slave_0: entered promiscuous mode [ 79.337167][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.346511][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.355174][ T5796] bridge_slave_0: entered allmulticast mode [ 79.373744][ T5796] bridge_slave_0: entered promiscuous mode [ 79.387180][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.396204][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.403585][ T5796] bridge_slave_1: entered allmulticast mode [ 79.410216][ T5796] bridge_slave_1: entered promiscuous mode [ 79.418775][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.426088][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.433305][ T5788] bridge_slave_1: entered allmulticast mode [ 79.439990][ T5788] bridge_slave_1: entered promiscuous mode [ 79.482236][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.500765][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.528073][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.568249][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.582048][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.616383][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.623970][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.631417][ T5794] bridge_slave_0: entered allmulticast mode [ 79.641237][ T5794] bridge_slave_0: entered promiscuous mode [ 79.667447][ T5788] team0: Port device team_slave_0 added [ 79.694463][ T5796] team0: Port device team_slave_0 added [ 79.706227][ T5788] team0: Port device team_slave_1 added [ 79.716235][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.724291][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.731568][ T5794] bridge_slave_1: entered allmulticast mode [ 79.738999][ T5794] bridge_slave_1: entered promiscuous mode [ 79.755932][ T5796] team0: Port device team_slave_1 added [ 79.826212][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.833452][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.859482][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.877690][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.889582][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.914747][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.921733][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.948173][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.977779][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.985047][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.012814][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.025335][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.032294][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.058451][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.079097][ T5794] team0: Port device team_slave_0 added [ 80.089072][ T5794] team0: Port device team_slave_1 added [ 80.106314][ T52] Bluetooth: hci0: command tx timeout [ 80.143169][ T5796] hsr_slave_0: entered promiscuous mode [ 80.149655][ T5796] hsr_slave_1: entered promiscuous mode [ 80.168250][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.175662][ T52] Bluetooth: hci1: command tx timeout [ 80.188010][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.214222][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.255510][ T5788] hsr_slave_0: entered promiscuous mode [ 80.262458][ T5788] hsr_slave_1: entered promiscuous mode [ 80.268854][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.276932][ T5788] Cannot create hsr debugfs directory [ 80.298677][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.306131][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.332512][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.343457][ T52] Bluetooth: hci3: command tx timeout [ 80.343490][ T5791] Bluetooth: hci2: command tx timeout [ 80.447221][ T5794] hsr_slave_0: entered promiscuous mode [ 80.454303][ T5794] hsr_slave_1: entered promiscuous mode [ 80.460648][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.471784][ T5794] Cannot create hsr debugfs directory [ 80.656479][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 80.931378][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.939108][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.950700][ T5784] bridge_slave_0: entered allmulticast mode [ 80.958313][ T5784] bridge_slave_0: entered promiscuous mode [ 80.971197][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.979456][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.991100][ T5784] bridge_slave_1: entered allmulticast mode [ 80.998049][ T5784] bridge_slave_1: entered promiscuous mode [ 81.105565][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.120375][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.133784][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.144750][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.177482][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.197957][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.236629][ T5784] team0: Port device team_slave_0 added [ 81.253946][ T5445] infiniband rxe0: set active [ 81.264239][ T5784] team0: Port device team_slave_1 added [ 81.288335][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.301202][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.364368][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.386805][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.393886][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.421995][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.435574][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.442528][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.469533][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.488021][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.515620][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.534453][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.553981][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.563752][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.601720][ T5784] hsr_slave_0: entered promiscuous mode [ 81.612504][ T5784] hsr_slave_1: entered promiscuous mode [ 81.622524][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.630812][ T5784] Cannot create hsr debugfs directory [ 81.637863][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.846201][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.966915][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.008423][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.034179][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.075135][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.082567][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.094028][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.101163][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.113778][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.120905][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.141887][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.173002][ T52] Bluetooth: hci0: command tx timeout [ 82.181792][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.188964][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.213951][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.249643][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.258590][ T52] Bluetooth: hci1: command tx timeout [ 82.261802][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.301519][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.312463][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.357231][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.364408][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.397070][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.404215][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.412907][ T52] Bluetooth: hci2: command tx timeout [ 82.418823][ T5791] Bluetooth: hci3: command tx timeout [ 82.618865][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.668145][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.697430][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.704618][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.739719][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.746927][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.847174][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.970110][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.029986][ T5794] veth0_vlan: entered promiscuous mode [ 83.057674][ T5794] veth1_vlan: entered promiscuous mode [ 83.105902][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.139556][ T5794] veth0_macvtap: entered promiscuous mode [ 83.179674][ T5794] veth1_macvtap: entered promiscuous mode [ 83.199561][ T5796] veth0_vlan: entered promiscuous mode [ 83.224427][ T5796] veth1_vlan: entered promiscuous mode [ 83.255704][ T5788] veth0_vlan: entered promiscuous mode [ 83.265547][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.302963][ T5796] veth0_macvtap: entered promiscuous mode [ 83.320623][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.330865][ T5796] veth1_macvtap: entered promiscuous mode [ 83.341202][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.371592][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.390263][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.402177][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.410776][ T5788] veth1_vlan: entered promiscuous mode [ 83.420559][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.432015][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.441039][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.451809][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.486387][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.498842][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.511958][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.537491][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.547533][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.556531][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.565450][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.597908][ T5788] veth0_macvtap: entered promiscuous mode [ 83.621444][ T5784] veth0_vlan: entered promiscuous mode [ 83.639824][ T5788] veth1_macvtap: entered promiscuous mode [ 83.657646][ T5784] veth1_vlan: entered promiscuous mode [ 83.691127][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.712505][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.725265][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.735762][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.747119][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.771878][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.784572][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.795726][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.806342][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.817626][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.856452][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.865971][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.876818][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.885654][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.900949][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.914011][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.965339][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.981235][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.991558][ T5784] veth0_macvtap: entered promiscuous mode [ 84.033077][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.040922][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.051942][ T5784] veth1_macvtap: entered promiscuous mode [ 84.111428][ T5794] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.144740][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.152598][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.166612][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.181262][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.192802][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.204351][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.214490][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.226166][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.237688][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.253705][ T5791] Bluetooth: hci0: command tx timeout [ 84.291091][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.305598][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.315574][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.326292][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.336950][ T52] Bluetooth: hci1: command tx timeout [ 84.348009][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.358610][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.370514][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.394146][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.403146][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.411853][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.421751][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.447082][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.457633][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.493334][ T52] Bluetooth: hci2: command tx timeout [ 84.493354][ T5791] Bluetooth: hci3: command tx timeout [ 84.510290][ T5886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.531273][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.547927][ T5861] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 84.563017][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.604871][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.636601][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.670091][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.678738][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.747495][ T5861] usb 1-1: not running at top speed; connect to a high speed hub [ 84.759884][ T5861] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 84.779186][ T5861] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 84.788710][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.798124][ T5861] usb 1-1: Product: syz [ 84.807961][ T5861] usb 1-1: Manufacturer: syz [ 84.812589][ T5861] usb 1-1: SerialNumber: syz [ 84.877653][ T5861] oti6858 1-1:1.0: oti6858 converter detected [ 84.918283][ T5861] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 84.998733][ T5892] 0x000000000000-0x000000010000 : "" [ 85.012202][ T5892] ftl_cs: FTL header not found. [ 85.025433][ T5892] FAULT_INJECTION: forcing a failure. [ 85.025433][ T5892] name failslab, interval 1, probability 0, space 0, times 1 [ 85.056366][ T5892] CPU: 1 PID: 5892 Comm: syz.3.5 Not tainted syzkaller #0 [ 85.063530][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.073620][ T5892] Call Trace: [ 85.076928][ T5892] [ 85.079882][ T5892] dump_stack_lvl+0x18c/0x250 [ 85.084613][ T5892] ? show_regs_print_info+0x20/0x20 [ 85.089851][ T5892] ? load_image+0x420/0x420 [ 85.094391][ T5892] ? __might_sleep+0xe0/0xe0 [ 85.099009][ T5892] ? __lock_acquire+0x7eb0/0x7eb0 [ 85.104062][ T5892] should_fail_ex+0x394/0x4c0 [ 85.108769][ T5892] should_failslab+0x9/0x20 [ 85.113288][ T5892] slab_pre_alloc_hook+0x59/0x300 [ 85.118331][ T5892] kmem_cache_alloc+0x5a/0x2d0 [ 85.123091][ T5892] ? __kernfs_new_node+0xe5/0x7f0 [ 85.128120][ T5892] __kernfs_new_node+0xe5/0x7f0 [ 85.132977][ T5892] ? kernfs_new_node+0x260/0x260 [ 85.137921][ T5892] ? up_write+0x1be/0x410 [ 85.142246][ T5892] kernfs_new_node+0x14c/0x260 [ 85.147008][ T5892] __kernfs_create_file+0x4b/0x2e0 [ 85.152114][ T5892] sysfs_add_file_mode_ns+0x237/0x2f0 [ 85.157493][ T5892] internal_create_group+0x431/0xd10 [ 85.162777][ T5892] ? kernfs_add_one+0x149/0x6b0 [ 85.167681][ T5892] ? sysfs_create_group+0x20/0x20 [ 85.172738][ T5892] ? sysfs_create_dir_ns+0x16b/0x2a0 [ 85.178036][ T5892] ? sysfs_warn_dup+0xa0/0xa0 [ 85.182714][ T5892] ? do_syscall_64+0x55/0xb0 [ 85.187318][ T5892] sysfs_create_groups+0x59/0x120 [ 85.192344][ T5892] kobject_add_internal+0x65e/0xc90 [ 85.197543][ T5892] kobject_add+0x164/0x240 [ 85.201949][ T5892] ? blk_register_queue+0x57/0x440 [ 85.207066][ T5892] ? kobject_init+0x1d0/0x1d0 [ 85.211746][ T5892] ? kobject_init+0x7f/0x1d0 [ 85.216333][ T5892] blk_register_queue+0xaf/0x440 [ 85.221278][ T5892] device_add_disk+0x68c/0xfe0 [ 85.226043][ T5892] add_mtd_blktrans_dev+0x1039/0x14e0 [ 85.231421][ T5892] mtdblock_add_mtd+0x18a/0x240 [ 85.236272][ T5892] blktrans_notify_add+0x99/0xe0 [ 85.241209][ T5892] add_mtd_device+0x11b3/0x17e0 [ 85.246065][ T5892] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 85.251860][ T5892] ? __mutex_lock+0x30d/0xce0 [ 85.256534][ T5892] ? mtd_cls_resume+0x130/0x130 [ 85.261396][ T5892] mtd_add_partition+0x30a/0x510 [ 85.266330][ T5892] ? release_mtd_partition+0x80/0x80 [ 85.271614][ T5892] ? __might_fault+0xaa/0x120 [ 85.276286][ T5892] ? __might_fault+0xc6/0x120 [ 85.280950][ T5892] ? __might_fault+0xaa/0x120 [ 85.285622][ T5892] mtdchar_blkpg_ioctl+0x287/0x2b0 [ 85.290771][ T5892] ? shrink_ecclayout+0xae0/0xae0 [ 85.295800][ T5892] ? __lock_acquire+0x1431/0x7eb0 [ 85.300823][ T5892] ? __might_fault+0xaa/0x120 [ 85.305493][ T5892] ? __might_fault+0xc6/0x120 [ 85.310167][ T5892] ? __might_fault+0xaa/0x120 [ 85.314850][ T5892] mtdchar_ioctl+0x14f7/0x1b80 [ 85.319620][ T5892] ? mtdchar_close+0x180/0x180 [ 85.324384][ T5892] ? verify_lock_unused+0x140/0x140 [ 85.329574][ T5892] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 85.335208][ T5892] ? tomoyo_path_number_perm+0x217/0x5e0 [ 85.340839][ T5892] ? __lock_acquire+0x7eb0/0x7eb0 [ 85.345866][ T5892] ? tomoyo_path_number_perm+0x217/0x5e0 [ 85.351491][ T5892] ? __mutex_trylock_common+0x160/0x270 [ 85.357029][ T5892] ? trace_raw_output_contention_end+0xd0/0xd0 [ 85.363185][ T5892] ? rcu_is_watching+0x15/0xb0 [ 85.367945][ T5892] ? trace_contention_end+0x39/0xe0 [ 85.373135][ T5892] ? __mutex_lock+0x30d/0xce0 [ 85.377822][ T5892] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 85.383201][ T5892] ? mutex_lock_nested+0x20/0x20 [ 85.388139][ T5892] ? __fget_files+0x28/0x460 [ 85.392754][ T5892] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 85.397959][ T5892] ? mtdchar_write+0x5c0/0x5c0 [ 85.402725][ T5892] __se_sys_ioctl+0xfd/0x170 [ 85.407327][ T5892] do_syscall_64+0x55/0xb0 [ 85.411746][ T5892] ? clear_bhb_loop+0x40/0x90 [ 85.416433][ T5892] ? clear_bhb_loop+0x40/0x90 [ 85.421120][ T5892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.427024][ T5892] RIP: 0033:0x7fbd8699fb19 [ 85.431459][ T5892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.451057][ T5892] RSP: 002b:00007fbd87849028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.459467][ T5892] RAX: ffffffffffffffda RBX: 00007fbd86c25fa0 RCX: 00007fbd8699fb19 [ 85.467435][ T5892] RDX: 0000200000000a80 RSI: 0000000000001269 RDI: 0000000000000004 [ 85.475400][ T5892] RBP: 00007fbd86a37af8 R08: 0000000000000000 R09: 0000000000000000 [ 85.483364][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.491328][ T5892] R13: 00007fbd86c26038 R14: 00007fbd86c25fa0 R15: 00007ffe25e3fd18 [ 85.499304][ T5892] [ 85.651277][ T5892] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock1) [ 85.704410][ T5901] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.742837][ T790] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.880817][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 85.934617][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 85.944378][ T790] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 85.963016][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.986842][ T5908] UBIFS error (pid: 5908): cannot open "./file0", error -22 [ 85.986946][ T790] usb 2-1: Product: syz [ 86.003844][ T790] usb 2-1: Manufacturer: syz [ 86.008473][ T790] usb 2-1: SerialNumber: syz [ 86.024740][ T790] usb 2-1: config 0 descriptor?? [ 86.038663][ T790] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 86.171185][ T5913] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10'. [ 86.249470][ T5861] usb 1-1: USB disconnect, device number 2 [ 86.283300][ T5861] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 86.311721][ T5861] oti6858 1-1:1.0: device disconnected [ 86.336755][ T5791] Bluetooth: hci0: command tx timeout [ 86.423263][ T5791] Bluetooth: hci1: command tx timeout [ 86.574511][ T5791] Bluetooth: hci2: command tx timeout [ 86.579953][ T5791] Bluetooth: hci3: command tx timeout [ 86.821998][ T42] cfg80211: failed to load regulatory.db [ 87.393451][ T5863] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 87.577792][ T5863] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 87.585339][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 87.596217][ T5863] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 87.608647][ T5863] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 87.617286][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 87.635435][ T5863] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 87.647427][ T5863] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 87.655161][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 87.666393][ T5863] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 87.681477][ T5863] usb 1-1: string descriptor 0 read error: -22 [ 87.689098][ T5863] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 87.698334][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.711781][ T5863] adutux 1-1:168.0: interrupt endpoints not found [ 87.949083][ T5863] usb 1-1: USB disconnect, device number 3 [ 88.092184][ T790] gspca_ov534_9: reg_r err -71 [ 88.344651][ T27] audit: type=1800 audit(1793650821.595:2): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 88.526595][ T790] gspca_ov534_9: Unknown sensor 0000 [ 88.526686][ T790] ov534_9: probe of 2-1:0.0 failed with error -22 [ 88.547126][ T790] usb 2-1: USB disconnect, device number 2 [ 89.362761][ T5863] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.642177][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.674019][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 89.803532][ T5863] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 89.901333][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.924185][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.013009][ T5863] usb 1-1: Product: syz [ 90.017622][ T5863] usb 1-1: Manufacturer: syz [ 90.033312][ T5863] usb 1-1: SerialNumber: syz [ 90.039861][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.056007][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.072851][ T8] usb 4-1: Product: syz [ 90.087527][ T5863] usb 1-1: config 0 descriptor?? [ 90.095036][ T8] usb 4-1: Manufacturer: syz [ 90.100816][ T27] audit: type=1800 audit(1793650823.325:3): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.27" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 90.131162][ T8] usb 4-1: SerialNumber: syz [ 90.142105][ T5863] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 90.792245][ T6024] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 90.875123][ T6028] syz.2.40[6028]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.901978][ T6028] loop2: detected capacity change from 0 to 1024 [ 90.930625][ T6028] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 91.012942][ T6028] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 91.042193][ T6028] EXT4-fs (loop2): invalid journal inode [ 91.072066][ T6028] EXT4-fs (loop2): can't get journal size [ 91.099359][ T6028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.168976][ T6033] 9pnet_fd: p9_fd_create_tcp (6033): problem connecting socket to 127.0.0.1 [ 91.185575][ T8] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 91.196510][ T8] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 91.204482][ T8] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 91.391097][ T8] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 91.434647][ T8] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 91.482832][ T8] usb 4-1: USB disconnect, device number 2 [ 91.510243][ T8] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 91.828536][ T27] audit: type=1800 audit(1793650825.075:4): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.43" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 91.966613][ T5863] gspca_ov534_9: reg_r err -71 [ 92.333000][ T5863] gspca_ov534_9: Unknown sensor 0000 [ 92.333083][ T5863] ov534_9: probe of 1-1:0.0 failed with error -22 [ 92.368829][ T5863] usb 1-1: USB disconnect, device number 4 [ 92.521399][ T6080] 9pnet_fd: p9_fd_create_tcp (6080): problem connecting socket to 127.0.0.1 [ 92.933614][ T5858] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.141068][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 93.156003][ T5858] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 93.179528][ T5858] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.194093][ T27] audit: type=1800 audit(1793650826.425:5): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.53" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 93.200295][ T5858] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.237444][ T5858] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 93.247892][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.261162][ T5858] usb 1-1: config 0 descriptor?? [ 93.634772][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.61'. [ 93.683651][ T5858] usbhid 1-1:0.0: can't add hid device: -71 [ 93.694323][ T5858] usbhid: probe of 1-1:0.0 failed with error -71 [ 93.707906][ T5858] usb 1-1: USB disconnect, device number 5 [ 93.717485][ T6121] 9pnet_fd: p9_fd_create_tcp (6121): problem connecting socket to 127.0.0.1 [ 93.882864][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.082786][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 94.094210][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 94.103658][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.111890][ T9] usb 2-1: Product: syz [ 94.118091][ T9] usb 2-1: Manufacturer: syz [ 94.123291][ T9] usb 2-1: SerialNumber: syz [ 94.134274][ T9] usb 2-1: config 0 descriptor?? [ 94.147510][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 94.303641][ T27] audit: type=1800 audit(1793650827.555:6): pid=6132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.67" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 94.377541][ T6136] FAULT_INJECTION: forcing a failure. [ 94.377541][ T6136] name failslab, interval 1, probability 0, space 0, times 0 [ 94.465029][ T6136] CPU: 1 PID: 6136 Comm: syz.0.68 Not tainted syzkaller #0 [ 94.472290][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.482375][ T6136] Call Trace: [ 94.485669][ T6136] [ 94.488613][ T6136] dump_stack_lvl+0x18c/0x250 [ 94.493319][ T6136] ? show_regs_print_info+0x20/0x20 [ 94.498546][ T6136] ? load_image+0x420/0x420 [ 94.503079][ T6136] ? __might_sleep+0xe0/0xe0 [ 94.507697][ T6136] ? __lock_acquire+0x7eb0/0x7eb0 [ 94.512756][ T6136] should_fail_ex+0x394/0x4c0 [ 94.517464][ T6136] should_failslab+0x9/0x20 [ 94.521982][ T6136] slab_pre_alloc_hook+0x59/0x300 [ 94.527034][ T6136] kmem_cache_alloc_lru+0x4d/0x2c0 [ 94.532176][ T6136] ? shmem_alloc_inode+0x28/0x40 [ 94.537144][ T6136] shmem_alloc_inode+0x28/0x40 [ 94.541944][ T6136] ? shmem_match+0x160/0x160 [ 94.546540][ T6136] new_inode_pseudo+0x63/0x1d0 [ 94.551326][ T6136] new_inode+0x22/0x1d0 [ 94.555509][ T6136] shmem_get_inode+0x34d/0xcd0 [ 94.560284][ T6136] shmem_tmpfile+0x58/0x140 [ 94.564797][ T6136] vfs_tmpfile+0x491/0x620 [ 94.569228][ T6136] kernel_tmpfile_open+0x4d/0x80 [ 94.574153][ T6136] ovl_get_workdir+0x59f/0x1770 [ 94.578994][ T6136] ? do_raw_spin_unlock+0x121/0x230 [ 94.584184][ T6136] ? ovl_get_upper+0x5c0/0x5c0 [ 94.586981][ T6142] capability: warning: `syz.3.70' uses deprecated v2 capabilities in a way that may be insecure [ 94.588928][ T6136] ? ovl_inuse_trylock+0xbd/0xd0 [ 94.604332][ T6136] ? ovl_get_upper+0x3c3/0x5c0 [ 94.609109][ T6136] ? ovl_fill_super+0x1280/0x1280 [ 94.614149][ T6136] ? ovl_fill_super+0x2dd/0x1280 [ 94.619100][ T6136] ? rcu_is_watching+0x15/0xb0 [ 94.623869][ T6136] ? ovl_fill_super+0x2dd/0x1280 [ 94.628825][ T6136] ? __kmalloc+0xe5/0x240 [ 94.633188][ T6136] ovl_fill_super+0x77a/0x1280 [ 94.637972][ T6136] ? virtio_fs_zero_page_range+0x140/0x140 [ 94.643792][ T6136] get_tree_nodev+0xb5/0x140 [ 94.648400][ T6136] vfs_get_tree+0x8c/0x280 [ 94.652838][ T6136] do_new_mount+0x24a/0xa60 [ 94.657375][ T6136] __se_sys_mount+0x2e7/0x3d0 [ 94.662080][ T6136] ? __x64_sys_mount+0xc0/0xc0 [ 94.666868][ T6136] ? lockdep_hardirqs_on+0x98/0x150 [ 94.672089][ T6136] ? __x64_sys_mount+0x20/0xc0 [ 94.676883][ T6136] do_syscall_64+0x55/0xb0 [ 94.681326][ T6136] ? clear_bhb_loop+0x40/0x90 [ 94.686027][ T6136] ? clear_bhb_loop+0x40/0x90 [ 94.690727][ T6136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.696644][ T6136] RIP: 0033:0x7fe8a519fb19 [ 94.701081][ T6136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.720702][ T6136] RSP: 002b:00007fe8a5fb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.729146][ T6136] RAX: ffffffffffffffda RBX: 00007fe8a5426090 RCX: 00007fe8a519fb19 [ 94.737145][ T6136] RDX: 0000200000000740 RSI: 0000200000000700 RDI: 0000000000000000 [ 94.745145][ T6136] RBP: 00007fe8a5237af8 R08: 0000200000000780 R09: 0000000000000000 [ 94.753142][ T6136] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 94.761135][ T6136] R13: 00007fe8a5426128 R14: 00007fe8a5426090 R15: 00007ffce76fa4d8 [ 94.769144][ T6136] [ 94.783828][ T6136] overlayfs: upper fs does not support tmpfile. [ 95.046852][ T6147] 9pnet_fd: p9_fd_create_tcp (6147): problem connecting socket to 127.0.0.1 [ 95.119486][ T6149] jffs2: notice: (6149) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.249260][ T6153] syz.0.73 uses obsolete (PF_INET,SOCK_PACKET) [ 95.435867][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.76'. [ 95.778869][ T9] gspca_ov534_9: reg_r err -71 [ 96.039479][ T27] audit: type=1800 audit(1793650829.285:7): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.78" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 96.182975][ T9] gspca_ov534_9: Unknown sensor 0000 [ 96.183059][ T9] ov534_9: probe of 2-1:0.0 failed with error -22 [ 96.224195][ T9] usb 2-1: USB disconnect, device number 3 [ 96.289681][ T6186] 9pnet_fd: p9_fd_create_tcp (6186): problem connecting socket to 127.0.0.1 [ 96.362264][ T5858] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.813032][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.022832][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 97.046862][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.077547][ T9] usb 4-1: config 0 has no interface number 0 [ 97.116536][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 97.220993][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.326121][ T9] usb 4-1: Product: syz [ 97.384054][ T9] usb 4-1: Manufacturer: syz [ 97.459495][ T9] usb 4-1: SerialNumber: syz [ 97.682637][ T9] usb 4-1: config 0 descriptor?? [ 97.725667][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 97.843997][ T6230] 9pnet_fd: p9_fd_create_tcp (6230): problem connecting socket to 127.0.0.1 [ 97.928212][ T6234] netlink: 'syz.1.94': attribute type 2 has an invalid length. [ 98.092134][ T6240] loop1: detected capacity change from 0 to 1024 [ 98.103158][ T5863] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.128492][ T6240] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 98.148576][ T6240] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 98.169415][ T6240] EXT4-fs (loop1): invalid journal inode [ 98.180790][ T6240] EXT4-fs (loop1): can't get journal size [ 98.198658][ T6240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.369312][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 98.399218][ T5863] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 98.410523][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.416801][ T6246] FAULT_INJECTION: forcing a failure. [ 98.416801][ T6246] name failslab, interval 1, probability 0, space 0, times 0 [ 98.427810][ T5863] usb 3-1: Product: syz [ 98.431436][ T6246] CPU: 1 PID: 6246 Comm: syz.1.98 Not tainted syzkaller #0 [ 98.436042][ T5863] usb 3-1: Manufacturer: syz [ 98.442736][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.442749][ T6246] Call Trace: [ 98.442758][ T6246] [ 98.442766][ T6246] dump_stack_lvl+0x18c/0x250 [ 98.442800][ T6246] ? show_regs_print_info+0x20/0x20 [ 98.450413][ T5863] usb 3-1: SerialNumber: syz [ 98.457488][ T6246] ? load_image+0x420/0x420 [ 98.457528][ T6246] should_fail_ex+0x394/0x4c0 [ 98.457558][ T6246] should_failslab+0x9/0x20 [ 98.464049][ T5863] usb 3-1: config 0 descriptor?? [ 98.468441][ T6246] slab_pre_alloc_hook+0x59/0x300 [ 98.468466][ T6246] ? __asan_memcpy+0x40/0x70 [ 98.497195][ T5863] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 98.501832][ T6246] kmem_cache_alloc+0x5a/0x2d0 [ 98.501859][ T6246] ? skb_clone+0x1eb/0x370 [ 98.501884][ T6246] skb_clone+0x1eb/0x370 [ 98.526043][ T6246] ? dev_queue_xmit_nit+0x227/0xba0 [ 98.531288][ T6246] dev_queue_xmit_nit+0x23f/0xba0 [ 98.536317][ T6246] ? dev_queue_xmit_nit+0x2d/0xba0 [ 98.541451][ T6246] dev_hard_start_xmit+0x150/0x790 [ 98.546593][ T6246] __dev_queue_xmit+0x1d1e/0x3a30 [ 98.551633][ T6246] ? __dev_queue_xmit+0x6d1/0x3a30 [ 98.556755][ T6246] ? packet_parse_headers+0x314/0xaf0 [ 98.562133][ T6246] ? packet_parse_headers+0x8e8/0xaf0 [ 98.567502][ T6246] ? netdev_core_pick_tx+0x370/0x370 [ 98.572798][ T6246] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 98.578345][ T6246] ? packet_xmit+0x66/0x340 [ 98.582848][ T6246] ? packet_sendmsg+0x3756/0x49d0 [ 98.587868][ T6246] packet_sendmsg+0x38a0/0x49d0 [ 98.592740][ T6246] ? verify_lock_unused+0x140/0x140 [ 98.597942][ T6246] ? aa_sk_perm+0x7bb/0x8e0 [ 98.602447][ T6246] ? packet_getsockopt+0xad0/0xad0 [ 98.607581][ T6246] ? tomoyo_del_condition+0xf0/0x3e0 [ 98.612865][ T6246] ? aa_sock_msg_perm+0x94/0x150 [ 98.617798][ T6246] ? apparmor_socket_sendmsg+0x23d/0x330 [ 98.623435][ T6246] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 98.628728][ T6246] ? security_socket_sendmsg+0x80/0xa0 [ 98.634185][ T6246] ? packet_getsockopt+0xad0/0xad0 [ 98.639301][ T6246] ____sys_sendmsg+0x61b/0x980 [ 98.644084][ T6246] ? __asan_memset+0x22/0x40 [ 98.648680][ T6246] ? __sys_sendmsg_sock+0x30/0x30 [ 98.653705][ T6246] ? __import_iovec+0x3fa/0x850 [ 98.658567][ T6246] ? import_iovec+0x73/0xa0 [ 98.663075][ T6246] ___sys_sendmsg+0x2a6/0x360 [ 98.667757][ T6246] ? __sys_sendmsg+0x2b0/0x2b0 [ 98.672556][ T6246] __sys_sendmmsg+0x2ca/0x510 [ 98.677232][ T6246] ? __ia32_sys_sendmsg+0x90/0x90 [ 98.682259][ T6246] ? __ia32_sys_get_robust_list+0x110/0x110 [ 98.688159][ T6246] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 98.694144][ T6246] ? lock_chain_count+0x20/0x20 [ 98.699000][ T6246] __x64_sys_sendmmsg+0xa0/0xb0 [ 98.703855][ T6246] do_syscall_64+0x55/0xb0 [ 98.708271][ T6246] ? clear_bhb_loop+0x40/0x90 [ 98.713005][ T6246] ? clear_bhb_loop+0x40/0x90 [ 98.717706][ T6246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.723605][ T6246] RIP: 0033:0x7facc379fb19 [ 98.728018][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.747619][ T6246] RSP: 002b:00007facc19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.756030][ T6246] RAX: ffffffffffffffda RBX: 00007facc3a25fa0 RCX: 00007facc379fb19 [ 98.764005][ T6246] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 98.771969][ T6246] RBP: 00007facc3837af8 R08: 0000000000000000 R09: 0000000000000000 [ 98.779934][ T6246] R10: 0000000024044015 R11: 0000000000000246 R12: 0000000000000000 [ 98.787902][ T6246] R13: 00007facc3a26038 R14: 00007facc3a25fa0 R15: 00007ffc659c31b8 [ 98.795880][ T6246] [ 98.811516][ T9] gspca_spca1528: reg_w err -71 [ 98.853005][ T9] spca1528: probe of 4-1:0.1 failed with error -71 [ 98.868889][ T9] usb 4-1: USB disconnect, device number 3 [ 98.931116][ T6250] syzkaller1: entered promiscuous mode [ 98.942906][ T6250] syzkaller1: entered allmulticast mode [ 99.903940][ T6259] 9pnet_fd: p9_fd_create_tcp (6259): problem connecting socket to 127.0.0.1 [ 100.136072][ T5863] gspca_ov534_9: reg_r err -71 [ 100.159957][ T6265] warning: `syz.0.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.367032][ T6273] ======================================================= [ 100.367032][ T6273] WARNING: The mand mount option has been deprecated and [ 100.367032][ T6273] and is ignored by this kernel. Remove the mand [ 100.367032][ T6273] option from the mount to silence this warning. [ 100.367032][ T6273] ======================================================= [ 100.534323][ T5863] gspca_ov534_9: Unknown sensor 0000 [ 100.534406][ T5863] ov534_9: probe of 3-1:0.0 failed with error -22 [ 100.556929][ T5863] usb 3-1: USB disconnect, device number 2 [ 100.622987][ T5858] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 100.824330][ T5858] usb 4-1: not running at top speed; connect to a high speed hub [ 100.836502][ T5858] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 100.862229][ T5858] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 100.879554][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.888370][ T5858] usb 4-1: Product: syz [ 100.892565][ T5858] usb 4-1: Manufacturer: syz [ 100.911641][ T5858] usb 4-1: SerialNumber: syz [ 100.922085][ T5858] oti6858 4-1:1.0: oti6858 converter detected [ 100.937425][ T5858] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 101.812875][ T5863] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 101.880849][ T6294] 9pnet_fd: p9_fd_create_tcp (6294): problem connecting socket to 127.0.0.1 [ 102.015648][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.044533][ T5863] usb 3-1: not running at top speed; connect to a high speed hub [ 102.062601][ T5863] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 102.076742][ T5863] usb 3-1: config 1 interface 0 has no altsetting 0 [ 102.094512][ T5863] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.40 [ 102.104589][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.112614][ T5863] usb 3-1: Product: syz [ 102.117493][ T5863] usb 3-1: Manufacturer: syz [ 102.122443][ T5863] usb 3-1: SerialNumber: syz [ 102.164408][ T6283] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 102.395546][ T5863] usbhid 3-1:1.0: can't add hid device: -71 [ 102.405830][ T5863] usbhid: probe of 3-1:1.0 failed with error -71 [ 102.423294][ T5863] usb 3-1: USB disconnect, device number 3 [ 102.482924][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.682736][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 102.700198][ T9] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 102.709993][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.718741][ T9] usb 1-1: Product: syz [ 102.723122][ T9] usb 1-1: Manufacturer: syz [ 102.727732][ T9] usb 1-1: SerialNumber: syz [ 102.743968][ T9] usb 1-1: config 0 descriptor?? [ 102.759871][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 103.357381][ T5863] usb 4-1: USB disconnect, device number 4 [ 103.393973][ T5863] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 103.411236][ T5863] oti6858 4-1:1.0: device disconnected [ 103.692471][ T6323] Zero length message leads to an empty skb [ 104.228641][ T9] gspca_ov534_9: reg_r err -71 [ 104.247473][ T6326] 9pnet_fd: p9_fd_create_tcp (6326): problem connecting socket to 127.0.0.1 [ 104.732803][ T9] gspca_ov534_9: Unknown sensor 0000 [ 104.732973][ T9] ov534_9: probe of 1-1:0.0 failed with error -22 [ 104.747422][ T9] usb 1-1: USB disconnect, device number 6 [ 104.842984][ T174] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 104.996117][ T6348] 9pnet_fd: p9_fd_create_tcp (6348): problem connecting socket to 127.0.0.1 [ 105.034301][ T174] usb 4-1: not running at top speed; connect to a high speed hub [ 105.049338][ T174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 105.066017][ T174] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 105.078632][ T174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.087959][ T174] usb 4-1: Product: syz [ 105.104023][ T174] usb 4-1: Manufacturer: syz [ 105.115374][ T174] usb 4-1: SerialNumber: syz [ 105.141631][ T174] oti6858 4-1:1.0: oti6858 converter detected [ 105.163585][ T174] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 105.202455][ T6354] Bluetooth: MGMT ver 1.22 [ 105.679886][ T6369] null_blk: disk nullb1 created [ 105.734948][ T174] usb 4-1: USB disconnect, device number 5 [ 105.766548][ T174] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 105.776571][ T6371] 9pnet_fd: p9_fd_create_tcp (6371): problem connecting socket to 127.0.0.1 [ 105.798124][ T174] oti6858 4-1:1.0: device disconnected [ 106.316440][ T6380] loop3: detected capacity change from 0 to 1024 [ 106.338930][ T6380] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 106.349721][ T6380] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 106.360549][ T6380] EXT4-fs (loop3): invalid journal inode [ 106.367489][ T6380] EXT4-fs (loop3): can't get journal size [ 106.398681][ T6380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.445621][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'. [ 106.570489][ T6388] FAULT_INJECTION: forcing a failure. [ 106.570489][ T6388] name failslab, interval 1, probability 0, space 0, times 0 [ 106.583307][ T6388] CPU: 0 PID: 6388 Comm: syz.2.153 Not tainted syzkaller #0 [ 106.590638][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.600716][ T6388] Call Trace: [ 106.604018][ T6388] [ 106.606969][ T6388] dump_stack_lvl+0x18c/0x250 [ 106.611679][ T6388] ? show_regs_print_info+0x20/0x20 [ 106.616915][ T6388] ? load_image+0x420/0x420 [ 106.621446][ T6388] ? __might_sleep+0xe0/0xe0 [ 106.626061][ T6388] ? __lock_acquire+0x7eb0/0x7eb0 [ 106.631113][ T6388] should_fail_ex+0x394/0x4c0 [ 106.635840][ T6388] should_failslab+0x9/0x20 [ 106.640370][ T6388] slab_pre_alloc_hook+0x59/0x300 [ 106.645413][ T6388] ? __lock_acquire+0x7eb0/0x7eb0 [ 106.650441][ T6388] ? dummy_alloc_request+0x7f/0x130 [ 106.655652][ T6388] __kmem_cache_alloc_node+0x53/0x260 [ 106.661024][ T6388] ? dummy_alloc_request+0x7f/0x130 [ 106.666223][ T6388] kmalloc_trace+0x2a/0xe0 [ 106.670649][ T6388] dummy_alloc_request+0x7f/0x130 [ 106.675674][ T6388] usb_ep_alloc_request+0x61/0x250 [ 106.680784][ T6388] gadget_bind+0xec/0x5b0 [ 106.685109][ T6388] ? kernfs_put+0x309/0x360 [ 106.689610][ T6388] ? gadget_disconnect+0x10/0x10 [ 106.694543][ T6388] gadget_bind_driver+0x2b3/0x770 [ 106.699577][ T6388] ? gadget_match_driver+0x130/0x130 [ 106.704856][ T6388] really_probe+0x24a/0xae0 [ 106.709364][ T6388] ? pm_runtime_barrier+0x14b/0x1c0 [ 106.714566][ T6388] __driver_probe_device+0x1f5/0x390 [ 106.719852][ T6388] driver_probe_device+0x4f/0x420 [ 106.724878][ T6388] __driver_attach+0x444/0x6d0 [ 106.729646][ T6388] bus_for_each_dev+0x235/0x2b0 [ 106.734496][ T6388] ? driver_attach+0x50/0x50 [ 106.739086][ T6388] ? bus_remove_file+0x140/0x140 [ 106.744023][ T6388] ? do_raw_spin_unlock+0x121/0x230 [ 106.749222][ T6388] bus_add_driver+0x340/0x630 [ 106.753906][ T6388] driver_register+0x23a/0x310 [ 106.758677][ T6388] usb_gadget_register_driver_owner+0xf9/0x270 [ 106.764829][ T6388] raw_ioctl+0x1613/0x3d80 [ 106.769252][ T6388] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 106.774881][ T6388] ? tomoyo_path_number_perm+0x217/0x5e0 [ 106.780510][ T6388] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 106.785976][ T6388] ? make_qualifier+0x260/0x260 [ 106.790847][ T6388] ? __fget_files+0x28/0x460 [ 106.795446][ T6388] ? bpf_lsm_file_ioctl+0x9/0x10 [ 106.800380][ T6388] ? security_file_ioctl+0x80/0xa0 [ 106.805487][ T6388] ? make_qualifier+0x260/0x260 [ 106.810335][ T6388] __se_sys_ioctl+0xfd/0x170 [ 106.814937][ T6388] do_syscall_64+0x55/0xb0 [ 106.819351][ T6388] ? clear_bhb_loop+0x40/0x90 [ 106.824027][ T6388] ? clear_bhb_loop+0x40/0x90 [ 106.828788][ T6388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.834678][ T6388] RIP: 0033:0x7efec579f7ab [ 106.839091][ T6388] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 106.858695][ T6388] RSP: 002b:00007efec66c7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.867198][ T6388] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007efec579f7ab [ 106.875172][ T6388] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 106.883139][ T6388] RBP: 00007efec66c8fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 106.891105][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.899084][ T6388] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 106.907065][ T6388] [ 106.918032][ T6388] raw-gadget.0 gadget.2: usb_ep_alloc_request failed [ 106.928351][ T6388] udc dummy_udc.2: failed to start USB Raw Gadget: -12 [ 106.957343][ T6388] raw-gadget.0: probe of gadget.2 failed with error -12 [ 106.978881][ T6388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.996160][ T6394] 9pnet_fd: p9_fd_create_tcp (6394): problem connecting socket to 127.0.0.1 [ 107.025729][ T6388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.792793][ T790] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.972920][ T790] usb 3-1: Using ep0 maxpacket: 32 [ 108.978213][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.987899][ T790] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 108.997373][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.007029][ T790] usb 3-1: config 0 descriptor?? [ 109.175089][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.191113][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 109.201180][ T23] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 109.216057][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.231721][ T790] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 109.242270][ T23] usb 2-1: config 0 descriptor?? [ 109.274991][ T790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.292234][ T790] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 109.307341][ T790] usb 3-1: media controller created [ 109.350132][ T790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.633721][ T790] az6027: usb out operation failed. (-71) [ 109.643740][ T790] stb0899_attach: Driver disabled by Kconfig [ 109.649807][ T790] az6027: no front-end attached [ 109.649807][ T790] [ 109.659530][ T790] az6027: usb out operation failed. (-71) [ 109.665565][ T790] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 109.676506][ T790] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 109.705198][ T790] dvb-usb: schedule remote query interval to 400 msecs. [ 109.724511][ T790] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 109.748263][ T790] usb 3-1: USB disconnect, device number 4 [ 109.874781][ T23] Bluetooth: Can't get version to change to load ram patch err [ 109.896687][ T790] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 109.907295][ T23] Bluetooth: Loading sysconfig file failed [ 109.915985][ T23] ath3k: probe of 2-1:0.0 failed with error -71 [ 109.936044][ T23] usb 2-1: USB disconnect, device number 4 [ 110.812913][ T790] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.005202][ T790] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 111.015082][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.026286][ T790] usb 2-1: config 0 descriptor?? [ 111.548223][ T6468] 0x000000000000-0x000000010000 : "" [ 111.609007][ T6468] ftl_cs: FTL header not found. [ 111.743506][ T790] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 111.772515][ T790] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 111.787615][ T790] [drm:udl_init] *ERROR* Selecting channel failed [ 111.808321][ T790] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 111.815890][ T790] [drm] Initialized udl on minor 2 [ 111.817828][ T6482] gadgetfs: bound to dummy_udc driver [ 111.844749][ T790] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.859131][ T6492] syz.3.196 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.962186][ T790] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 111.972280][ T5862] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.984138][ T790] usb 2-1: USB disconnect, device number 5 [ 111.992010][ T5862] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 112.173684][ T5863] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.427570][ T5863] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 112.441168][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.455762][ T5863] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 112.471565][ T5863] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 112.479802][ T5863] usb 4-1: Manufacturer: syz [ 112.479958][ T6504] netlink: 44 bytes leftover after parsing attributes in process `syz.0.200'. [ 112.492721][ T5863] usb 4-1: config 0 descriptor?? [ 112.612898][ T5863] rc_core: IR keymap rc-hauppauge not found [ 112.618961][ T5863] Registered IR keymap rc-empty [ 112.627718][ T5863] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 112.643149][ T5863] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 112.794005][ T6492] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 112.845548][ T6492] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 112.881130][ T5863] usb 4-1: USB disconnect, device number 6 [ 113.123726][ T790] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.304671][ T790] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 113.314571][ T790] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 113.326527][ T790] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 113.335773][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 113.345301][ T790] usb 1-1: Product: syz [ 113.349487][ T790] usb 1-1: Manufacturer: syz [ 113.361410][ T790] iuu_phoenix 1-1:1.0: iuu_phoenix converter detected [ 113.371692][ T790] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 113.412799][ T5858] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.508314][ T6527] syz.3.208 (pid 6527) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 113.539199][ T6527] loop0: detected capacity change from 0 to 4096 [ 113.701729][ T6527] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 113.715542][ T6527] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 113.722481][ T6527] loop0: [ 113.745904][ T5858] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 113.757981][ T5858] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 113.770912][ T5858] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 113.782876][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.791195][ T5858] usb 3-1: Product: syz [ 113.795896][ T5858] usb 3-1: Manufacturer: syz [ 113.800602][ T5858] usb 3-1: SerialNumber: syz [ 113.811380][ T5858] usb 3-1: config 0 descriptor?? [ 113.820981][ T5858] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 114.661226][ T6517] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90 [ 114.672755][ T174] usb 1-1: USB disconnect, device number 7 [ 114.688684][ T174] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 114.713814][ T174] iuu_phoenix 1-1:1.0: device disconnected [ 115.034406][ T5858] gspca_sunplus: reg_r err -71 [ 115.039508][ T5858] sunplus: probe of 3-1:0.0 failed with error -71 [ 115.052424][ T5858] usb 3-1: USB disconnect, device number 5 [ 115.820493][ T6551] block device autoloading is deprecated and will be removed. [ 116.172180][ T27] audit: type=1804 audit(1793650849.415:8): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/49/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 116.472395][ T5149] udevd[5149]: could not touch /run/udev/queue: No such file or directory [ 116.702620][ T6572] capability: warning: `syz.2.226' uses 32-bit capabilities (legacy support in use) [ 117.768503][ T27] audit: type=1800 audit(1793650851.015:9): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.232" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 118.682827][ T5863] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.877718][ T5863] usb 3-1: too many configurations: 87, using maximum allowed: 8 [ 118.909747][ T5863] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 118.922983][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.931086][ T5863] usb 3-1: Product: syz [ 118.940192][ T5863] usb 3-1: Manufacturer: syz [ 118.945413][ T5863] usb 3-1: SerialNumber: syz [ 119.102831][ T174] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.296188][ T174] usb 2-1: Using ep0 maxpacket: 8 [ 119.315307][ T174] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.333049][ T174] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.363012][ T174] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.377853][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 119.400577][ T174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.420787][ T174] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 119.432771][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.462604][ T174] usb 2-1: config 0 descriptor?? [ 119.499561][ T27] audit: type=1800 audit(1793650852.745:10): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.244" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 119.895942][ T174] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 119.907837][ T174] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 119.915217][ T174] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 119.929143][ T174] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 119.941580][ T174] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 119.951710][ T174] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 119.962255][ T174] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 119.973267][ T5858] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.980881][ T174] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 119.988432][ T174] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 119.995684][ T174] corsair 0003:1B1C:1B3E.0001: unknown main item tag 0x0 [ 120.003055][ T174] corsair 0003:1B1C:1B3E.0001: unbalanced collection at end of report description [ 120.015661][ T174] corsair 0003:1B1C:1B3E.0001: parse failed [ 120.022261][ T174] corsair: probe of 0003:1B1C:1B3E.0001 failed with error -22 [ 120.112380][ T174] usb 2-1: USB disconnect, device number 6 [ 120.183597][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 120.203956][ T5858] usb 1-1: config 3 has an invalid interface number: 120 but max is 0 [ 120.212184][ T5858] usb 1-1: config 3 has no interface number 0 [ 120.218772][ T5858] usb 1-1: config 3 interface 120 has no altsetting 0 [ 120.229706][ T5858] usb 1-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 120.239268][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.248114][ T5858] usb 1-1: Product: syz [ 120.252307][ T5858] usb 1-1: Manufacturer: syz [ 120.257440][ T5858] usb 1-1: SerialNumber: syz [ 120.482119][ T5858] usb 1-1: USB disconnect, device number 8 [ 122.035648][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -71 [ 122.063261][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -71 [ 122.090249][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -71 [ 122.113345][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -71 [ 122.137292][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -71 [ 122.149507][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 122.160413][ T5863] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 122.173686][ T6635] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 122.185671][ T5863] lan78xx: probe of 3-1:1.0 failed with error -71 [ 122.203841][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.232126][ T5863] usb 3-1: USB disconnect, device number 6 [ 122.323398][ T6635] bridge_slave_1 (unregistering): left allmulticast mode [ 122.330499][ T6635] bridge_slave_1 (unregistering): left promiscuous mode [ 122.355773][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.085904][ T5858] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 123.302736][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 123.329038][ T5858] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 123.338233][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.348980][ T5858] usb 1-1: Product: syz [ 123.353955][ T5858] usb 1-1: Manufacturer: syz [ 123.358578][ T5858] usb 1-1: SerialNumber: syz [ 123.367609][ T5858] usb 1-1: config 0 descriptor?? [ 123.378342][ T5858] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 124.421988][ T5791] Bluetooth: hci3: link tx timeout [ 124.429508][ T5791] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 124.818891][ T5858] gspca_ov534_9: reg_r err -71 [ 124.897853][ T6686] process 'syz.1.274' launched './file0' with NULL argv: empty string added [ 125.264282][ T6690] Mass Storage Function, version: 2009/09/11 [ 125.270586][ T6690] LUN: removable file: (no medium) [ 125.279487][ T27] audit: type=1800 audit(1793650858.525:11): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.275" name="file" dev="configfs" ino=10949 res=0 errno=0 [ 125.302331][ T6690] mass_storage.0/lun.0: unable to open backing file: file0 [ 125.353039][ T5858] gspca_ov534_9: Unknown sensor 0000 [ 125.353126][ T5858] ov534_9: probe of 1-1:0.0 failed with error -22 [ 125.396779][ T5858] usb 1-1: USB disconnect, device number 9 [ 125.575792][ T6701] tipc: Started in network mode [ 125.604579][ T6701] tipc: Node identity 4, cluster identity 4711 [ 125.628362][ T6701] tipc: Node number set to 4 [ 125.734877][ T6703] loop0: detected capacity change from 0 to 1024 [ 125.754333][ T6703] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 125.773433][ T6703] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 125.805816][ T6703] EXT4-fs (loop0): invalid journal inode [ 125.811572][ T6703] EXT4-fs (loop0): can't get journal size [ 125.849789][ T6703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.022973][ T5858] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.152802][ T5863] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 126.222785][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 126.230147][ T5858] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.239903][ T5858] usb 2-1: config 4 has an invalid interface number: 112 but max is 0 [ 126.250694][ T5858] usb 2-1: config 4 has no interface number 0 [ 126.264994][ T5858] usb 2-1: config 4 interface 112 has no altsetting 0 [ 126.276080][ T5858] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40 [ 126.285331][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.293444][ T5858] usb 2-1: Product: syz [ 126.297790][ T5858] usb 2-1: Manufacturer: syz [ 126.302409][ T5858] usb 2-1: SerialNumber: syz [ 126.336016][ T5863] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 126.348705][ T5863] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 126.359100][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.367605][ T5863] usb 3-1: Product: syz [ 126.372387][ T5863] usb 3-1: Manufacturer: syz [ 126.381403][ T5863] usb 3-1: SerialNumber: syz [ 126.391811][ T5863] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 126.493563][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 126.528368][ T5858] pcwd_usb: The device isn't a Human Interface Device [ 126.545892][ T5858] usb 2-1: USB disconnect, device number 7 [ 126.812278][ T5863] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 126.843262][ T5863] usb 3-1: USB disconnect, device number 7 [ 127.116016][ T5858] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 127.312936][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 127.332639][ T5858] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 127.363891][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.390314][ T5858] usb 1-1: Product: syz [ 127.402772][ T5858] usb 1-1: Manufacturer: syz [ 127.407475][ T5858] usb 1-1: SerialNumber: syz [ 127.427083][ T27] audit: type=1800 audit(1793650860.675:12): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.289" name="file" dev="configfs" ino=11549 res=0 errno=0 [ 127.428474][ T5858] usb 1-1: config 0 descriptor?? [ 127.447484][ T6724] mass_storage.0/lun.0: unable to open backing file: file0 [ 127.479342][ T5858] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 128.900332][ T5858] gspca_ov534_9: reg_r err -71 [ 129.136689][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.272852][ T5858] gspca_ov534_9: Unknown sensor 0000 [ 129.272935][ T5858] ov534_9: probe of 1-1:0.0 failed with error -22 [ 129.313284][ T5858] usb 1-1: USB disconnect, device number 10 [ 129.747527][ T27] audit: type=1800 audit(1793650862.995:13): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.301" name="file" dev="configfs" ino=11118 res=0 errno=0 [ 129.768381][ T6754] mass_storage.0/lun.0: unable to open backing file: file0 [ 129.799895][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.809947][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.818667][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.834186][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.842650][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.850104][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.872026][ T6763] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.298206][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.452930][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.594826][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.706727][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.798554][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.813296][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.822490][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.836222][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.857859][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 130.865540][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.303761][ T790] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 131.534721][ T790] usb 3-1: not running at top speed; connect to a high speed hub [ 131.567948][ T790] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 131.609754][ T790] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 131.635048][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.655350][ T790] usb 3-1: Product: syz [ 131.659558][ T790] usb 3-1: Manufacturer: syz [ 131.672855][ T790] usb 3-1: SerialNumber: syz [ 131.679360][ T6790] 9pnet_fd: p9_fd_create_tcp (6790): problem connecting socket to 127.0.0.1 [ 131.739378][ T790] oti6858 3-1:1.0: oti6858 converter detected [ 131.799120][ T790] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 131.832249][ T6791] mass_storage.0/lun.0: unable to open backing file: file0 [ 131.834926][ T27] audit: type=1800 audit(1793650865.075:14): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.312" name="file" dev="configfs" ino=11756 res=0 errno=0 [ 132.128873][ T6804] Bluetooth: ISO socket layer initialized [ 132.279950][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.289352][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.297365][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.326126][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.339276][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 132.346898][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.425287][ T5861] usb 3-1: USB disconnect, device number 8 [ 132.455514][ T5861] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 132.474564][ T5861] oti6858 3-1:1.0: device disconnected [ 132.898142][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906714][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.325828][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.335580][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.345065][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.354968][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.364091][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 133.376873][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.661848][ T11] hsr_slave_0: left promiscuous mode [ 133.668320][ T11] hsr_slave_1: left promiscuous mode [ 133.679410][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.688474][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.706290][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.716268][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.726563][ T11] bridge_slave_1: left allmulticast mode [ 133.732315][ T11] bridge_slave_1: left promiscuous mode [ 133.740564][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.755058][ T11] bridge_slave_0: left allmulticast mode [ 133.760801][ T11] bridge_slave_0: left promiscuous mode [ 133.767334][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.792478][ T11] veth1_macvtap: left promiscuous mode [ 133.798710][ T11] veth0_macvtap: left promiscuous mode [ 133.805196][ T11] veth1_vlan: left promiscuous mode [ 133.810665][ T11] veth0_vlan: left promiscuous mode [ 134.679200][ T6850] FAULT_INJECTION: forcing a failure. [ 134.679200][ T6850] name failslab, interval 1, probability 0, space 0, times 0 [ 134.716939][ T6850] CPU: 1 PID: 6850 Comm: syz.1.323 Not tainted syzkaller #0 [ 134.724288][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.734451][ T6850] Call Trace: [ 134.737747][ T6850] [ 134.740698][ T6850] dump_stack_lvl+0x18c/0x250 [ 134.745409][ T6850] ? show_regs_print_info+0x20/0x20 [ 134.750734][ T6850] ? load_image+0x420/0x420 [ 134.755275][ T6850] ? __might_sleep+0xe0/0xe0 [ 134.759890][ T6850] ? __lock_acquire+0x7eb0/0x7eb0 [ 134.764943][ T6850] should_fail_ex+0x394/0x4c0 [ 134.769656][ T6850] should_failslab+0x9/0x20 [ 134.774188][ T6850] slab_pre_alloc_hook+0x59/0x300 [ 134.779232][ T6850] kmem_cache_alloc+0x5a/0x2d0 [ 134.783991][ T6850] ? mempool_init_node+0x1e9/0x480 [ 134.789099][ T6850] ? mempool_free+0x320/0x320 [ 134.793788][ T6850] mempool_init_node+0x1e9/0x480 [ 134.798757][ T6850] ? mempool_alloc_slab+0x60/0x60 [ 134.803807][ T6850] ? mempool_free+0x320/0x320 [ 134.808498][ T6850] mempool_init+0x3a/0x50 [ 134.812834][ T6850] dm_io_client_create+0x78/0xf0 [ 134.817801][ T6850] dm_integrity_ctr+0x1b30/0x4bb0 [ 134.822866][ T6850] ? sb_check+0x310/0x310 [ 134.827200][ T6850] ? dm_split_args+0x92/0x5b0 [ 134.831868][ T6850] ? rcu_is_watching+0x15/0xb0 [ 134.836633][ T6850] ? dm_split_args+0x505/0x5b0 [ 134.841397][ T6850] dm_table_add_target+0x575/0xbc0 [ 134.846514][ T6850] table_load+0x2eb/0x7e0 [ 134.850842][ T6850] ? dev_wait+0x2f0/0x2f0 [ 134.855165][ T6850] ? __might_fault+0xaa/0x120 [ 134.859835][ T6850] ? __might_fault+0xc6/0x120 [ 134.864506][ T6850] ? __might_fault+0xaa/0x120 [ 134.869181][ T6850] ? dev_wait+0x2f0/0x2f0 [ 134.873525][ T6850] dm_ctl_ioctl+0x975/0xd00 [ 134.878032][ T6850] ? dev_wait+0x2f0/0x2f0 [ 134.882357][ T6850] ? dm_poll+0x120/0x120 [ 134.886620][ T6850] ? bpf_lsm_file_ioctl+0x9/0x10 [ 134.891548][ T6850] ? security_file_ioctl+0x80/0xa0 [ 134.896656][ T6850] ? dm_poll+0x120/0x120 [ 134.900894][ T6850] __se_sys_ioctl+0xfd/0x170 [ 134.905486][ T6850] do_syscall_64+0x55/0xb0 [ 134.909897][ T6850] ? clear_bhb_loop+0x40/0x90 [ 134.914573][ T6850] ? clear_bhb_loop+0x40/0x90 [ 134.919248][ T6850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.925140][ T6850] RIP: 0033:0x7facc379fb19 [ 134.929731][ T6850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.949333][ T6850] RSP: 002b:00007facc19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.957743][ T6850] RAX: ffffffffffffffda RBX: 00007facc3a25fa0 RCX: 00007facc379fb19 [ 134.965709][ T6850] RDX: 00002000000007c0 RSI: 00000000c138fd09 RDI: 0000000000000010 [ 134.973676][ T6850] RBP: 00007facc3837af8 R08: 0000000000000000 R09: 0000000000000000 [ 134.981654][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.989615][ T6850] R13: 00007facc3a26038 R14: 00007facc3a25fa0 R15: 00007ffc659c31b8 [ 134.997593][ T6850] [ 135.026520][ T6850] device-mapper: table: 248:1: integrity: Cannot allocate dm io (-ENOMEM) [ 135.045760][ T6850] device-mapper: ioctl: error adding target to table [ 135.233618][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.247089][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.272125][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.281787][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.291346][ T11] team0 (unregistering): Port device team_slave_1 removed [ 135.295376][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.295916][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.428881][ T11] team0 (unregistering): Port device team_slave_0 removed [ 135.532958][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.539224][ T6873] ubi0: attaching mtd1 [ 135.561780][ T6873] ubi0: scanning is finished [ 135.567429][ T6873] ubi0: empty MTD device detected [ 135.622855][ T174] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 135.649906][ T6873] ubi0: attached mtd1 (name "", size 0 MiB) [ 135.672918][ T6873] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 135.681805][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.689897][ T6873] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 135.718839][ T6873] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 135.737019][ T6873] ubi0: good PEBs: 16, bad PEBs: 0, corrupted PEBs: 0 [ 135.756927][ T6873] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 135.777302][ T6873] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1755936263 [ 135.798660][ T6873] ubi0: available PEBs: 12, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 135.814070][ T174] usb 3-1: not running at top speed; connect to a high speed hub [ 135.836384][ T174] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 135.862941][ T6874] ubi0: background thread "ubi_bgt0d" started, PID 6874 [ 135.893687][ T174] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 135.922740][ T174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.942974][ T174] usb 3-1: Product: syz [ 135.947177][ T174] usb 3-1: Manufacturer: syz [ 135.951781][ T174] usb 3-1: SerialNumber: syz [ 135.998046][ T174] oti6858 3-1:1.0: oti6858 converter detected [ 136.025909][ T174] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 136.251731][ T11] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 136.329683][ T11] bond0 (unregistering): Released all slaves [ 136.619877][ T174] usb 3-1: USB disconnect, device number 9 [ 136.643427][ T174] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 136.677957][ T174] oti6858 3-1:1.0: device disconnected [ 136.887007][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.896009][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.904335][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.912520][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.930672][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.938313][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.332938][ T5861] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.420826][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.428744][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.436618][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.446475][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.454805][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.465042][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.542774][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 138.555718][ T5861] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 138.574499][ T5861] usb 2-1: config 0 has no interface number 0 [ 138.580649][ T5861] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 138.617753][ T5861] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 138.641834][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.657948][ T5861] usb 2-1: Product: syz [ 138.662185][ T5861] usb 2-1: Manufacturer: syz [ 138.671348][ T5861] usb 2-1: SerialNumber: syz [ 138.681559][ T5861] usb 2-1: config 0 descriptor?? [ 138.689829][ T6895] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.905095][ T6895] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.529546][ T5861] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 139.543233][ T5861] asix: probe of 2-1:0.188 failed with error -71 [ 139.562395][ T5861] usb 2-1: USB disconnect, device number 8 [ 139.731283][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.739848][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.749602][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.756660][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 139.767736][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.775640][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.786110][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.962908][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 139.975449][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.986087][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.995544][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.010414][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 140.019607][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.027783][ T9] usb 1-1: Product: syz [ 140.031934][ T9] usb 1-1: Manufacturer: syz [ 140.036565][ T9] usb 1-1: SerialNumber: syz [ 140.067149][ T9] usb 1-1: interface 2 not found [ 140.288628][ T5861] usb 1-1: USB disconnect, device number 11 [ 141.295833][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.309233][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.312773][ T23] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 141.333303][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.342533][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.350395][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.363067][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.598045][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 141.625425][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 141.641283][ T23] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 141.663211][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.671368][ T23] usb 1-1: Product: syz [ 141.675657][ T23] usb 1-1: Manufacturer: syz [ 141.680265][ T23] usb 1-1: SerialNumber: syz [ 141.703648][ T23] oti6858 1-1:1.0: oti6858 converter detected [ 141.725818][ T23] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 142.244837][ T5863] usb 1-1: USB disconnect, device number 12 [ 142.255250][ T5863] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 142.263863][ T5863] oti6858 1-1:1.0: device disconnected [ 143.020448][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.022911][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.036244][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.044542][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.052554][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.062083][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.071927][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.222914][ T5861] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 143.232759][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 143.241331][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.265743][ T23] usb 3-1: config 0 has no interfaces? [ 143.273728][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.283515][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.295749][ T23] usb 3-1: Product: syz [ 143.299939][ T23] usb 3-1: Manufacturer: syz [ 143.312772][ T23] usb 3-1: SerialNumber: syz [ 143.325107][ T23] usb 3-1: config 0 descriptor?? [ 143.444503][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.462754][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.482787][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.512775][ T5861] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.521848][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.545875][ T5861] usb 1-1: config 0 descriptor?? [ 143.964308][ T5861] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 143.984262][ T5861] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 144.009052][ T6962] udevd[6962]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 144.395008][ T52] Bluetooth: hci0: link tx timeout [ 144.403078][ T52] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.626635][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.636639][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.645051][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.654761][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.662400][ T5095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.672579][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.295908][ C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 146.242200][ T174] usb 1-1: USB disconnect, device number 13 [ 146.483136][ T790] usb 3-1: USB disconnect, device number 10 [ 146.494828][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 146.532639][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.551104][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.563375][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.574069][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.581730][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.589136][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.549300][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.557696][ T174] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 148.563406][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.572905][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 148.574217][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.591031][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.599795][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.610435][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.744754][ T174] usb 2-1: not running at top speed; connect to a high speed hub [ 148.758875][ T174] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 148.772965][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.788587][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 148.802023][ T9] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 148.817416][ T174] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 148.827201][ T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.837839][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.846134][ T174] usb 2-1: Product: syz [ 148.850446][ T174] usb 2-1: Manufacturer: syz [ 148.858076][ T174] usb 2-1: SerialNumber: syz [ 148.864691][ T9] usb 3-1: config 0 descriptor?? [ 148.884010][ T174] oti6858 2-1:1.0: oti6858 converter detected [ 148.894996][ T174] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 149.275788][ T9] Bluetooth: Can't get state to change to load configuration err [ 149.288630][ T9] Bluetooth: Loading sysconfig file failed [ 149.295253][ T9] ath3k: probe of 3-1:0.0 failed with error -16 [ 149.305303][ T9] usb 3-1: USB disconnect, device number 11 [ 149.414825][ T5858] usb 2-1: USB disconnect, device number 9 [ 149.425613][ T5858] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 149.435930][ T5858] oti6858 2-1:1.0: device disconnected [ 150.191002][ T7012] netlink: 64 bytes leftover after parsing attributes in process `syz.2.360'. [ 150.472828][ T174] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 150.493732][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.502347][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.511526][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.520517][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.528577][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.536583][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.674048][ T174] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 150.686728][ T174] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 150.695885][ T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.704209][ T174] usb 2-1: Product: syz [ 150.708390][ T174] usb 2-1: Manufacturer: syz [ 150.713074][ T174] usb 2-1: SerialNumber: syz [ 150.745526][ T174] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 150.852924][ T790] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 150.953109][ T174] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 150.977592][ T174] usb 2-1: USB disconnect, device number 10 [ 151.040274][ T790] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.051967][ T790] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 20015, setting to 1024 [ 151.065095][ T790] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 151.075462][ T790] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.085399][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.096451][ T7024] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 151.109460][ T790] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 151.350247][ T790] usb 3-1: USB disconnect, device number 12 [ 152.595775][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.605110][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.614123][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.622244][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.630133][ T5095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.637359][ T790] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 152.647542][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.844081][ T790] usb 2-1: not running at top speed; connect to a high speed hub [ 152.853570][ T790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 152.867322][ T790] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 152.876570][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.884858][ T790] usb 2-1: Product: syz [ 152.889289][ T790] usb 2-1: Manufacturer: syz [ 152.894889][ T790] usb 2-1: SerialNumber: syz [ 152.905503][ T790] oti6858 2-1:1.0: oti6858 converter detected [ 152.940680][ T790] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 153.428006][ T790] usb 2-1: USB disconnect, device number 11 [ 153.437757][ T790] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 153.448454][ T790] oti6858 2-1:1.0: device disconnected [ 154.413741][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 154.598190][ T7052] ALSA: seq fatal error: cannot create timer (-22) [ 154.886928][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.896412][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.904397][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.922969][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.930066][ T790] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 154.933010][ T174] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 154.948993][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.958450][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.118817][ T790] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 155.131776][ T790] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 155.148927][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.157918][ T790] usb 2-1: Product: syz [ 155.162244][ T790] usb 2-1: Manufacturer: syz [ 155.171420][ T790] usb 2-1: SerialNumber: syz [ 155.182843][ T174] usb 1-1: Using ep0 maxpacket: 16 [ 155.195178][ T790] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 155.225438][ T174] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.242702][ T174] usb 1-1: config 0 has no interface number 0 [ 155.251612][ T174] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 155.260808][ T174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.269098][ T174] usb 1-1: Product: syz [ 155.273391][ T174] usb 1-1: Manufacturer: syz [ 155.278002][ T174] usb 1-1: SerialNumber: syz [ 155.290418][ T174] usb 1-1: config 0 descriptor?? [ 155.301305][ T174] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 155.403656][ T790] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 155.421831][ T790] usb 2-1: USB disconnect, device number 12 [ 155.906110][ T174] gspca_spca1528: reg_w err -71 [ 155.933253][ T174] spca1528: probe of 1-1:0.1 failed with error -71 [ 155.943701][ T174] usb 1-1: USB disconnect, device number 14 [ 157.335820][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.345484][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.353861][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.366339][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.374103][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.382056][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.603106][ T174] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 157.804044][ T174] usb 2-1: not running at top speed; connect to a high speed hub [ 157.824744][ T174] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 157.854708][ T174] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 157.864290][ T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.872456][ T174] usb 2-1: Product: syz [ 157.879454][ T174] usb 2-1: Manufacturer: syz [ 157.884937][ T174] usb 2-1: SerialNumber: syz [ 157.913553][ T174] oti6858 2-1:1.0: oti6858 converter detected [ 157.934401][ T174] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 158.436739][ T174] usb 2-1: USB disconnect, device number 13 [ 158.450266][ T174] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 158.459421][ T174] oti6858 2-1:1.0: device disconnected [ 159.728218][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.736702][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.746542][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.755962][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.766635][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.779227][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.812777][ T174] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 159.853319][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 159.962844][ T5858] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 160.005894][ T174] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 160.015230][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.025371][ T174] usb 2-1: config 0 descriptor?? [ 160.052894][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 160.062043][ T8] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 160.071252][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.079374][ T8] usb 3-1: Product: syz [ 160.083624][ T8] usb 3-1: Manufacturer: syz [ 160.088243][ T8] usb 3-1: SerialNumber: syz [ 160.095573][ T8] usb 3-1: config 0 descriptor?? [ 160.105190][ T8] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 160.152741][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 160.160333][ T5858] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.168926][ T5858] usb 1-1: config 0 has no interface number 0 [ 160.181378][ T5858] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 160.190516][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.198721][ T5858] usb 1-1: Product: syz [ 160.203214][ T5858] usb 1-1: Manufacturer: syz [ 160.207830][ T5858] usb 1-1: SerialNumber: syz [ 160.216675][ T5858] usb 1-1: config 0 descriptor?? [ 160.228614][ T5858] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 160.437839][ T174] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 160.452120][ T174] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 160.460974][ T174] [drm:udl_init] *ERROR* Selecting channel failed [ 160.480187][ T174] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 160.487790][ T174] [drm] Initialized udl on minor 2 [ 160.495335][ T174] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 160.504022][ T174] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 160.514062][ T5863] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 160.529702][ T174] usb 2-1: USB disconnect, device number 14 [ 160.536014][ T5863] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 160.552938][ T5863] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 160.832307][ T5858] gspca_spca1528: reg_w err -71 [ 160.862843][ T5858] spca1528: probe of 1-1:0.1 failed with error -71 [ 160.876078][ T5858] usb 1-1: USB disconnect, device number 15 [ 161.529873][ T8] gspca_ov534_9: reg_r err -71 [ 161.892955][ T8] gspca_ov534_9: Unknown sensor 0000 [ 161.893040][ T8] ov534_9: probe of 3-1:0.0 failed with error -22 [ 161.921970][ T8] usb 3-1: USB disconnect, device number 13 [ 162.058722][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.068858][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.078457][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.088900][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.100708][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.109231][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.173014][ T174] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 162.529223][ T174] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 162.538880][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.563865][ T174] usb 1-1: config 0 descriptor?? [ 163.033463][ T174] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 163.043192][ T174] [drm] Initialized udl on minor 2 [ 163.209858][ T7110] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 163.216664][ T7110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.228115][ T7110] vhci_hcd vhci_hcd.0: Device attached [ 163.237919][ T174] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 163.247910][ T174] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 163.257246][ T7122] vhci_hcd: connection closed [ 163.259244][ T11] vhci_hcd: stop threads [ 163.262384][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 163.277256][ T11] vhci_hcd: release socket [ 163.281758][ T11] vhci_hcd: disconnect device [ 163.283050][ T174] usb 1-1: USB disconnect, device number 16 [ 163.303489][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 164.784838][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.803177][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.811996][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.826391][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.842850][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.842918][ T174] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 164.858024][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.952929][ T5863] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 165.033313][ T174] usb 2-1: Using ep0 maxpacket: 16 [ 165.040591][ T174] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.049682][ T174] usb 2-1: config 0 has no interface number 0 [ 165.058918][ T174] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 165.068070][ T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.076489][ T174] usb 2-1: Product: syz [ 165.080657][ T174] usb 2-1: Manufacturer: syz [ 165.085287][ T174] usb 2-1: SerialNumber: syz [ 165.092269][ T174] usb 2-1: config 0 descriptor?? [ 165.100512][ T174] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 165.142879][ T5858] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 165.162872][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 165.171640][ T5863] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 165.181267][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.189377][ T5863] usb 3-1: Product: syz [ 165.193659][ T5863] usb 3-1: Manufacturer: syz [ 165.198265][ T5863] usb 3-1: SerialNumber: syz [ 165.207538][ T5863] usb 3-1: config 0 descriptor?? [ 165.217681][ T5863] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 165.326421][ T5858] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 165.335768][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.344172][ T5858] usb 1-1: Product: syz [ 165.348359][ T5858] usb 1-1: Manufacturer: syz [ 165.353024][ T5858] usb 1-1: SerialNumber: syz [ 165.706228][ T174] gspca_spca1528: reg_w err -71 [ 165.732808][ T174] spca1528: probe of 2-1:0.1 failed with error -71 [ 165.742537][ T174] usb 2-1: USB disconnect, device number 15 [ 165.782248][ T5858] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 166.403633][ T7146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.417297][ T7146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.630773][ T5863] gspca_ov534_9: reg_r err -71 [ 167.032722][ T5863] gspca_ov534_9: Unknown sensor 0000 [ 167.032808][ T5863] ov534_9: probe of 3-1:0.0 failed with error -22 [ 167.049107][ T5863] usb 3-1: USB disconnect, device number 14 [ 167.128017][ T7149] FAULT_INJECTION: forcing a failure. [ 167.128017][ T7149] name failslab, interval 1, probability 0, space 0, times 0 [ 167.141834][ T7149] CPU: 1 PID: 7149 Comm: syz.1.405 Not tainted syzkaller #0 [ 167.149164][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 167.159252][ T7149] Call Trace: [ 167.162548][ T7149] [ 167.165500][ T7149] dump_stack_lvl+0x18c/0x250 [ 167.170206][ T7149] ? show_regs_print_info+0x20/0x20 [ 167.175433][ T7149] ? load_image+0x420/0x420 [ 167.179961][ T7149] ? __might_sleep+0xe0/0xe0 [ 167.184583][ T7149] ? __lock_acquire+0x7eb0/0x7eb0 [ 167.189635][ T7149] ? rcu_read_lock_bh_held+0x100/0x100 [ 167.195129][ T7149] should_fail_ex+0x394/0x4c0 [ 167.199838][ T7149] should_failslab+0x9/0x20 [ 167.204364][ T7149] slab_pre_alloc_hook+0x59/0x300 [ 167.209416][ T7149] ? tomoyo_find_next_domain+0xe0/0x1a50 [ 167.215077][ T7149] __kmem_cache_alloc_node+0x53/0x260 [ 167.220473][ T7149] ? tomoyo_find_next_domain+0xe0/0x1a50 [ 167.226133][ T7149] kmalloc_trace+0x2a/0xe0 [ 167.230588][ T7149] tomoyo_find_next_domain+0xe0/0x1a50 [ 167.236088][ T7149] ? rw_verify_area+0x1b0/0x1b0 [ 167.240965][ T7149] ? read_lock_is_recursive+0x20/0x20 [ 167.246364][ T7149] ? tomoyo_assign_domain+0x790/0x790 [ 167.251760][ T7149] ? common_file_perm+0x198/0x1f0 [ 167.256800][ T7149] ? tomoyo_bprm_check_security+0xea/0x170 [ 167.262634][ T7149] tomoyo_bprm_check_security+0x116/0x170 [ 167.268388][ T7149] security_bprm_check+0x62/0xa0 [ 167.273353][ T7149] bprm_execve+0xa72/0x1730 [ 167.277901][ T7149] ? alloc_bprm+0x9a0/0x9a0 [ 167.282423][ T7149] ? put_arg_page+0xea/0x260 [ 167.287052][ T7149] ? copy_string_kernel+0x1e9/0x220 [ 167.292283][ T7149] do_execveat_common+0x501/0x6b0 [ 167.297354][ T7149] __x64_sys_execve+0x92/0xa0 [ 167.302062][ T7149] do_syscall_64+0x55/0xb0 [ 167.306505][ T7149] ? clear_bhb_loop+0x40/0x90 [ 167.311300][ T7149] ? clear_bhb_loop+0x40/0x90 [ 167.316004][ T7149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.321920][ T7149] RIP: 0033:0x7facc379fb19 [ 167.326351][ T7149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.345989][ T7149] RSP: 002b:00007facc19f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 167.354434][ T7149] RAX: ffffffffffffffda RBX: 00007facc3a25fa0 RCX: 00007facc379fb19 [ 167.362441][ T7149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 167.370440][ T7149] RBP: 00007facc3837af8 R08: 0000000000000000 R09: 0000000000000000 [ 167.378435][ T7149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.386431][ T7149] R13: 00007facc3a26038 R14: 00007facc3a25fa0 R15: 00007ffc659c31b8 [ 167.394446][ T7149] [ 167.517227][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.528015][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.537189][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.547199][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.558826][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.566392][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.696934][ C0] usblp0: nonzero write bulk status received: -71 [ 167.708237][ T9] usb 1-1: USB disconnect, device number 17 [ 167.726106][ T9] usblp0: removed SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=298 state=3 status=67 (errno 9: Bad file descriptor) [ 167.934712][ T6722] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.066848][ T7146] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.135456][ T7151] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.389055][ T3429] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.514492][ T3429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.606613][ T3429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.677232][ T3429] hsr_slave_0: left promiscuous mode [ 169.703642][ T3429] hsr_slave_1: left promiscuous mode [ 169.709413][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.717175][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.725205][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.732596][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.743152][ T3429] bridge_slave_1: left allmulticast mode [ 169.748844][ T3429] bridge_slave_1: left promiscuous mode [ 169.754661][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.764291][ T3429] bridge_slave_0: left allmulticast mode [ 169.770010][ T3429] bridge_slave_0: left promiscuous mode [ 169.776035][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.806066][ T3429] veth1_macvtap: left promiscuous mode [ 169.811601][ T3429] veth0_macvtap: left promiscuous mode [ 169.818833][ T3429] veth1_vlan: left promiscuous mode [ 169.824246][ T3429] veth0_vlan: left promiscuous mode [ 170.268337][ T3429] team0 (unregistering): Port device team_slave_1 removed [ 170.309999][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 170.348801][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.390645][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.663240][ T3429] bond0 (unregistering): Released all slaves [ 171.103369][ T3429] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.171570][ T3429] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.216421][ T3429] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.307188][ T3429] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.413898][ T3429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.478527][ T3429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.557044][ T3429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.599912][ T3429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.729383][ T3429] tipc: Left network mode [ 172.849851][ T3429] hsr_slave_0: left promiscuous mode [ 172.859406][ T3429] hsr_slave_1: left promiscuous mode [ 172.866875][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.876083][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.884028][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.891419][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.908800][ T3429] bridge_slave_1: left allmulticast mode [ 172.915828][ T3429] bridge_slave_1: left promiscuous mode [ 172.922092][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.931600][ T3429] bridge_slave_0: left allmulticast mode [ 172.937643][ T3429] bridge_slave_0: left promiscuous mode [ 172.943423][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.955721][ T3429] hsr_slave_0: left promiscuous mode [ 172.961451][ T3429] hsr_slave_1: left promiscuous mode [ 172.967610][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.975196][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.985177][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.992575][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.000283][ T3429] bridge_slave_0: left allmulticast mode [ 173.006161][ T3429] bridge_slave_0: left promiscuous mode [ 173.011823][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.042552][ T3429] veth1_macvtap: left promiscuous mode [ 173.048145][ T3429] veth0_macvtap: left promiscuous mode [ 173.053913][ T3429] veth1_vlan: left promiscuous mode [ 173.059198][ T3429] veth0_vlan: left promiscuous mode [ 173.066598][ T3429] veth1_macvtap: left promiscuous mode [ 173.072128][ T3429] veth0_macvtap: left promiscuous mode [ 173.077970][ T3429] veth1_vlan: left promiscuous mode [ 173.083392][ T3429] veth0_vlan: left promiscuous mode [ 173.662139][ T3429] team0 (unregistering): Port device team_slave_1 removed [ 173.702405][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 173.738434][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.789131][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.036861][ T3429] bond0 (unregistering): Released all slaves [ 174.436018][ T3429] team0 (unregistering): Port device team_slave_1 removed [ 174.469884][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 174.505612][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.549031][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.783041][ T3429] bond0 (unregistering): Released all slaves