last executing test programs: 15.06008439s ago: executing program 3 (id=370): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000001700)={&(0x7f0000000180)={0x24, @short={0x2, 0x2, 0x8003}}, 0x14, &(0x7f00000016c0)={&(0x7f00000006c0)="5f0a836835684b61d4b55eb8624d71e99edbf612f90d482e5f3fb6881f0e4439827e236d54f1ba1c7ae357cfc48cae62e508c4d480d9b089d69a3ba5186b4056c12e653ed72c52beead2bf5acfebf2850ae6c7e83f1685a25551b97c92ff28214b4bfe215dfed6be12121d6d26efcf16832ba6d17e5548ebf9f44c5f95c81538", 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x814) 14.86230255s ago: executing program 3 (id=372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) read(r3, &(0x7f0000000100), 0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0x1, 0x7f, 0x5, '\x00', 0x67}, {0x0, 0x2, 0x5, '\x00', 0xf}, {0x1, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x94, '\x00', 0x86}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x4, 0x4, '\x00', 0x1}, {0xfe, 0x3, 0x26, '\x00', 0x5}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x3, '\x00', 0x3}, {0x39, 0x2, 0x8, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x7}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0xbf}]}}) 14.324528408s ago: executing program 3 (id=373): syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000001c0)={0x1, 0x1, [{r0, 0x0, 0x1000000, 0xfffff000}]}) 13.771381246s ago: executing program 3 (id=378): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0xa) 13.65231486s ago: executing program 3 (id=379): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8a000) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000140)) 10.708127806s ago: executing program 3 (id=393): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000a40)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10.233293148s ago: executing program 32 (id=393): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000a40)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.920937833s ago: executing program 2 (id=411): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.822821596s ago: executing program 2 (id=412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e00000000000000022a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r5], 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, 0x0, 0x20000000) 5.71169173s ago: executing program 2 (id=413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000021000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, 0x0) 5.555727836s ago: executing program 2 (id=414): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001880)="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", 0x781}], 0x1}}], 0x1, 0x44000) 5.373957644s ago: executing program 0 (id=417): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xf0, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0xed}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x8000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1, 0x9, 0x10, {0xa, 0x25, 0x25, 0x200005, 0x50, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0x0, 0xffff}}}}}}}}]}}, 0x0) 5.2463045s ago: executing program 2 (id=418): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000000c0)=@string={0x2}}]}) 4.890423029s ago: executing program 1 (id=420): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000180c0)={0x8000001, 0x0, 0x0, 0x1, 0x8}) 4.616324365s ago: executing program 0 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x2) write$cgroup_freezer_state(r0, &(0x7f00000003c0)='FROZEN\x00', 0x7) 1.425292793s ago: executing program 4 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz1\x00', {0x400, 0x2b9, 0x2}, 0x4f, [0x383, 0x1000, 0x8, 0x1, 0x3, 0x7, 0xd90f, 0x1, 0x9, 0xfffffffe, 0x9, 0xfffffffc, 0x7, 0xfffffffa, 0x8, 0x9, 0x3, 0x44f8, 0x4d7, 0x3, 0x7, 0x0, 0x3, 0x20, 0xf743, 0x5, 0xb2, 0x40, 0x7, 0x6, 0x5, 0x2, 0x2, 0x1, 0x6, 0x5, 0x401, 0x81, 0x2, 0x400, 0x3, 0xc0000, 0xfce0, 0x2, 0x4, 0xe4, 0x3, 0x7fffffff, 0x0, 0x0, 0xfffffff7, 0x40, 0x709c, 0x2, 0x8, 0x6, 0x3, 0x5, 0x7, 0xc457, 0x3ff, 0x2, 0x4, 0xffffffff], [0xdff, 0x289, 0x6, 0x2, 0x0, 0x17, 0x40, 0x6, 0x627, 0x9, 0x4, 0x5, 0x6, 0x40, 0xd27, 0x8, 0x9, 0x2, 0x0, 0xfffffffb, 0x1800000, 0x1, 0x5, 0x0, 0x3800000, 0x4, 0x7, 0x3, 0x4, 0x7, 0x8, 0x5, 0x6, 0x7fff, 0x100, 0xffffffff, 0x6, 0x8001, 0xa07, 0xa, 0x6, 0xcfd8, 0x8, 0x80, 0x6, 0x6, 0x7, 0x6, 0x8ce, 0x6, 0x8001, 0xb, 0x401, 0x9, 0x52, 0x800, 0x1, 0x80000001, 0x1, 0x9, 0x3, 0x401, 0x3, 0x1], [0x8, 0x958, 0x100, 0x5, 0x9, 0x8, 0xcfc7f0f, 0x6, 0x4, 0x9, 0x262, 0x0, 0x3, 0x9, 0xffff0000, 0xb, 0x507, 0x1000, 0x401, 0x7, 0xfffffffe, 0x8fd, 0x15c, 0xbe, 0x80000000, 0x7, 0x3, 0xfffffff9, 0x3, 0x7, 0x9, 0x4, 0x8, 0x40, 0x1, 0x6, 0x0, 0xa, 0x3, 0x2, 0x3, 0x1, 0x9, 0x4, 0x9, 0x3ff, 0x9, 0x4, 0x3, 0x1, 0x6, 0x1000, 0x7ff, 0xff, 0xc05, 0x4, 0x2, 0xa00, 0x9, 0x789f, 0xa, 0x8, 0x80, 0x7fff], [0x3, 0x1, 0xfffff847, 0x3, 0x1, 0x6d0, 0x6189, 0x8d, 0x1, 0x2, 0xfffffffc, 0x1, 0x4, 0xfffffffe, 0x2cfefcf9, 0x4b, 0x8, 0x3, 0x20c, 0x80000000, 0x2, 0x8, 0x9f3cc71c, 0xfff, 0x8, 0x0, 0x80000001, 0x2, 0xb, 0x6, 0x8, 0x6, 0x401, 0x5, 0x4, 0x2aac4f86, 0x1ff, 0xe, 0x46f3cc8f, 0x40f2, 0x3, 0x6, 0x1, 0x80000001, 0x8001, 0x2, 0x6, 0xffff6319, 0x1, 0x1, 0x5, 0x7, 0x0, 0x2, 0xe, 0xd5d, 0xb, 0xa2fd, 0xfffffffc, 0x95df, 0xffffffff, 0x7fffffff, 0x81c, 0x8]}, 0x45c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.423415655s ago: executing program 0 (id=429): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='external:t', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='raid5', 0x5) write(0xffffffffffffffff, &(0x7f0000000380)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='65536', 0x5) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/consistency_policy\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f00000005c0)='1:1', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-ram1/size\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='active', 0x6) 1.416473048s ago: executing program 1 (id=430): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) inotify_init1(0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1.118986334s ago: executing program 4 (id=422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e00000000000000022a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r5], 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, 0x0, 0x20000000) 1.117129408s ago: executing program 2 (id=432): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000000c0)=@string={0x2}}]}) 1.034884012s ago: executing program 0 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf252800000008000300", @ANYRES32=r2, @ANYBLOB="0c003400cb80257e9b74e65504005f000a0006"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.02588263s ago: executing program 1 (id=424): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 740.236493ms ago: executing program 4 (id=425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000400050007"], 0x4a) 737.87353ms ago: executing program 0 (id=436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x48810) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000020) 736.526771ms ago: executing program 1 (id=426): openat$drirender128(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket(0x10, 0x3, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x19f) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x14fdde9599d3cb12, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b/\xdfp\xab\xe8}\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) 100.521191ms ago: executing program 4 (id=431): syz_open_dev$loop(0x0, 0x1, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 0s ago: executing program 1 (id=433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): .942334][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.981641][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.074180][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.074357][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.074505][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.074704][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.152996][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.153016][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.246244][ T3363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.246270][ T3363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.275870][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.314198][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.314713][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.314908][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.315069][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.356445][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.356493][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.356754][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.432317][ T3363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.432341][ T3363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.484268][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.485472][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.485523][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.485561][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.536831][ T3363] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.538926][ T3363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.538949][ T3363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.593835][ T5623] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.641830][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.641859][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.826308][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.826338][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.922505][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.922532][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.146512][ T5708] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.880838][ T5783] atomic_op ffff888079be39e0 conn xmit_atomic 0000000000000000 [ 101.974660][ T5628] Bluetooth: hci1: command tx timeout [ 101.974703][ T5628] Bluetooth: hci0: command tx timeout [ 101.974729][ T5628] Bluetooth: hci2: command tx timeout [ 101.975560][ T5627] Bluetooth: hci3: command tx timeout [ 102.167821][ T5708] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 102.226296][ T5708] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.226477][ T5708] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 102.231252][ T5708] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 102.231318][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.367625][ T5788] input: syz1 as /devices/virtual/input/input5 [ 102.835678][ T5793] netlink: 'syz.1.7': attribute type 2 has an invalid length. [ 102.835708][ T5793] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 102.835724][ T5793] netlink: 'syz.1.7': attribute type 2 has an invalid length. [ 102.835737][ T5793] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 102.835756][ T5793] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 102.991554][ T5795] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7'. [ 103.042096][ T5795] netlink: 'syz.1.7': attribute type 2 has an invalid length. [ 103.184479][ T5708] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 103.184546][ T5708] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 103.184561][ T5708] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 103.213466][ T5708] cxacru 4-1:1.0: probe with driver cxacru failed with error -71 [ 103.290473][ T5708] usb 4-1: USB disconnect, device number 2 [ 103.435304][ T5799] FAULT_INJECTION: forcing a failure. [ 103.435304][ T5799] name failslab, interval 1, probability 0, space 0, times 1 [ 103.435355][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT(full) [ 103.435381][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.435404][ T5799] Call Trace: [ 103.435417][ T5799] [ 103.435429][ T5799] dump_stack_lvl+0xe8/0x150 [ 103.435475][ T5799] should_fail_ex+0x3eb/0x540 [ 103.435507][ T5799] should_failslab+0xa8/0x100 [ 103.435534][ T5799] __kmalloc_cache_noprof+0x9e/0x600 [ 103.435570][ T5799] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 103.435600][ T5799] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 103.435639][ T5799] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 103.435668][ T5799] ? sctp_stream_interleave_init+0x55/0x90 [ 103.435702][ T5799] sctp_association_new+0x15be/0x25d0 [ 103.435748][ T5799] sctp_connect_new_asoc+0x2e4/0x6b0 [ 103.435787][ T5799] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 103.435830][ T5799] ? sctp_get_af_specific+0x29/0x80 [ 103.435858][ T5799] ? sctp_inet6_send_verify+0x80/0x300 [ 103.435892][ T5799] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 103.435928][ T5799] __sctp_connect+0x5cb/0xdc0 [ 103.435974][ T5799] ? __pfx___sctp_connect+0x10/0x10 [ 103.436007][ T5799] ? security_sctp_bind_connect+0x7e/0x2c0 [ 103.436046][ T5799] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 103.436077][ T5799] sctp_getsockopt_connectx3+0x227/0x360 [ 103.436109][ T5799] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 103.436160][ T5799] ? sctp_getsockopt+0x12f/0xb90 [ 103.436195][ T5799] ? __local_bh_enable_ip+0xd6/0x140 [ 103.436234][ T5799] sctp_getsockopt+0x984/0xb90 [ 103.436267][ T5799] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 103.436299][ T5799] do_sock_getsockopt+0x51d/0x7e0 [ 103.436330][ T5799] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 103.436373][ T5799] ? __fget_files+0x3a2/0x420 [ 103.436403][ T5799] ? __fget_files+0x2a/0x420 [ 103.436438][ T5799] __x64_sys_getsockopt+0x1a4/0x240 [ 103.436474][ T5799] do_syscall_64+0x166/0x520 [ 103.436495][ T5799] ? trace_irq_disable+0x3b/0x140 [ 103.436527][ T5799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.436552][ T5799] ? clear_bhb_loop+0x70/0xc0 [ 103.436581][ T5799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.436605][ T5799] RIP: 0033:0x7f4a4519e159 [ 103.436637][ T5799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.436657][ T5799] RSP: 002b:00007f4a4602a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 103.436687][ T5799] RAX: ffffffffffffffda RBX: 00007f4a45425fa0 RCX: 00007f4a4519e159 [ 103.436705][ T5799] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 103.436719][ T5799] RBP: 00007f4a4523506b R08: 0000200000000140 R09: 0000000000000000 [ 103.436735][ T5799] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 103.436749][ T5799] R13: 00007f4a45426038 R14: 00007f4a45425fa0 R15: 00007ffd811f72a8 [ 103.436784][ T5799] [ 103.942965][ T5805] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.016818][ T5806] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.211312][ T5826] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.301142][ T30] audit: type=1326 audit(1790053955.334:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.0.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e59e159 code=0x7ffc0000 [ 106.302188][ T30] audit: type=1326 audit(1790053955.334:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.0.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e59e159 code=0x7ffc0000 [ 106.302238][ T30] audit: type=1326 audit(1790053955.334:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.0.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e59e159 code=0x7ffc0000 [ 106.302283][ T30] audit: type=1326 audit(1790053955.334:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.0.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e59e159 code=0x7ffc0000 [ 106.302622][ T30] audit: type=1326 audit(1790053955.334:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.0.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e59e159 code=0x7ffc0000 [ 106.302803][ T30] audit: type=1326 audit(1790053955.334:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.0.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1b3e59e159 code=0x7ffc0000 [ 106.404337][ T30] audit: type=1326 audit(1790053955.424:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.0.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e59e159 code=0x7ffc0000 [ 106.404513][ T30] audit: type=1326 audit(1790053955.424:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.0.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e59e159 code=0x7ffc0000 [ 106.407019][ T30] audit: type=1326 audit(1790053955.334:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.0.19" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3e59e159 code=0x7ffc0000 [ 107.607689][ T5833] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 109.217668][ T5848] tipc: Failed to obtain node identity [ 109.217714][ T5848] tipc: Enabling of bearer rejected, failed to enable media [ 109.344244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.621697][ T5874] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 114.621743][ T5874] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 114.621786][ T5874] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 114.754097][ T5874] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.850517][ T5874] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 115.087464][ T5698] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.247586][ T5698] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.250246][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.313680][ T5698] usb 2-1: config 0 descriptor?? [ 115.344632][ T5698] cp210x 2-1:0.0: cp210x converter detected [ 115.448060][ T5895] FAULT_INJECTION: forcing a failure. [ 115.448060][ T5895] name failslab, interval 1, probability 0, space 0, times 0 [ 115.448100][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT(full) [ 115.448128][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.448142][ T5895] Call Trace: [ 115.448151][ T5895] [ 115.448162][ T5895] dump_stack_lvl+0xe8/0x150 [ 115.448200][ T5895] should_fail_ex+0x3eb/0x540 [ 115.448231][ T5895] should_failslab+0xa8/0x100 [ 115.448260][ T5895] __kmalloc_cache_noprof+0x9e/0x600 [ 115.448296][ T5895] ? nft_netdev_hook_alloc+0x246/0x5a0 [ 115.448324][ T5895] ? nft_netdev_hook_alloc+0x246/0x5a0 [ 115.448359][ T5895] nft_netdev_hook_alloc+0x246/0x5a0 [ 115.448410][ T5895] nf_tables_parse_netdev_hooks+0x14c/0xa10 [ 115.448453][ T5895] nft_flowtable_parse_hook+0x551/0xab0 [ 115.448500][ T5895] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 115.448539][ T5895] ? __rhashtable_init_noprof+0x7d9/0xaf0 [ 115.448572][ T5895] ? nf_flow_table_init+0x287/0x2a0 [ 115.448603][ T5895] nf_tables_newflowtable+0x1627/0x25b0 [ 115.448647][ T5895] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 115.448677][ T5895] ? lock_acquire+0x115/0x350 [ 115.448726][ T5895] ? __nla_parse+0x40/0x60 [ 115.448761][ T5895] nfnetlink_rcv+0x1288/0x28c0 [ 115.448827][ T5895] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 115.448871][ T5895] ? ref_tracker_free+0x689/0x830 [ 115.448926][ T5895] ? skb_clone+0x246/0x3a0 [ 115.448957][ T5895] ? __netlink_deliver_tap+0x811/0x860 [ 115.448996][ T5895] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.449024][ T5895] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.449058][ T5895] netlink_unicast+0x7bd/0x940 [ 115.449097][ T5895] netlink_sendmsg+0x7c3/0xae0 [ 115.449134][ T5895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.449173][ T5895] ? apparmor_socket_sendmsg+0x98/0x360 [ 115.449201][ T5895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.449230][ T5895] sock_sendmsg_nosec+0x13a/0x180 [ 115.449267][ T5895] ____sys_sendmsg+0x54e/0x850 [ 115.449299][ T5895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.449337][ T5895] ? import_iovec+0x73/0xa0 [ 115.449371][ T5895] ___sys_sendmsg+0x2a5/0x360 [ 115.449403][ T5895] ? __lock_acquire+0x747/0x2de0 [ 115.449442][ T5895] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.449472][ T5895] ? futex_wait+0x2a2/0x390 [ 115.449536][ T5895] ? __fget_files+0x2a/0x420 [ 115.449565][ T5895] ? __fget_files+0x3a2/0x420 [ 115.449606][ T5895] __x64_sys_sendmsg+0x1b1/0x290 [ 115.449635][ T5895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.449685][ T5895] do_syscall_64+0x166/0x520 [ 115.449708][ T5895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.449733][ T5895] ? clear_bhb_loop+0x70/0xc0 [ 115.449762][ T5895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.449785][ T5895] RIP: 0033:0x7f41e219e159 [ 115.449810][ T5895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.449829][ T5895] RSP: 002b:00007f41e313c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.449856][ T5895] RAX: ffffffffffffffda RBX: 00007f41e2425fa0 RCX: 00007f41e219e159 [ 115.449879][ T5895] RDX: 0000000000000080 RSI: 0000200000000c40 RDI: 0000000000000004 [ 115.449895][ T5895] RBP: 00007f41e223506b R08: 0000000000000000 R09: 0000000000000000 [ 115.449909][ T5895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.449923][ T5895] R13: 00007f41e2426038 R14: 00007f41e2425fa0 R15: 00007ffd02e74fb8 [ 115.449960][ T5895] [ 116.576809][ T5698] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 116.579403][ T5698] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 116.622259][ T5698] usb 2-1: cp210x converter now attached to ttyUSB0 [ 116.782492][ T5729] usb 2-1: USB disconnect, device number 2 [ 116.933697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.028436][ T5729] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 117.031987][ T5729] cp210x 2-1:0.0: device disconnected [ 118.164414][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 118.164440][ T30] audit: type=1326 audit(1790053966.494:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz.3.51" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41e219e159 code=0x0 [ 118.474747][ T5931] comedi comedi0: 8255: I/O base address not correctly aligned [ 120.870203][ T5952] netlink: 256 bytes leftover after parsing attributes in process `syz.2.63'. [ 120.870250][ T5952] netlink: 256 bytes leftover after parsing attributes in process `syz.2.63'. [ 125.719739][ T5993] Zero length message leads to an empty skb [ 126.384546][ T5995] FAULT_INJECTION: forcing a failure. [ 126.384546][ T5995] name failslab, interval 1, probability 0, space 0, times 0 [ 126.384587][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: syz.0.77 Not tainted syzkaller #0 PREEMPT(full) [ 126.384615][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.384631][ T5995] Call Trace: [ 126.384640][ T5995] [ 126.384650][ T5995] dump_stack_lvl+0xe8/0x150 [ 126.384690][ T5995] should_fail_ex+0x3eb/0x540 [ 126.384724][ T5995] should_failslab+0xa8/0x100 [ 126.384752][ T5995] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 126.384789][ T5995] ? __d_alloc+0x37/0x6f0 [ 126.384819][ T5995] ? __d_alloc+0x37/0x6f0 [ 126.384857][ T5995] __d_alloc+0x37/0x6f0 [ 126.384894][ T5995] d_alloc_pseudo+0x21/0xc0 [ 126.384932][ T5995] alloc_path_pseudo+0x107/0x220 [ 126.384962][ T5995] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 126.384991][ T5995] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.385028][ T5995] alloc_file_pseudo+0xa8/0x1e0 [ 126.385057][ T5995] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 126.385085][ T5995] ? _raw_spin_unlock+0x28/0x50 [ 126.385116][ T5995] ? alloc_fd+0x651/0x6c0 [ 126.385149][ T5995] sock_alloc_file+0xb8/0x2e0 [ 126.385178][ T5995] ? __sys_socket+0x12b/0x1b0 [ 126.385214][ T5995] __sys_socket+0x13f/0x1b0 [ 126.385251][ T5995] __x64_sys_socket+0x7a/0x90 [ 126.385288][ T5995] do_syscall_64+0x166/0x520 [ 126.385310][ T5995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.385345][ T5995] ? clear_bhb_loop+0x70/0xc0 [ 126.385375][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.385399][ T5995] RIP: 0033:0x7f1b3e59e159 [ 126.385422][ T5995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.385442][ T5995] RSP: 002b:00007f1b3f394028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 126.385467][ T5995] RAX: ffffffffffffffda RBX: 00007f1b3e825fa0 RCX: 00007f1b3e59e159 [ 126.385485][ T5995] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 126.385499][ T5995] RBP: 00007f1b3e63506b R08: 0000000000000000 R09: 0000000000000000 [ 126.385513][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.385527][ T5995] R13: 00007f1b3e826038 R14: 00007f1b3e825fa0 R15: 00007ffdde905f38 [ 126.385562][ T5995] [ 127.140464][ T6002] 9pnet_virtio: no channels available for device syz [ 127.279716][ T6004] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 128.678108][ T6027] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 129.293915][ T5729] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.456264][ T5729] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 129.457620][ T5729] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.457671][ T5729] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 129.457699][ T5729] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 129.457743][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.458289][ T6035] FAULT_INJECTION: forcing a failure. [ 129.458289][ T6035] name failslab, interval 1, probability 0, space 0, times 0 [ 129.458324][ T6035] CPU: 1 UID: 0 PID: 6035 Comm: syz.3.94 Not tainted syzkaller #0 PREEMPT(full) [ 129.458351][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.458366][ T6035] Call Trace: [ 129.458376][ T6035] [ 129.458389][ T6035] dump_stack_lvl+0xe8/0x150 [ 129.458430][ T6035] should_fail_ex+0x3eb/0x540 [ 129.458464][ T6035] should_failslab+0xa8/0x100 [ 129.458494][ T6035] __kmalloc_cache_node_noprof+0xa5/0x620 [ 129.458534][ T6035] ? elevator_alloc+0x7a/0x1b0 [ 129.458566][ T6035] ? elevator_alloc+0x7a/0x1b0 [ 129.458608][ T6035] elevator_alloc+0x7a/0x1b0 [ 129.458647][ T6035] blk_mq_init_sched+0x9b/0x620 [ 129.458684][ T6035] elevator_switch+0x26f/0x7b0 [ 129.458707][ T6035] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 129.458739][ T6035] elevator_change+0x2fa/0x480 [ 129.458763][ T6035] ? do_raw_spin_unlock+0xf5/0x200 [ 129.458798][ T6035] elv_iosched_store+0x504/0x630 [ 129.458829][ T6035] ? __pfx_elv_iosched_store+0x10/0x10 [ 129.458879][ T6035] queue_attr_store+0x207/0x2b0 [ 129.458923][ T6035] ? __pfx_queue_attr_store+0x10/0x10 [ 129.458957][ T6035] ? lock_acquire+0x115/0x350 [ 129.458992][ T6035] ? sysfs_file_kobj+0x1a/0x230 [ 129.459031][ T6035] ? sysfs_file_kobj+0x1a/0x230 [ 129.459060][ T6035] ? sysfs_file_kobj+0x1a/0x230 [ 129.459086][ T6035] ? sysfs_file_kobj+0x1a/0x230 [ 129.459114][ T6035] ? sysfs_file_kobj+0x1e4/0x230 [ 129.459143][ T6035] ? sysfs_kf_write+0x166/0x260 [ 129.459178][ T6035] ? __pfx_sysfs_kf_write+0x10/0x10 [ 129.459204][ T6035] kernfs_fop_write_iter+0x3a4/0x540 [ 129.459237][ T6035] vfs_write+0x612/0xba0 [ 129.459280][ T6035] ? __pfx_vfs_write+0x10/0x10 [ 129.459325][ T6035] ? __fget_files+0x2a/0x420 [ 129.459366][ T6035] ksys_write+0x150/0x270 [ 129.459401][ T6035] ? __pfx_ksys_write+0x10/0x10 [ 129.459461][ T6035] do_syscall_64+0x166/0x520 [ 129.459484][ T6035] ? trace_irq_disable+0x3b/0x140 [ 129.459529][ T6035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.459552][ T6035] ? clear_bhb_loop+0x70/0xc0 [ 129.459580][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.459602][ T6035] RIP: 0033:0x7f41e219e159 [ 129.459626][ T6035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.459646][ T6035] RSP: 002b:00007f41e313c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.459673][ T6035] RAX: ffffffffffffffda RBX: 00007f41e2425fa0 RCX: 00007f41e219e159 [ 129.459694][ T6035] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004 [ 129.459707][ T6035] RBP: 00007f41e223506b R08: 0000000000000000 R09: 0000000000000000 [ 129.459722][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.459736][ T6035] R13: 00007f41e2426038 R14: 00007f41e2425fa0 R15: 00007ffd02e74fb8 [ 129.459777][ T6035] [ 129.459805][ T6035] elv: switch to "kyber" failed, falling back to "none" [ 131.032374][ T6054] syzkaller1: entered promiscuous mode [ 131.032402][ T6054] syzkaller1: entered allmulticast mode [ 131.048896][ T5729] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 131.048928][ T5729] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 131.048944][ T5729] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 131.061401][ T5728] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 131.710917][ T5729] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 131.729769][ T5729] usb 1-1: USB disconnect, device number 2 [ 131.784672][ T5728] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.787552][ T5728] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.787582][ T5728] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.788653][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 131.788678][ T5728] usb 3-1: SerialNumber: syz [ 131.845198][ T5728] usb 3-1: config 0 descriptor?? [ 131.919315][ T5728] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 131.919644][ T5728] dvb-usb: bulk message failed: -22 (3/0) [ 131.971954][ T5728] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.985913][ T5728] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 131.985975][ T5728] usb 3-1: media controller created [ 132.019661][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.059340][ T5728] dvb-usb: bulk message failed: -22 (6/0) [ 132.059506][ T5728] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 132.097554][ T5728] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 132.174469][ T5728] dvb-usb: schedule remote query interval to 150 msecs. [ 132.174526][ T5728] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 132.179263][ T5728] usb 3-1: USB disconnect, device number 2 [ 132.328907][ T6067] device-mapper: ioctl: Unable to rename non-existent device, to uuid .2\´£«.j—DH [ 132.330895][ T5728] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 132.424275][ T5771] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.575772][ T5771] usb 1-1: Using ep0 maxpacket: 32 [ 132.577708][ T5771] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 132.580969][ T5771] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 132.621795][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 132.621827][ T5771] usb 1-1: Product: syz [ 132.621843][ T5771] usb 1-1: Manufacturer: syz [ 132.621857][ T5771] usb 1-1: SerialNumber: syz [ 132.660864][ T5771] usb 1-1: config 0 descriptor?? [ 132.664784][ T6063] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.679879][ T5771] hub 1-1:0.0: bad descriptor, ignoring hub [ 132.679920][ T5771] hub 1-1:0.0: probe with driver hub failed with error -5 [ 133.260416][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.260515][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.506161][ T5771] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.654055][ T5771] usb 2-1: Using ep0 maxpacket: 8 [ 133.656252][ T5771] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 133.658342][ T5771] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 133.658388][ T5771] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 133.658430][ T5771] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 133.658462][ T5771] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.658490][ T5771] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.658518][ T5771] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.658577][ T5771] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 133.658609][ T5771] usb 2-1: config 168 interface 0 has no altsetting 0 [ 133.661474][ T5771] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 133.661515][ T5771] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 133.661561][ T5771] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 133.661593][ T5771] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.661629][ T5771] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.661658][ T5771] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.661687][ T5771] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 133.661715][ T5771] usb 2-1: config 168 interface 0 has no altsetting 0 [ 133.669156][ T5771] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 133.669221][ T5771] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 133.669267][ T5771] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 133.669300][ T5771] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.669330][ T5771] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.669359][ T5771] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 133.669389][ T5771] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 133.669419][ T5771] usb 2-1: config 168 interface 0 has no altsetting 0 [ 134.073033][ T5771] usb 2-1: string descriptor 0 read error: -22 [ 134.073179][ T5771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.230571][ T5771] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 134.472895][ T5771] usb 2-1: USB disconnect, device number 3 [ 134.745572][ T6089] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999999 out of range (51000000..2150000000) [ 135.033792][ T6095] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 135.699596][ T6110] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 136.129678][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 136.821013][ T44] usb 1-1: USB disconnect, device number 3 [ 137.220470][ T6135] fuse: Unknown parameter '00000000000000000000' [ 137.725094][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 137.915651][ T6142] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 137.915909][ T6142] block device autoloading is deprecated and will be removed. [ 138.041948][ T6150] 9pnet_virtio: no channels available for device syz [ 138.583611][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.737241][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 138.738152][ T44] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 138.742474][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 138.779256][ T44] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 138.779291][ T44] usb 1-1: Product: syz [ 138.779308][ T44] usb 1-1: Manufacturer: syz [ 138.779325][ T44] usb 1-1: SerialNumber: syz [ 138.823481][ T44] usb 1-1: config 0 descriptor?? [ 138.840373][ T6154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.864616][ T44] hub 1-1:0.0: bad descriptor, ignoring hub [ 138.864648][ T44] hub 1-1:0.0: probe with driver hub failed with error -5 [ 139.317262][ T6162] syz.2.147 (6162) used greatest stack depth: 19248 bytes left [ 139.317465][ T5698] rust_binder: 6161: undelivered death notification, 0000000000000000 [ 139.397889][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.153'. [ 140.001553][ T44] usb 1-1: USB disconnect, device number 4 [ 140.231815][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 141.108764][ T6217] netlink: del zone limit has 4 unknown bytes [ 141.340327][ T6226] loop0: detected capacity change from 0 to 32768 [ 141.393960][ T1218] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.564021][ T1218] usb 4-1: Using ep0 maxpacket: 32 [ 141.564759][ T1218] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 141.565938][ T1218] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 141.568088][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 141.568118][ T1218] usb 4-1: Product: syz [ 141.568136][ T1218] usb 4-1: Manufacturer: syz [ 141.568153][ T1218] usb 4-1: SerialNumber: syz [ 141.644555][ T1218] usb 4-1: config 0 descriptor?? [ 141.650458][ T6219] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.659513][ T1218] hub 4-1:0.0: bad descriptor, ignoring hub [ 141.662259][ T1218] hub 4-1:0.0: probe with driver hub failed with error -5 [ 141.695903][ T3347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.034672][ T3347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.040128][ T6240] FAULT_INJECTION: forcing a failure. [ 142.040128][ T6240] name failslab, interval 1, probability 0, space 0, times 0 [ 142.040165][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.0.175 Not tainted syzkaller #0 PREEMPT(full) [ 142.040194][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.040209][ T6240] Call Trace: [ 142.040218][ T6240] [ 142.040228][ T6240] dump_stack_lvl+0xe8/0x150 [ 142.040266][ T6240] should_fail_ex+0x3eb/0x540 [ 142.040298][ T6240] should_failslab+0xa8/0x100 [ 142.040323][ T6240] ? security_inode_alloc+0x39/0x310 [ 142.040358][ T6240] kmem_cache_alloc_noprof+0x9c/0x600 [ 142.040394][ T6240] ? security_inode_alloc+0x39/0x310 [ 142.040430][ T6240] security_inode_alloc+0x39/0x310 [ 142.040461][ T6240] inode_init_always_gfp+0x97e/0xd30 [ 142.040496][ T6240] ? __pfx_proc_alloc_inode+0x10/0x10 [ 142.040532][ T6240] alloc_inode+0x82/0x1b0 [ 142.040560][ T6240] new_inode+0x1f/0x170 [ 142.040586][ T6240] ? proc_pid_make_inode+0x19/0x130 [ 142.040616][ T6240] proc_pid_make_inode+0x21/0x130 [ 142.040645][ T6240] proc_ns_instantiate+0x53/0xf0 [ 142.040682][ T6240] proc_fill_cache+0x2a8/0x390 [ 142.040710][ T6240] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 142.040744][ T6240] ? __pfx_proc_fill_cache+0x10/0x10 [ 142.040769][ T6240] ? filldir64+0x41f/0x690 [ 142.040805][ T6240] proc_ns_dir_readdir+0x2f1/0x3d0 [ 142.040847][ T6240] iterate_dir+0x2e2/0x4d0 [ 142.040874][ T6240] __se_sys_getdents64+0xf1/0x280 [ 142.040901][ T6240] ? __pfx___se_sys_getdents64+0x10/0x10 [ 142.040925][ T6240] ? __pfx_filldir64+0x10/0x10 [ 142.040949][ T6240] ? rcu_is_watching+0x16/0xb0 [ 142.040987][ T6240] do_syscall_64+0x166/0x520 [ 142.041009][ T6240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.041033][ T6240] ? clear_bhb_loop+0x70/0xc0 [ 142.041061][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.041095][ T6240] RIP: 0033:0x7f1b3e59e159 [ 142.041117][ T6240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.041137][ T6240] RSP: 002b:00007f1b3f394028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 142.041163][ T6240] RAX: ffffffffffffffda RBX: 00007f1b3e825fa0 RCX: 00007f1b3e59e159 [ 142.041180][ T6240] RDX: 0000000000000400 RSI: 00002000000063c0 RDI: 0000000000000004 [ 142.041195][ T6240] RBP: 00007f1b3e63506b R08: 0000000000000000 R09: 0000000000000000 [ 142.041209][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.041222][ T6240] R13: 00007f1b3e826038 R14: 00007f1b3e825fa0 R15: 00007ffdde905f38 [ 142.041255][ T6240] [ 142.387229][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.391718][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.409220][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.424762][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.425444][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.500255][ T3347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.648133][ T3347] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.950224][ T3347] bridge_slave_1: left allmulticast mode [ 142.950279][ T3347] bridge_slave_1: left promiscuous mode [ 142.952898][ T3347] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.048406][ T3347] bridge_slave_0: left allmulticast mode [ 143.048438][ T3347] bridge_slave_0: left promiscuous mode [ 143.048690][ T3347] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.380932][ T3347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.398516][ T3347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.402298][ T3347] bond0 (unregistering): Released all slaves [ 143.464707][ T5698] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 143.642195][ T5698] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.642731][ T5698] usb 3-1: not running at top speed; connect to a high speed hub [ 143.642765][ T5698] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 143.674243][ T5698] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 143.674278][ T5698] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 143.674300][ T5698] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 143.674321][ T5698] usb 3-1: config 14 has no interface number 0 [ 143.674339][ T5698] usb 3-1: config 14 has no interface number 1 [ 143.674416][ T5698] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 143.674444][ T5698] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 143.674472][ T5698] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.674499][ T5698] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 143.674528][ T5698] usb 3-1: config 14 interface 57 has no altsetting 0 [ 143.674548][ T5698] usb 3-1: config 14 interface 228 has no altsetting 0 [ 143.679608][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.679643][ T5698] usb 3-1: Product: syz [ 143.679659][ T5698] usb 3-1: Manufacturer: syz [ 143.679674][ T5698] usb 3-1: SerialNumber: syz [ 144.240283][ T5698] legousbtower 3-1:14.57: interrupt endpoints not found [ 144.395105][ T3347] hsr_slave_0: left promiscuous mode [ 144.397749][ T3347] hsr_slave_1: left promiscuous mode [ 144.398998][ T3347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.399065][ T3347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.434931][ T3347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.434962][ T3347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.516083][ T3347] veth1_macvtap: left promiscuous mode [ 144.516154][ T3347] veth0_macvtap: left promiscuous mode [ 144.516275][ T3347] veth1_vlan: left promiscuous mode [ 144.516377][ T3347] veth0_vlan: left promiscuous mode [ 144.523931][ T52] Bluetooth: hci0: command tx timeout [ 144.650188][ T5698] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 144.677516][ T5698] legousbtower 3-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 144.686568][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.704486][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.714012][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.724916][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.727191][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.993212][ T3347] team0 (unregistering): Port device team_slave_1 removed [ 145.024117][ T3347] team0 (unregistering): Port device team_slave_0 removed [ 145.178267][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 145.320480][ T44] usb 4-1: USB disconnect, device number 3 [ 145.962138][ T6308] FAULT_INJECTION: forcing a failure. [ 145.962138][ T6308] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 145.962174][ T6308] CPU: 1 UID: 0 PID: 6308 Comm: syz.3.183 Not tainted syzkaller #0 PREEMPT(full) [ 145.962200][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.962214][ T6308] Call Trace: [ 145.962222][ T6308] [ 145.962232][ T6308] dump_stack_lvl+0xe8/0x150 [ 145.962270][ T6308] should_fail_ex+0x3eb/0x540 [ 145.962303][ T6308] prepare_alloc_pages+0x21e/0x5f0 [ 145.962346][ T6308] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 145.962388][ T6308] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 145.962424][ T6308] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 145.962465][ T6308] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 145.962515][ T6308] __alloc_pages_noprof+0x10/0x100 [ 145.962551][ T6308] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 145.962595][ T6308] ? alloc_pages_noprof+0x140/0x2b0 [ 145.962639][ T6308] __kasan_populate_vmalloc+0xb7/0x1c0 [ 145.962683][ T6308] alloc_vmap_area+0xd10/0x1410 [ 145.962729][ T6308] ? __pfx_alloc_vmap_area+0x10/0x10 [ 145.962756][ T6308] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 145.962792][ T6308] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 145.962827][ T6308] ? __get_vm_area_node+0x155/0x2f0 [ 145.962861][ T6308] __get_vm_area_node+0x200/0x2f0 [ 145.962906][ T6308] __vmalloc_node_range_noprof+0x340/0x1690 [ 145.962939][ T6308] ? packet_set_ring+0xca4/0x2de0 [ 145.962994][ T6308] ? __alloc_frozen_pages_noprof+0xa7/0x5a0 [ 145.963034][ T6308] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 145.963086][ T6308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.963118][ T6308] ? alloc_pages_mpol+0x256/0x390 [ 145.963146][ T6308] ? packet_set_ring+0xca4/0x2de0 [ 145.963180][ T6308] vzalloc_noprof+0xb2/0xe0 [ 145.963210][ T6308] ? packet_set_ring+0xca4/0x2de0 [ 145.963244][ T6308] packet_set_ring+0xca4/0x2de0 [ 145.963301][ T6308] ? __pfx_packet_set_ring+0x10/0x10 [ 145.963347][ T6308] ? __might_fault+0xaf/0x130 [ 145.963388][ T6308] ? _copy_from_user+0x94/0xb0 [ 145.963425][ T6308] packet_setsockopt+0xd9c/0x1510 [ 145.963461][ T6308] ? __pfx_packet_setsockopt+0x10/0x10 [ 145.963504][ T6308] ? aa_sk_perm+0x6ff/0x8f0 [ 145.963536][ T6308] ? __pfx_aa_sk_perm+0x10/0x10 [ 145.963564][ T6308] ? aa_sock_opt_perm+0x142/0x1e0 [ 145.963596][ T6308] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 145.963630][ T6308] ? __pfx_packet_setsockopt+0x10/0x10 [ 145.963664][ T6308] do_sock_setsockopt+0x17c/0x1b0 [ 145.963694][ T6308] __x64_sys_setsockopt+0x13d/0x1b0 [ 145.963723][ T6308] do_syscall_64+0x166/0x520 [ 145.963743][ T6308] ? trace_irq_disable+0x3b/0x140 [ 145.963776][ T6308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.963802][ T6308] ? clear_bhb_loop+0x70/0xc0 [ 145.963831][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.963853][ T6308] RIP: 0033:0x7f41e219e159 [ 145.963877][ T6308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.963896][ T6308] RSP: 002b:00007f41e313c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.963923][ T6308] RAX: ffffffffffffffda RBX: 00007f41e2425fa0 RCX: 00007f41e219e159 [ 145.963941][ T6308] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004 [ 145.963955][ T6308] RBP: 00007f41e223506b R08: 0000000000000010 R09: 0000000000000000 [ 145.963971][ T6308] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 145.963984][ T6308] R13: 00007f41e2426038 R14: 00007f41e2425fa0 R15: 00007ffd02e74fb8 [ 145.964026][ T6308] [ 146.187830][ T6308] syz.3.183: vmalloc error: size 8388608, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 146.188606][ T6308] CPU: 0 UID: 0 PID: 6308 Comm: syz.3.183 Not tainted syzkaller #0 PREEMPT(full) [ 146.188682][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.188723][ T6308] Call Trace: [ 146.188745][ T6308] [ 146.188775][ T6308] dump_stack_lvl+0xe8/0x150 [ 146.188873][ T6308] warn_alloc+0x24d/0x270 [ 146.188970][ T6308] ? lockdep_hardirqs_on+0x7b/0x110 [ 146.189072][ T6308] ? __pfx_warn_alloc+0x10/0x10 [ 146.189166][ T6308] ? kfree+0x1c5/0x650 [ 146.189258][ T6308] ? __get_vm_area_node+0x219/0x2f0 [ 146.189364][ T6308] __vmalloc_node_range_noprof+0x368/0x1690 [ 146.189510][ T6308] ? __alloc_frozen_pages_noprof+0xa7/0x5a0 [ 146.189611][ T6308] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 146.189747][ T6308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 146.189833][ T6308] ? alloc_pages_mpol+0x256/0x390 [ 146.189914][ T6308] ? packet_set_ring+0xca4/0x2de0 [ 146.190008][ T6308] vzalloc_noprof+0xb2/0xe0 [ 146.190083][ T6308] ? packet_set_ring+0xca4/0x2de0 [ 146.190178][ T6308] packet_set_ring+0xca4/0x2de0 [ 146.190327][ T6308] ? __pfx_packet_set_ring+0x10/0x10 [ 146.190447][ T6308] ? __might_fault+0xaf/0x130 [ 146.190546][ T6308] ? _copy_from_user+0x94/0xb0 [ 146.190647][ T6308] packet_setsockopt+0xd9c/0x1510 [ 146.190745][ T6308] ? __pfx_packet_setsockopt+0x10/0x10 [ 146.190876][ T6308] ? aa_sk_perm+0x6ff/0x8f0 [ 146.190977][ T6308] ? __pfx_aa_sk_perm+0x10/0x10 [ 146.191052][ T6308] ? aa_sock_opt_perm+0x142/0x1e0 [ 146.191137][ T6308] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 146.191210][ T6308] ? __pfx_packet_setsockopt+0x10/0x10 [ 146.191298][ T6308] do_sock_setsockopt+0x17c/0x1b0 [ 146.191380][ T6308] __x64_sys_setsockopt+0x13d/0x1b0 [ 146.191457][ T6308] do_syscall_64+0x166/0x520 [ 146.191510][ T6308] ? trace_irq_disable+0x3b/0x140 [ 146.191607][ T6308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.191671][ T6308] ? clear_bhb_loop+0x70/0xc0 [ 146.191747][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.191820][ T6308] RIP: 0033:0x7f41e219e159 [ 146.191884][ T6308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.191939][ T6308] RSP: 002b:00007f41e313c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.192003][ T6308] RAX: ffffffffffffffda RBX: 00007f41e2425fa0 RCX: 00007f41e219e159 [ 146.192047][ T6308] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004 [ 146.192129][ T6308] RBP: 00007f41e223506b R08: 0000000000000010 R09: 0000000000000000 [ 146.192170][ T6308] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 146.192212][ T6308] R13: 00007f41e2426038 R14: 00007f41e2425fa0 R15: 00007ffd02e74fb8 [ 146.192307][ T6308] [ 146.273200][ T6308] Mem-Info: [ 146.273261][ T6308] active_anon:21828 inactive_anon:2 isolated_anon:0 [ 146.273261][ T6308] active_file:127 inactive_file:56202 isolated_file:0 [ 146.273261][ T6308] unevictable:0 dirty:455 writeback:0 [ 146.273261][ T6308] slab_reclaimable:10449 slab_unreclaimable:87250 [ 146.273261][ T6308] mapped:24725 shmem:16977 pagetables:1154 [ 146.273261][ T6308] sec_pagetables:0 bounce:0 [ 146.273261][ T6308] kernel_misc_reclaimable:0 [ 146.273261][ T6308] free:1304796 free_pcp:17401 free_cma:0 [ 146.273458][ T6308] Node 0 active_anon:87312kB inactive_anon:8kB active_file:508kB inactive_file:224596kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98900kB dirty:1808kB writeback:0kB shmem:67908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11620kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 146.274796][ T6308] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 146.274983][ T6308] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.275202][ T6308] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 146.275357][ T6308] Node 0 DMA32 free:1262836kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:87312kB inactive_anon:8kB active_file:508kB inactive_file:224596kB unevictable:0kB writepending:1808kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:69352kB local_pcp:40452kB free_cma:0kB [ 146.275555][ T6308] lowmem_reserve[]: 0 0 1 1 1 [ 146.275666][ T6308] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 146.275852][ T6308] lowmem_reserve[]: 0 0 0 0 0 [ 146.275969][ T6308] Node 1 Normal free:3940988kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:12kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 146.276183][ T6308] lowmem_reserve[]: 0 0 0 0 0 [ 146.276300][ T6308] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 146.276814][ T6308] Node 0 DMA32: 335*4kB (ME) 223*8kB (ME) 388*16kB (UME) 470*32kB (UME) 247*64kB (UME) 102*128kB (UM) 61*256kB (M) 26*512kB (UM) 15*1024kB (M) 11*2048kB (M) 279*4096kB (UM) = 1262836kB [ 146.277381][ T6308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 146.277728][ T6308] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 12*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 959*4096kB (M) = 3941040kB [ 146.278323][ T6308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.278381][ T6308] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 146.278430][ T6308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.278486][ T6308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 146.278536][ T6308] 73304 total pagecache pages [ 146.278570][ T6308] 2 pages in swap cache [ 146.278594][ T6308] Free swap = 124988kB [ 146.278619][ T6308] Total swap = 124996kB [ 146.278651][ T6308] 2097051 pages RAM [ 146.278681][ T6308] 0 pages HighMem/MovableOnly [ 146.278706][ T6308] 429554 pages reserved [ 146.278730][ T6308] 0 pages cma reserved [ 146.604461][ T52] Bluetooth: hci0: command tx timeout [ 146.766088][ T52] Bluetooth: hci3: command tx timeout [ 147.029431][ T5698] usb 3-1: USB disconnect, device number 3 [ 147.045263][ T5698] legousbtower 3-1:14.228: LEGO USB Tower #-159 now disconnected [ 147.326841][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.326957][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.329120][ T6242] bridge_slave_0: entered allmulticast mode [ 147.344312][ T6242] bridge_slave_0: entered promiscuous mode [ 147.501581][ T3347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.551869][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.552082][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.552260][ T6242] bridge_slave_1: entered allmulticast mode [ 147.569894][ T6242] bridge_slave_1: entered promiscuous mode [ 147.661249][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 147.713942][ T3347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.743984][ T6242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.749396][ T6242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.835623][ T3347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.863644][ T5698] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 147.865300][ T6242] team0: Port device team_slave_0 added [ 147.869474][ T6242] team0: Port device team_slave_1 added [ 147.957150][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.957172][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.957200][ T6242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.959221][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.959238][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.959265][ T6242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.083657][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 148.084379][ T5698] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 148.085618][ T5698] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 148.090991][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 148.091021][ T5698] usb 4-1: Product: syz [ 148.091040][ T5698] usb 4-1: Manufacturer: syz [ 148.091060][ T5698] usb 4-1: SerialNumber: syz [ 148.147704][ T5698] usb 4-1: config 0 descriptor?? [ 148.162026][ T6332] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.171269][ T5698] hub 4-1:0.0: bad descriptor, ignoring hub [ 148.171298][ T5698] hub 4-1:0.0: probe with driver hub failed with error -5 [ 148.208819][ T3347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.465592][ T6242] hsr_slave_0: entered promiscuous mode [ 148.469532][ T6242] hsr_slave_1: entered promiscuous mode [ 148.472027][ T6242] debugfs: 'hsr0' already exists in 'hsr' [ 148.472053][ T6242] Cannot create hsr debugfs directory [ 148.684341][ T52] Bluetooth: hci0: command tx timeout [ 148.844028][ T52] Bluetooth: hci3: command tx timeout [ 149.067590][ T3347] bridge_slave_1: left allmulticast mode [ 149.067622][ T3347] bridge_slave_1: left promiscuous mode [ 149.067863][ T3347] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.094512][ T6332] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 149.098858][ T3347] bridge_slave_0: left allmulticast mode [ 149.098890][ T3347] bridge_slave_0: left promiscuous mode [ 149.099512][ T3347] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.260470][ T6345] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.614268][ T3347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.620339][ T3347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.635129][ T6369] syz.2.197 uses obsolete (PF_INET,SOCK_PACKET) [ 149.649093][ T3347] bond0 (unregistering): Released all slaves [ 149.695860][ T37] smbdirect: ib_dev[syz0] removed [ 149.801154][ T5715] infiniband syz0: ib_query_port failed (-19) [ 149.812661][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 150.009350][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.009597][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.009750][ T6279] bridge_slave_0: entered allmulticast mode [ 150.011802][ T6279] bridge_slave_0: entered promiscuous mode [ 150.042098][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.042398][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.042559][ T6279] bridge_slave_1: entered allmulticast mode [ 150.094300][ T6279] bridge_slave_1: entered promiscuous mode [ 150.187094][ T6279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.212140][ T6279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.284902][ T61] raw-gadget.0 gadget.3: failed to queue suspend event [ 150.354785][ T6332] raw-gadget.0 gadget.3: failed to queue resume event [ 150.386592][ T49] raw-gadget.0 gadget.3: failed to queue suspend event [ 150.435661][ T6279] team0: Port device team_slave_0 added [ 150.441462][ T6279] team0: Port device team_slave_1 added [ 150.459504][ T6332] raw-gadget.0 gadget.3: failed to queue resume event [ 150.478201][ T49] raw-gadget.0 gadget.3: failed to queue suspend event [ 150.544265][ T6332] raw-gadget.0 gadget.3: failed to queue resume event [ 150.600969][ T1144] raw-gadget.0 gadget.3: failed to queue suspend event [ 150.665008][ T6332] raw-gadget.0 gadget.3: failed to queue resume event [ 150.668119][ T6279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.668138][ T6279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.668167][ T6279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.735757][ T49] raw-gadget.0 gadget.3: failed to queue suspend event [ 150.764207][ T52] Bluetooth: hci0: command tx timeout [ 150.786674][ T6332] raw-gadget.0 gadget.3: failed to queue disconnect event [ 150.893983][ T5016] usb 4-1: USB disconnect, device number 4 [ 150.923988][ T52] Bluetooth: hci3: command tx timeout [ 150.947403][ T6279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.947423][ T6279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.947449][ T6279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.083468][ T3347] hsr_slave_0: left promiscuous mode [ 151.087518][ T3347] hsr_slave_1: left promiscuous mode [ 151.089663][ T3347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.089690][ T3347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.097217][ T3347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.097301][ T3347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.157945][ T3347] veth1_macvtap: left promiscuous mode [ 151.157990][ T3347] veth0_macvtap: left promiscuous mode [ 151.158127][ T3347] veth1_vlan: left promiscuous mode [ 151.158199][ T3347] veth0_vlan: left promiscuous mode [ 151.548227][ T3347] team0 (unregistering): Port device team_slave_1 removed [ 151.579810][ T3347] team0 (unregistering): Port device team_slave_0 removed [ 151.987173][ T6279] hsr_slave_0: entered promiscuous mode [ 151.988850][ T6279] hsr_slave_1: entered promiscuous mode [ 151.994355][ T6279] debugfs: 'hsr0' already exists in 'hsr' [ 151.994383][ T6279] Cannot create hsr debugfs directory [ 152.594230][ T6417] dlm: no locking on control device [ 152.757701][ T6242] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.848927][ T6242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.862033][ T6242] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.892671][ T6425] FAT-fs (mtdblock0): bogus logical sector size 65535 [ 152.892715][ T6425] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 152.958455][ T6242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.963083][ T6242] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.994854][ T6242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.000343][ T6242] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.003948][ T52] Bluetooth: hci3: command tx timeout [ 153.032944][ T6242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.391481][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 153.659003][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.809227][ T6242] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.856674][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.856785][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.903230][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.903309][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.996583][ T6462] FAULT_INJECTION: forcing a failure. [ 153.996583][ T6462] name failslab, interval 1, probability 0, space 0, times 0 [ 153.996618][ T6462] CPU: 1 UID: 0 PID: 6462 Comm: syz.3.215 Not tainted syzkaller #0 PREEMPT(full) [ 153.996644][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.996658][ T6462] Call Trace: [ 153.996667][ T6462] [ 153.996676][ T6462] dump_stack_lvl+0xe8/0x150 [ 153.996713][ T6462] should_fail_ex+0x3eb/0x540 [ 153.996744][ T6462] should_failslab+0xa8/0x100 [ 153.996772][ T6462] __kmalloc_noprof+0xf9/0x710 [ 153.996808][ T6462] ? __list_lru_init+0x114/0x680 [ 153.996841][ T6462] ? __list_lru_init+0x114/0x680 [ 153.996882][ T6462] __list_lru_init+0x114/0x680 [ 153.996925][ T6462] sget_fc+0xf04/0x1a40 [ 153.996957][ T6462] ? __pfx_super_s_dev_test+0x10/0x10 [ 153.996993][ T6462] ? __pfx_super_s_dev_set+0x10/0x10 [ 153.997027][ T6462] ? __pfx_sget_fc+0x10/0x10 [ 153.997056][ T6462] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.997092][ T6462] sget_dev+0xab/0xf0 [ 153.997123][ T6462] ? __pfx_sget_dev+0x10/0x10 [ 153.997151][ T6462] ? get_mtd_device+0x200/0x240 [ 153.997192][ T6462] ? __pfx_get_mtd_device+0x10/0x10 [ 153.997235][ T6462] mtd_get_sb+0x51/0x410 [ 153.997262][ T6462] ? __pfx_jffs2_fill_super+0x10/0x10 [ 153.997291][ T6462] ? __pfx_jffs2_fill_super+0x10/0x10 [ 153.997320][ T6462] get_tree_mtd+0x597/0x7d0 [ 153.997359][ T6462] ? __pfx_jffs2_fill_super+0x10/0x10 [ 153.997387][ T6462] ? __pfx_get_tree_mtd+0x10/0x10 [ 153.997428][ T6462] vfs_get_tree+0x92/0x2a0 [ 153.997466][ T6462] do_new_mount+0x319/0xdc0 [ 153.997501][ T6462] ? __pfx_do_new_mount+0x10/0x10 [ 153.997531][ T6462] ? ns_capable+0x84/0xe0 [ 153.997559][ T6462] ? path_mount+0x647/0x1050 [ 153.997591][ T6462] ? user_path_at+0xd4/0x160 [ 153.997625][ T6462] __se_sys_mount+0x31d/0x420 [ 153.997661][ T6462] ? __pfx___se_sys_mount+0x10/0x10 [ 153.997697][ T6462] ? __x64_sys_mount+0x20/0xc0 [ 153.997729][ T6462] do_syscall_64+0x166/0x520 [ 153.997750][ T6462] ? trace_irq_disable+0x3b/0x140 [ 153.997783][ T6462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.997807][ T6462] ? clear_bhb_loop+0x70/0xc0 [ 153.997833][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.997856][ T6462] RIP: 0033:0x7f41e219e159 [ 153.997879][ T6462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.997897][ T6462] RSP: 002b:00007f41e313c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 153.997920][ T6462] RAX: ffffffffffffffda RBX: 00007f41e2425fa0 RCX: 00007f41e219e159 [ 153.997937][ T6462] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 153.997959][ T6462] RBP: 00007f41e223506b R08: 0000000000000000 R09: 0000000000000000 [ 153.997974][ T6462] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 153.997989][ T6462] R13: 00007f41e2426038 R14: 00007f41e2425fa0 R15: 00007ffd02e74fb8 [ 153.998025][ T6462] [ 154.708170][ T6279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.736175][ T6279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.737224][ T6279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.743396][ T6279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.757946][ T5771] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 154.775286][ T6279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.792241][ T6279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.802117][ T6279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.815081][ T6279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.935134][ T5771] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 154.936447][ T5771] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.936497][ T5771] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 154.936524][ T5771] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 154.936548][ T5771] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 154.936592][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.941614][ T6472] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.941762][ T6472] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.023848][ T5771] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 155.026033][ T5771] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 155.026128][ T5771] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 155.032280][ T5771] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 155.050390][ T5771] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 155.050483][ T5771] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 155.093569][ T5771] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 155.142981][ T6279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.198373][ T6279] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.228895][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.229001][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.232201][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.232277][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.690900][ T44] usb 4-1: USB disconnect, device number 5 [ 155.771000][ T44] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 155.773699][ T5729] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.840408][ T44] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 155.841351][ T44] keyspan 4-1:1.0: device disconnected [ 155.934743][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 155.935505][ T5729] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.938263][ T5729] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 155.938320][ T5729] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.938346][ T5729] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.938372][ T5729] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.938398][ T5729] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.938443][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.272528][ T5729] usb 3-1: usb_control_msg returned -32 [ 156.272588][ T5729] usbtmc 3-1:16.0: can't read capabilities [ 156.279918][ T6242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.458592][ T6279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.504675][ T6242] veth0_vlan: entered promiscuous mode [ 156.532655][ T6242] veth1_vlan: entered promiscuous mode [ 156.624247][ T6242] veth0_macvtap: entered promiscuous mode [ 156.627488][ T6279] veth0_vlan: entered promiscuous mode [ 156.657435][ T6242] veth1_macvtap: entered promiscuous mode [ 156.685291][ T6279] veth1_vlan: entered promiscuous mode [ 156.693472][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.724971][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.822961][ T6279] veth0_macvtap: entered promiscuous mode [ 156.834366][ T3398] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.835268][ T3398] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.835313][ T3398] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.899937][ T6279] veth1_macvtap: entered promiscuous mode [ 156.944559][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.972504][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.972528][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.036789][ T6279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.082593][ T6279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.121216][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.121255][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.254876][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.275839][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.276277][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.294621][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.661684][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.661709][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.857619][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.981638][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.981662][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.041676][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.284423][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.349372][ T6560] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 158.349400][ T6560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.180'. [ 158.439931][ T6560] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 158.440629][ T6560] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 158.572574][ T10] usb 3-1: USB disconnect, device number 4 [ 158.802689][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.811517][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.826428][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.829079][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.829827][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.916631][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.270316][ T6584] ======================================================= [ 159.270316][ T6584] WARNING: The mand mount option has been deprecated and [ 159.270316][ T6584] and is ignored by this kernel. Remove the mand [ 159.270316][ T6584] option from the mount to silence this warning. [ 159.270316][ T6584] ======================================================= [ 159.400382][ T6586] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 159.400382][ T6586] [ 159.400651][ T6586] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 159.401032][ T6586] CIFS: Attempting to mount //172.20.20.170/share [ 159.537193][ T6586] CIFS: VFS: cifs_mount failed w/return code = -112 [ 159.900974][ T61] bridge_slave_1: left allmulticast mode [ 159.901005][ T61] bridge_slave_1: left promiscuous mode [ 159.901270][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.952519][ T61] bridge_slave_0: left allmulticast mode [ 159.952551][ T61] bridge_slave_0: left promiscuous mode [ 159.952863][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.851462][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.884913][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.904502][ T61] bond0 (unregistering): Released all slaves [ 160.924529][ T52] Bluetooth: hci1: command tx timeout [ 160.975511][ T6611] tipc: Started in network mode [ 160.975548][ T6611] tipc: Node identity 7f000001, cluster identity 4711 [ 161.001956][ T6611] tipc: New replicast peer: 0.0.0.0 [ 161.002900][ T6611] tipc: Enabled bearer , priority 10 [ 161.292841][ T61] rxrpc: Leaked peer a1 {1} [0000:0000:0000:0000:0000:0000:0000:0000]:7003 [ 161.739970][ T6640] 9pnet_virtio: no channels available for device syz [ 162.136513][ T61] hsr_slave_0: left promiscuous mode [ 162.139993][ T61] hsr_slave_1: left promiscuous mode [ 162.140994][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.141019][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.176171][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.176202][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.231572][ T61] veth1_macvtap: left promiscuous mode [ 162.231620][ T61] veth0_macvtap: left promiscuous mode [ 162.231729][ T61] veth1_vlan: left promiscuous mode [ 162.231803][ T61] veth0_vlan: left promiscuous mode [ 162.578861][ T6541] input: syz0 as /devices/virtual/misc/uhid/0005:057B:030A.0001/input/input7 [ 162.653672][ T5698] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 162.727587][ T6666] program syz.2.246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.728624][ T6666] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 162.835620][ T5698] usb 1-1: Using ep0 maxpacket: 8 [ 162.836404][ T5698] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 162.841700][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.841736][ T5698] usb 1-1: Product: syz [ 162.841765][ T5698] usb 1-1: Manufacturer: syz [ 162.841782][ T5698] usb 1-1: SerialNumber: syz [ 162.941908][ T6541] hid-generic 0005:057B:030A.0001: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 163.003964][ T52] Bluetooth: hci1: command tx timeout [ 163.199598][ T61] team0 (unregistering): Port device team_slave_1 removed [ 163.246592][ T5698] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.246761][ T5698] usb 1-1: MIDIStreaming interface descriptor not found [ 163.289111][ T61] team0 (unregistering): Port device team_slave_0 removed [ 163.440612][ T5698] usb 1-1: USB disconnect, device number 5 [ 163.759167][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.818601][ T5715] tipc: Node number set to 2130706433 [ 163.855364][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.979507][ T6683] warning: `syz.1.250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 164.037452][ T44] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.039527][ T44] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.039563][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.039584][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.039632][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.042963][ T44] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.042996][ T44] usb 3-1: Product: syz [ 164.043012][ T44] usb 3-1: Manufacturer: syz [ 164.134166][ T44] cdc_wdm 3-1:1.0: skipping garbage [ 164.134191][ T44] cdc_wdm 3-1:1.0: skipping garbage [ 164.140406][ T44] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 164.140443][ T44] cdc_wdm 3-1:1.0: Unknown control protocol [ 164.410231][ T6541] usb 3-1: USB disconnect, device number 5 [ 164.885934][ T6568] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.888837][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.889042][ T6568] bridge_slave_0: entered allmulticast mode [ 164.891171][ T6568] bridge_slave_0: entered promiscuous mode [ 164.926675][ T6568] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.929490][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.929707][ T6568] bridge_slave_1: entered allmulticast mode [ 164.935410][ T6568] bridge_slave_1: entered promiscuous mode [ 165.010628][ T6568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.025339][ T6568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.066499][ T6568] team0: Port device team_slave_0 added [ 165.070224][ T6568] team0: Port device team_slave_1 added [ 165.086597][ T52] Bluetooth: hci1: command tx timeout [ 165.141327][ T6568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.141347][ T6568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.141372][ T6568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.191344][ T6568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.191364][ T6568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.191392][ T6568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.377711][ T6568] hsr_slave_0: entered promiscuous mode [ 165.380426][ T6568] hsr_slave_1: entered promiscuous mode [ 165.428934][ T6720] nftables ruleset with unbound chain [ 165.559796][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 165.956644][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.251622][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.357711][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.363418][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.379632][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.380601][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.381466][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.735155][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.013346][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.172233][ T5627] Bluetooth: hci1: command tx timeout [ 167.297702][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 167.583039][ T6778] kvm: emulating exchange as write [ 167.741296][ T61] bridge_slave_1: left allmulticast mode [ 167.741329][ T61] bridge_slave_1: left promiscuous mode [ 167.741575][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.776699][ T61] bridge_slave_0: left allmulticast mode [ 167.776729][ T61] bridge_slave_0: left promiscuous mode [ 167.776981][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.418440][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.454496][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.454728][ T52] Bluetooth: hci3: command tx timeout [ 168.496168][ T61] bond0 (unregistering): Released all slaves [ 168.582186][ T6816] 9pnet_virtio: no channels available for device syz [ 168.869653][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 169.123931][ T6541] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 169.274833][ T6541] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.03 [ 169.276953][ T6541] usb 1-1: Dual-Role OTG device on HNP port [ 169.277253][ T6541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.277279][ T6541] usb 1-1: Product: HID Gadget [ 169.277294][ T6541] usb 1-1: SerialNumber: 0123456789 [ 169.358427][ T61] hsr_slave_0: left promiscuous mode [ 169.368333][ T61] hsr_slave_1: left promiscuous mode [ 169.392691][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.392720][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.405823][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.405896][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.459520][ T61] veth1_macvtap: left promiscuous mode [ 169.459562][ T61] veth0_macvtap: left promiscuous mode [ 169.459670][ T61] veth1_vlan: left promiscuous mode [ 169.491481][ T61] veth0_vlan: left promiscuous mode [ 169.526255][ T6541] input: HID Gadget as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0002/input/input8 [ 169.922944][ T6541] hid-generic 0003:1D6B:0104.0002: input,hidraw0: USB HID v1.01 Keyboard [HID Gadget] on usb-dummy_hcd.0-1/input0 [ 170.124135][ T5715] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 170.266127][ T5715] usb 2-1: device descriptor read/64, error -71 [ 170.446005][ T61] team0 (unregistering): Port device team_slave_1 removed [ 170.486898][ T61] team0 (unregistering): Port device team_slave_0 removed [ 170.513969][ T5715] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 170.524352][ T52] Bluetooth: hci3: command tx timeout [ 170.648683][ T5715] usb 2-1: device descriptor read/64, error -71 [ 170.755094][ T5715] usb usb2-port1: attempt power cycle [ 170.814041][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 171.119784][ T5715] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 171.119974][ T6568] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.149058][ T5715] usb 2-1: device descriptor read/8, error -71 [ 171.149232][ T6568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.179157][ T6568] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.208126][ T6568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.232583][ T6568] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.248499][ T6568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.249475][ T6568] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.274212][ T6568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.326826][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.326954][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.327134][ T6745] bridge_slave_0: entered allmulticast mode [ 171.329810][ T6745] bridge_slave_0: entered promiscuous mode [ 171.377465][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.377692][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.377865][ T6745] bridge_slave_1: entered allmulticast mode [ 171.382038][ T6745] bridge_slave_1: entered promiscuous mode [ 171.414269][ T5715] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 171.436020][ T5715] usb 2-1: device descriptor read/8, error -71 [ 171.544106][ T5715] usb usb2-port1: unable to enumerate USB device [ 171.607970][ T6745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.612691][ T6745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.726586][ T6745] team0: Port device team_slave_0 added [ 171.801669][ T6745] team0: Port device team_slave_1 added [ 171.909019][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.909043][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.909073][ T6745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.953020][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.953039][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.953068][ T6745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.142545][ T6745] hsr_slave_0: entered promiscuous mode [ 172.149559][ T6745] hsr_slave_1: entered promiscuous mode [ 172.156627][ T6745] debugfs: 'hsr0' already exists in 'hsr' [ 172.156654][ T6745] Cannot create hsr debugfs directory [ 172.271082][ T6898] FAULT_INJECTION: forcing a failure. [ 172.271082][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 172.271118][ T6898] CPU: 1 UID: 0 PID: 6898 Comm: syz.2.292 Not tainted syzkaller #0 PREEMPT(full) [ 172.271150][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.271166][ T6898] Call Trace: [ 172.271175][ T6898] [ 172.271185][ T6898] dump_stack_lvl+0xe8/0x150 [ 172.271221][ T6898] should_fail_ex+0x3eb/0x540 [ 172.271252][ T6898] should_failslab+0xa8/0x100 [ 172.271279][ T6898] __kmalloc_cache_noprof+0x9e/0x600 [ 172.271315][ T6898] ? __kmalloc_cache_noprof+0x148/0x600 [ 172.271347][ T6898] ? sctp_add_bind_addr+0x8c/0x370 [ 172.271376][ T6898] ? sctp_add_bind_addr+0x8c/0x370 [ 172.271412][ T6898] sctp_add_bind_addr+0x8c/0x370 [ 172.271448][ T6898] sctp_copy_local_addr_list+0x31a/0x4e0 [ 172.271480][ T6898] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 172.271512][ T6898] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 172.271547][ T6898] ? sctp_v4_is_any+0x35/0x60 [ 172.271577][ T6898] ? sctp_copy_one_addr+0x93/0x360 [ 172.271607][ T6898] sctp_bind_addr_copy+0xb3/0x3c0 [ 172.271644][ T6898] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 172.271673][ T6898] sctp_connect_new_asoc+0x2ff/0x6b0 [ 172.271713][ T6898] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 172.271757][ T6898] ? __local_bh_enable_ip+0xd6/0x140 [ 172.271781][ T6898] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 172.271810][ T6898] ? security_sctp_bind_connect+0x7e/0x2c0 [ 172.271858][ T6898] sctp_sendmsg+0x159b/0x2d00 [ 172.271906][ T6898] ? __pfx_futex_wake_mark+0x10/0x10 [ 172.271935][ T6898] ? __pfx_sctp_sendmsg+0x10/0x10 [ 172.271993][ T6898] ? aa_sock_msg_perm+0xfc/0x210 [ 172.272020][ T6898] ? sock_rps_record_flow+0x19/0x350 [ 172.272054][ T6898] ? inet_sendmsg+0x298/0x320 [ 172.272091][ T6898] ? __pfx_inet_sendmsg+0x10/0x10 [ 172.272118][ T6898] sock_sendmsg_nosec+0x10e/0x180 [ 172.272154][ T6898] __sys_sendto+0x408/0x5a0 [ 172.272180][ T6898] ? __pfx___sys_sendto+0x10/0x10 [ 172.272233][ T6898] ? rcu_is_watching+0x16/0xb0 [ 172.272263][ T6898] __x64_sys_sendto+0xde/0x100 [ 172.272291][ T6898] do_syscall_64+0x166/0x520 [ 172.272312][ T6898] ? trace_irq_disable+0x3b/0x140 [ 172.272345][ T6898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.272370][ T6898] ? clear_bhb_loop+0x70/0xc0 [ 172.272399][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.272422][ T6898] RIP: 0033:0x7f4a4519e159 [ 172.272445][ T6898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.272465][ T6898] RSP: 002b:00007f4a4602a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 172.272490][ T6898] RAX: ffffffffffffffda RBX: 00007f4a45425fa0 RCX: 00007f4a4519e159 [ 172.272507][ T6898] RDX: 0000000000000007 RSI: 00002000000001c0 RDI: 0000000000000003 [ 172.272521][ T6898] RBP: 00007f4a4523506b R08: 0000200000000200 R09: 0000000000000010 [ 172.272536][ T6898] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000000 [ 172.272549][ T6898] R13: 00007f4a45426038 R14: 00007f4a45425fa0 R15: 00007ffd811f72a8 [ 172.272585][ T6898] [ 172.604602][ T52] Bluetooth: hci3: command tx timeout [ 172.658858][ T6568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.949498][ T6568] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.971526][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.971648][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.021033][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.021144][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.190182][ T6909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.549338][ T6745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.578130][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.598094][ T6745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.622474][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.630848][ T6745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.674005][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.675291][ T6745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.683854][ T52] Bluetooth: hci3: command tx timeout [ 174.768324][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.052933][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.102194][ T6745] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.124542][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.124622][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.158830][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.158945][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.526929][ T6568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.813915][ T6568] veth0_vlan: entered promiscuous mode [ 175.862605][ T6568] veth1_vlan: entered promiscuous mode [ 176.062254][ T6568] veth0_macvtap: entered promiscuous mode [ 176.080911][ T6568] veth1_macvtap: entered promiscuous mode [ 176.172943][ T6568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.184870][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.252235][ T6568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.333826][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 176.334523][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.334581][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.334661][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.340208][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 176.346989][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 176.398577][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 176.398637][ T10] usb 3-1: Product: syz [ 176.398655][ T10] usb 3-1: Manufacturer: syz [ 176.398671][ T10] usb 3-1: SerialNumber: syz [ 176.406138][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.457380][ T10] usb 3-1: config 0 descriptor?? [ 176.463858][ T6992] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 176.491373][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 176.491405][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 176.731537][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.731566][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.821179][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.821206][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.048473][ T6745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.177139][ T6745] veth0_vlan: entered promiscuous mode [ 177.233424][ T6745] veth1_vlan: entered promiscuous mode [ 177.348112][ T6745] veth0_macvtap: entered promiscuous mode [ 177.362165][ T6745] veth1_macvtap: entered promiscuous mode [ 177.391559][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.405665][ T6992] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 177.426871][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.521795][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.523122][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.523174][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.523244][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.580137][ T7009] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.772148][ T7033] FAULT_INJECTION: forcing a failure. [ 177.772148][ T7033] name failslab, interval 1, probability 0, space 0, times 0 [ 177.772184][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.1.317 Not tainted syzkaller #0 PREEMPT(full) [ 177.772211][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.772225][ T7033] Call Trace: [ 177.772234][ T7033] [ 177.772242][ T7033] dump_stack_lvl+0xe8/0x150 [ 177.772279][ T7033] should_fail_ex+0x3eb/0x540 [ 177.772310][ T7033] should_failslab+0xa8/0x100 [ 177.772336][ T7033] ? __send_signal_locked+0x220/0xee0 [ 177.772375][ T7033] kmem_cache_alloc_noprof+0x9c/0x600 [ 177.772405][ T7033] ? sig_get_ucounts+0x26/0x450 [ 177.772431][ T7033] ? __send_signal_locked+0x220/0xee0 [ 177.772464][ T7033] ? sig_get_ucounts+0x3e4/0x450 [ 177.772490][ T7033] __send_signal_locked+0x220/0xee0 [ 177.772534][ T7033] send_signal_locked+0x135/0x9e0 [ 177.772576][ T7033] ? __pfx_send_signal_locked+0x10/0x10 [ 177.772616][ T7033] ? rcu_is_watching+0x16/0xb0 [ 177.772651][ T7033] force_sig_info_to_task+0x316/0x4b0 [ 177.772697][ T7033] force_sig_fault+0xf0/0x150 [ 177.772723][ T7033] ? __pfx_force_sig_fault+0x10/0x10 [ 177.772752][ T7033] ? __bad_area_nosemaphore+0x31e/0x6a0 [ 177.772795][ T7033] exc_page_fault+0x6a/0xc0 [ 177.772842][ T7033] asm_exc_page_fault+0x26/0x30 [ 177.772865][ T7033] RIP: 0033:0x7f30f9c5c538 [ 177.772887][ T7033] Code: 00 00 00 48 8b 8c 24 80 00 00 00 48 89 4c 24 28 48 8b 8c 24 70 1b 00 00 48 89 4c 24 18 48 8b 8c 24 78 1b 00 00 48 89 4c 24 38 <48> 8b 08 48 89 0c 24 48 8b 48 08 48 8b 40 10 48 89 4c 24 20 48 89 [ 177.772906][ T7033] RSP: 002b:00007f30facd84b0 EFLAGS: 00010202 [ 177.772929][ T7033] RAX: 0000000000000000 RBX: 0000200000000000 RCX: 0000000000000000 [ 177.772943][ T7033] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 177.772958][ T7033] RBP: ffffffffffffffff R08: 0000000000000000 R09: 000000000000006c [ 177.772973][ T7033] R10: ffffffffffffffff R11: 0000200000000000 R12: 00000000fec00000 [ 177.772988][ T7033] R13: 00007f30facd8bd0 R14: 0000200000000000 R15: 0000000000000000 [ 177.773021][ T7033] [ 178.099535][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.099559][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.119110][ T7037] jffs2: notice: (7037) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 178.409831][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.409858][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.701692][ T49] raw-gadget.0 gadget.2: failed to queue suspend event [ 178.770606][ T6992] raw-gadget.0 gadget.2: failed to queue resume event [ 178.800692][ T61] raw-gadget.0 gadget.2: failed to queue suspend event [ 178.869083][ T6992] raw-gadget.0 gadget.2: failed to queue resume event [ 178.890686][ T7058] misc userio: Invalid payload size [ 178.906280][ T49] raw-gadget.0 gadget.2: failed to queue suspend event [ 179.084111][ T1218] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.119003][ T6992] raw-gadget.0 gadget.2: failed to queue disconnect event [ 179.234771][ T1218] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 179.235667][ T6541] usb 3-1: USB disconnect, device number 6 [ 179.279618][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.279676][ T1218] usb 4-1: Product: syz [ 179.279695][ T1218] usb 4-1: Manufacturer: syz [ 179.279712][ T1218] usb 4-1: SerialNumber: syz [ 179.462504][ T7071] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 179.474986][ T7071] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 179.544960][ T1218] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 179.545024][ T1218] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 179.545039][ T1218] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 179.613927][ T1218] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 179.661662][ T1218] usb 4-1: USB disconnect, device number 6 [ 180.285748][ T1218] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.433610][ T1218] usb 2-1: Using ep0 maxpacket: 32 [ 180.443226][ T1218] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 180.453346][ T1218] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 180.488137][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 180.488186][ T1218] usb 2-1: Product: syz [ 180.488198][ T1218] usb 2-1: Manufacturer: syz [ 180.488210][ T1218] usb 2-1: SerialNumber: syz [ 180.491253][ T1218] usb 2-1: config 0 descriptor?? [ 180.511664][ T7090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 180.545170][ T1218] hub 2-1:0.0: bad descriptor, ignoring hub [ 180.545210][ T1218] hub 2-1:0.0: probe with driver hub failed with error -5 [ 180.573671][ T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.723646][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 180.724697][ T44] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 180.727190][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.727241][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 180.727268][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.730598][ T44] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 180.730633][ T44] usb 4-1: Product: syz [ 180.730650][ T44] usb 4-1: Manufacturer: syz [ 180.730667][ T44] usb 4-1: SerialNumber: syz [ 180.821362][ T44] usb 4-1: config 0 descriptor?? [ 180.927210][ T44] rc_core: IR keymap rc-imon-rsc not found [ 180.927232][ T44] Registered IR keymap rc-empty [ 180.948589][ T44] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 180.966313][ T44] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 181.065231][ T44] usb 4-1: USB disconnect, device number 7 [ 181.186419][ T7114] FAULT_INJECTION: forcing a failure. [ 181.186419][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 181.186481][ T7114] CPU: 0 UID: 0 PID: 7114 Comm: syz.2.342 Not tainted syzkaller #0 PREEMPT(full) [ 181.186506][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.186520][ T7114] Call Trace: [ 181.186530][ T7114] [ 181.186546][ T7114] dump_stack_lvl+0xe8/0x150 [ 181.186582][ T7114] should_fail_ex+0x3eb/0x540 [ 181.186618][ T7114] should_failslab+0xa8/0x100 [ 181.186646][ T7114] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 181.186684][ T7114] ? kasprintf+0xe2/0x140 [ 181.186714][ T7114] ? kasprintf+0xe2/0x140 [ 181.186749][ T7114] kvasprintf+0xeb/0x1a0 [ 181.186783][ T7114] ? __pfx_kvasprintf+0x10/0x10 [ 181.186817][ T7114] ? __lock_acquire+0x747/0x2de0 [ 181.186859][ T7114] kasprintf+0xe2/0x140 [ 181.186894][ T7114] ? __pfx_kasprintf+0x10/0x10 [ 181.186938][ T7114] logfc+0x15b/0x520 [ 181.186978][ T7114] ? trace_contention_end+0x3d/0x140 [ 181.187016][ T7114] ? __pfx_logfc+0x10/0x10 [ 181.187046][ T7114] ? __mutex_lock+0x305/0x15a0 [ 181.187086][ T7114] nfs_get_tree+0x66b/0x1650 [ 181.187109][ T7114] ? apparmor_capable+0x126/0x170 [ 181.187151][ T7114] vfs_get_tree+0x92/0x2a0 [ 181.187189][ T7114] vfs_cmd_create+0xa2/0x200 [ 181.187218][ T7114] __se_sys_fsconfig+0x6b9/0x810 [ 181.187250][ T7114] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 181.187277][ T7114] ? rcu_is_watching+0x16/0xb0 [ 181.187308][ T7114] ? __x64_sys_fsconfig+0x20/0xc0 [ 181.187334][ T7114] do_syscall_64+0x166/0x520 [ 181.187354][ T7114] ? trace_irq_disable+0x3b/0x140 [ 181.187385][ T7114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.187408][ T7114] ? clear_bhb_loop+0x70/0xc0 [ 181.187436][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.187459][ T7114] RIP: 0033:0x7f4a4519e159 [ 181.187482][ T7114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.187502][ T7114] RSP: 002b:00007f4a4602a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 181.187529][ T7114] RAX: ffffffffffffffda RBX: 00007f4a45425fa0 RCX: 00007f4a4519e159 [ 181.187546][ T7114] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 181.187561][ T7114] RBP: 00007f4a4523506b R08: 0000000000000000 R09: 0000000000000000 [ 181.187575][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.187590][ T7114] R13: 00007f4a45426038 R14: 00007f4a45425fa0 R15: 00007ffd811f72a8 [ 181.187626][ T7114] [ 181.406383][ T7090] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 181.619101][ T7109] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.683339][ T7120] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 182.043338][ T7134] rust_binder: Write failure EINVAL in pid:32 [ 182.227020][ T7139] tipc: Enabled bearer , priority 0 [ 182.242678][ T7126] md: could not open device unknown-block(0,0). [ 182.243003][ T7126] md: md_import_device returned -6 [ 182.320463][ T7139] syzkaller0: entered promiscuous mode [ 182.320502][ T7139] syzkaller0: entered allmulticast mode [ 182.321310][ T7139] tipc: Resetting bearer [ 182.380202][ T7137] tipc: Resetting bearer [ 182.660207][ T3398] raw-gadget.0 gadget.1: failed to queue suspend event [ 182.735752][ T7090] raw-gadget.0 gadget.1: failed to queue resume event [ 182.782453][ T172] raw-gadget.0 gadget.1: failed to queue suspend event [ 182.856687][ T7090] raw-gadget.0 gadget.1: failed to queue resume event [ 182.874848][ T172] raw-gadget.0 gadget.1: failed to queue suspend event [ 182.942419][ T7154] 9pnet_virtio: no channels available for device syz [ 182.961153][ T7090] raw-gadget.0 gadget.1: failed to queue resume event [ 183.017171][ T49] raw-gadget.0 gadget.1: failed to queue suspend event [ 183.093740][ T7090] raw-gadget.0 gadget.1: failed to queue resume event [ 183.146843][ T49] raw-gadget.0 gadget.1: failed to queue suspend event [ 183.252942][ T7090] raw-gadget.0 gadget.1: failed to queue disconnect event [ 183.400500][ T44] usb 2-1: USB disconnect, device number 8 [ 183.729079][ T7172] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 183.729106][ T7172] block device autoloading is deprecated and will be removed. [ 184.289359][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.291609][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.553681][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.557263][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.224038][ T1218] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 186.349791][ T7220] 9pnet_virtio: no channels available for device syz [ 186.393672][ T1218] usb 2-1: Using ep0 maxpacket: 32 [ 186.399176][ T1218] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 186.400590][ T1218] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 186.440048][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 186.440191][ T1218] usb 2-1: Product: syz [ 186.440228][ T1218] usb 2-1: Manufacturer: syz [ 186.440270][ T1218] usb 2-1: SerialNumber: syz [ 186.478209][ T1218] usb 2-1: config 0 descriptor?? [ 186.480970][ T7215] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.501330][ T1218] hub 2-1:0.0: bad descriptor, ignoring hub [ 186.501360][ T1218] hub 2-1:0.0: probe with driver hub failed with error -5 [ 186.569934][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'. [ 186.778239][ T1218] usb 2-1: USB disconnect, device number 9 [ 187.366380][ T44] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.553665][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 187.554446][ T44] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 187.555744][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 187.558513][ T44] usb 2-1: string descriptor 0 read error: -22 [ 187.558650][ T44] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 187.561653][ T44] usb 2-1: config 0 descriptor?? [ 187.622259][ T7215] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.633693][ T44] hub 2-1:0.0: bad descriptor, ignoring hub [ 187.633722][ T44] hub 2-1:0.0: probe with driver hub failed with error -5 [ 187.788647][ T7229] binder: Binderfs stats mode cannot be changed during a remount [ 187.933983][ T1218] usb 2-1: USB disconnect, device number 10 [ 188.326526][ T7137] tipc: Disabling bearer [ 188.799240][ T1144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.986434][ T1144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.151765][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.166722][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.168933][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.172735][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.204680][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.214544][ T1144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.301097][ T7244] kAFS: unable to lookup cell 'testcell' [ 189.642186][ T1144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.733214][ T1218] logitech-hidpp-device 0003:046D:C082.0003: item fetching failed at offset 0/2 [ 189.754736][ T1218] logitech-hidpp-device 0003:046D:C082.0003: hidpp_probe:parse failed [ 189.754863][ T1218] logitech-hidpp-device 0003:046D:C082.0003: probe with driver logitech-hidpp-device failed with error -22 [ 190.209573][ T1218] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 190.260379][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.402'. [ 190.359035][ T7282] FAULT_INJECTION: forcing a failure. [ 190.359035][ T7282] name failslab, interval 1, probability 0, space 0, times 0 [ 190.359072][ T7282] CPU: 1 UID: 0 PID: 7282 Comm: syz.1.404 Not tainted syzkaller #0 PREEMPT(full) [ 190.359100][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.359115][ T7282] Call Trace: [ 190.359124][ T7282] [ 190.359134][ T7282] dump_stack_lvl+0xe8/0x150 [ 190.359173][ T7282] should_fail_ex+0x3eb/0x540 [ 190.359207][ T7282] should_failslab+0xa8/0x100 [ 190.359234][ T7282] __kmalloc_noprof+0xf9/0x710 [ 190.359270][ T7282] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 190.359293][ T7282] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 190.359326][ T7282] snd_pcm_hw_refine+0xa18/0x17d0 [ 190.359367][ T7282] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 190.359420][ T7282] ? __kasan_kmalloc+0x93/0xb0 [ 190.359449][ T7282] ? __kmalloc_cache_noprof+0x31c/0x600 [ 190.359484][ T7282] ? __kmalloc_cache_noprof+0x148/0x600 [ 190.359516][ T7282] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 190.359545][ T7282] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 190.359582][ T7282] snd_pcm_hw_param_near+0x108/0x4d0 [ 190.359621][ T7282] snd_pcm_oss_change_params_locked+0x1e07/0x3c80 [ 190.359682][ T7282] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 190.359733][ T7282] ? try_to_wake_up+0x8c5/0x14d0 [ 190.359770][ T7282] snd_pcm_oss_write+0x26e/0xba0 [ 190.359815][ T7282] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 190.359847][ T7282] vfs_write+0x296/0xba0 [ 190.359885][ T7282] ? __pfx_vfs_write+0x10/0x10 [ 190.359920][ T7282] ? __fget_files+0x2a/0x420 [ 190.359951][ T7282] ? __fget_files+0x2a/0x420 [ 190.359992][ T7282] ? __fget_files+0x3a2/0x420 [ 190.360019][ T7282] ? __fget_files+0x2a/0x420 [ 190.360058][ T7282] ksys_write+0x150/0x270 [ 190.360145][ T7282] ? __pfx_ksys_write+0x10/0x10 [ 190.360189][ T7282] do_syscall_64+0x166/0x520 [ 190.360211][ T7282] ? trace_irq_disable+0x3b/0x140 [ 190.360243][ T7282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.360266][ T7282] ? clear_bhb_loop+0x70/0xc0 [ 190.360294][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.360318][ T7282] RIP: 0033:0x7f30f9d9e159 [ 190.360340][ T7282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.360361][ T7282] RSP: 002b:00007f30facda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.360387][ T7282] RAX: ffffffffffffffda RBX: 00007f30fa025fa0 RCX: 00007f30f9d9e159 [ 190.360405][ T7282] RDX: 0000000000088020 RSI: 0000200000002000 RDI: 0000000000000004 [ 190.360421][ T7282] RBP: 00007f30f9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 190.360436][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.360450][ T7282] R13: 00007f30fa026038 R14: 00007f30fa025fa0 R15: 00007ffead519b38 [ 190.360486][ T7282] [ 190.371301][ T1218] usb 3-1: Using ep0 maxpacket: 32 [ 190.384757][ T1218] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 190.397622][ T1218] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 190.559908][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 190.559993][ T1218] usb 3-1: Product: syz [ 190.560098][ T1218] usb 3-1: Manufacturer: syz [ 190.560140][ T1218] usb 3-1: SerialNumber: syz [ 190.767865][ T1218] usb 3-1: config 0 descriptor?? [ 190.768739][ T7272] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.808756][ T1218] hub 3-1:0.0: bad descriptor, ignoring hub [ 190.808779][ T1218] hub 3-1:0.0: probe with driver hub failed with error -5 [ 190.978099][ T1144] bridge_slave_1: left allmulticast mode [ 190.978132][ T1144] bridge_slave_1: left promiscuous mode [ 190.978372][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.983357][ T1144] bridge_slave_0: left allmulticast mode [ 191.007509][ T1144] bridge_slave_0: left promiscuous mode [ 191.007781][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.325654][ T5627] Bluetooth: hci1: command tx timeout [ 191.337694][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.342122][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.374429][ T1144] bond0 (unregistering): Released all slaves [ 191.793986][ T7272] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 191.935981][ T1144] hsr_slave_0: left promiscuous mode [ 191.941707][ T1144] hsr_slave_1: left promiscuous mode [ 191.942719][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.942743][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.976728][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.976752][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.012901][ T7272] usb 3-1: device firmware changed [ 192.026594][ T1218] usb 3-1: USB disconnect, device number 7 [ 192.058048][ T1144] veth1_macvtap: left promiscuous mode [ 192.058101][ T1144] veth0_macvtap: left promiscuous mode [ 192.058214][ T1144] veth1_vlan: left promiscuous mode [ 192.058289][ T1144] veth0_vlan: left promiscuous mode [ 192.247749][ T1218] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.413697][ T1218] usb 3-1: Using ep0 maxpacket: 32 [ 192.416151][ T1218] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 192.417416][ T1218] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 192.464735][ T1218] usb 3-1: string descriptor 0 read error: -22 [ 192.464904][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 192.502731][ T1218] usb 3-1: config 0 descriptor?? [ 192.511744][ T7286] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.524521][ T1218] hub 3-1:0.0: bad descriptor, ignoring hub [ 192.524556][ T1218] hub 3-1:0.0: probe with driver hub failed with error -5 [ 192.836468][ T5698] usb 3-1: USB disconnect, device number 8 [ 193.073060][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 193.121432][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 193.406015][ T5627] Bluetooth: hci1: command tx timeout [ 193.462668][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'. [ 193.602426][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 193.901055][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.901618][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.958287][ T7342] tipc: Started in network mode [ 193.958323][ T7342] tipc: Node identity 1e3344b05ffe, cluster identity 4711 [ 193.958546][ T7342] tipc: Enabled bearer , priority 1 [ 194.096660][ T7335] tipc: Resetting bearer [ 194.224510][ T7335] tipc: Disabling bearer [ 194.423614][ T6541] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 194.431692][ T7358] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 194.482808][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.483017][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.483181][ T7246] bridge_slave_0: entered allmulticast mode [ 194.488519][ T7246] bridge_slave_0: entered promiscuous mode [ 194.498765][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.499399][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.499944][ T7246] bridge_slave_1: entered allmulticast mode [ 194.502753][ T7246] bridge_slave_1: entered promiscuous mode [ 194.581580][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.596622][ T6541] usb 3-1: Using ep0 maxpacket: 32 [ 194.598550][ T6541] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 194.602129][ T6541] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 194.620477][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.651331][ T6541] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 194.651397][ T6541] usb 3-1: Product: syz [ 194.651414][ T6541] usb 3-1: Manufacturer: syz [ 194.651429][ T6541] usb 3-1: SerialNumber: syz [ 194.687908][ T6541] usb 3-1: config 0 descriptor?? [ 194.688316][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.688749][ T7350] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.689005][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.691481][ T6541] hub 3-1:0.0: bad descriptor, ignoring hub [ 194.691510][ T6541] hub 3-1:0.0: probe with driver hub failed with error -5 [ 194.858277][ T7246] team0: Port device team_slave_0 added [ 194.878630][ T7246] team0: Port device team_slave_1 added [ 194.978406][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.978429][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.978458][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.981107][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.981128][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.981158][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.187442][ T7246] hsr_slave_0: entered promiscuous mode [ 195.188851][ T7246] hsr_slave_1: entered promiscuous mode [ 195.333269][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 195.485426][ T5627] Bluetooth: hci1: command tx timeout [ 195.526147][ T7246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.530611][ T7246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 195.531874][ T7246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.547550][ T7246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 195.551248][ T7246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.579396][ T7246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 195.580568][ T7246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.599789][ T7246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 195.613634][ T7350] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 195.736687][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.776274][ T7350] usb 3-1: device firmware changed [ 195.778094][ T7246] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.799541][ T989] usb 3-1: USB disconnect, device number 9 [ 195.820929][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.821055][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.857271][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.857379][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.984472][ T989] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 196.133635][ T989] usb 3-1: Using ep0 maxpacket: 32 [ 196.134351][ T989] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 196.135298][ T989] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 196.140805][ T989] usb 3-1: string descriptor 0 read error: -22 [ 196.140952][ T989] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 196.196223][ T989] usb 3-1: config 0 descriptor?? [ 196.211653][ T7368] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 196.224001][ T989] hub 3-1:0.0: bad descriptor, ignoring hub [ 196.224058][ T989] hub 3-1:0.0: probe with driver hub failed with error -5 [ 196.426783][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 196.544466][ T6541] usb 3-1: USB disconnect, device number 10 [ 196.701771][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.131414][ T7246] veth0_vlan: entered promiscuous mode [ 197.166369][ T7246] veth1_vlan: entered promiscuous mode [ 197.246420][ T7246] veth0_macvtap: entered promiscuous mode [ 197.251571][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 197.278589][ T7246] veth1_macvtap: entered promiscuous mode [ 197.310662][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.341108][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.373813][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.374584][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.374629][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.374699][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.565930][ T5627] Bluetooth: hci1: command tx timeout [ 197.567954][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.567980][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.668933][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.668959][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.939752][ T7430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.287848][ T7440] netlink: 48 bytes leftover after parsing attributes in process `syz.0.423'. [ 198.387121][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.422'. [ 198.404665][ T989] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 198.564175][ T989] usb 3-1: Using ep0 maxpacket: 32 [ 198.564962][ T989] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 198.566044][ T989] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 198.568219][ T989] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 198.568247][ T989] usb 3-1: Product: syz [ 198.568264][ T989] usb 3-1: Manufacturer: syz [ 198.568281][ T989] usb 3-1: SerialNumber: syz [ 198.635767][ T989] usb 3-1: config 0 descriptor?? [ 198.636810][ T7436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.639326][ T989] hub 3-1:0.0: bad descriptor, ignoring hub [ 198.639349][ T989] hub 3-1:0.0: probe with driver hub failed with error -5 [ 199.256816][ T7463] FAULT_INJECTION: forcing a failure. [ 199.256816][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 199.256859][ T7463] CPU: 1 UID: 0 PID: 7463 Comm: syz.4.431 Not tainted syzkaller #0 PREEMPT(full) [ 199.256889][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.256906][ T7463] Call Trace: [ 199.256916][ T7463] [ 199.256927][ T7463] dump_stack_lvl+0xe8/0x150 [ 199.256968][ T7463] should_fail_ex+0x3eb/0x540 [ 199.257000][ T7463] ? __alloc_skb+0x1db/0x7a0 [ 199.257024][ T7463] should_failslab+0xa8/0x100 [ 199.257051][ T7463] ? __alloc_skb+0x1db/0x7a0 [ 199.257072][ T7463] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 199.257105][ T7463] ? __alloc_skb+0x18d/0x7a0 [ 199.257129][ T7463] ? __alloc_skb+0x1db/0x7a0 [ 199.257158][ T7463] __alloc_skb+0x1db/0x7a0 [ 199.257186][ T7463] _sctp_make_chunk+0x59/0x290 [ 199.257227][ T7463] sctp_make_init+0x5e9/0xe20 [ 199.257271][ T7463] ? __pfx_sctp_make_init+0x10/0x10 [ 199.257325][ T7463] sctp_sf_do_prm_asoc+0xcf/0x3f0 [ 199.257355][ T7463] sctp_do_sm+0x239/0x5dd0 [ 199.257381][ T7463] ? __pfx_sctp_pname+0x10/0x10 [ 199.257412][ T7463] ? kmem_cache_alloc_noprof+0x151/0x600 [ 199.257446][ T7463] ? radix_tree_node_alloc+0x82/0x3a0 [ 199.257491][ T7463] ? radix_tree_node_alloc+0xba/0x3a0 [ 199.257527][ T7463] ? __pfx_sctp_do_sm+0x10/0x10 [ 199.257609][ T7463] ? sctp_assoc_set_id+0x1b3/0x350 [ 199.257637][ T7463] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 199.257680][ T7463] __sctp_connect+0x911/0xdc0 [ 199.257729][ T7463] ? __pfx___sctp_connect+0x10/0x10 [ 199.257765][ T7463] ? security_sctp_bind_connect+0x7e/0x2c0 [ 199.257806][ T7463] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 199.257840][ T7463] sctp_getsockopt_connectx3+0x227/0x360 [ 199.257880][ T7463] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 199.257923][ T7463] ? sctp_getsockopt+0x12f/0xb90 [ 199.257960][ T7463] ? __local_bh_enable_ip+0xd6/0x140 [ 199.257994][ T7463] sctp_getsockopt+0x984/0xb90 [ 199.258030][ T7463] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 199.258067][ T7463] do_sock_getsockopt+0x51d/0x7e0 [ 199.258100][ T7463] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 199.258143][ T7463] ? __fget_files+0x3a2/0x420 [ 199.258174][ T7463] ? __fget_files+0x2a/0x420 [ 199.258212][ T7463] __x64_sys_getsockopt+0x1a4/0x240 [ 199.258248][ T7463] do_syscall_64+0x166/0x520 [ 199.258270][ T7463] ? trace_irq_disable+0x3b/0x140 [ 199.258304][ T7463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.258329][ T7463] ? clear_bhb_loop+0x70/0xc0 [ 199.258358][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.258382][ T7463] RIP: 0033:0x7fb7d779e159 [ 199.258416][ T7463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.258438][ T7463] RSP: 002b:00007fb7d59f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 199.258466][ T7463] RAX: ffffffffffffffda RBX: 00007fb7d7a25fa0 RCX: 00007fb7d779e159 [ 199.258484][ T7463] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 199.258498][ T7463] RBP: 00007fb7d783506b R08: 0000200000000140 R09: 0000000000000000 [ 199.258515][ T7463] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 199.258531][ T7463] R13: 00007fb7d7a26038 R14: 00007fb7d7a25fa0 R15: 00007fff28dd8868 [ 199.258567][ T7463] [ 199.538752][ T7436] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 199.710006][ T7465] ------------[ cut here ]------------ [ 199.710027][ T7465] !chanctx_conf [ 199.710077][ T7465] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#0: syz.1.433/7465 [ 199.733779][ T7465] Modules linked in: [ 199.738540][ T7465] CPU: 0 UID: 0 PID: 7465 Comm: syz.1.433 Not tainted syzkaller #0 PREEMPT(full) [ 199.749686][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.761852][ T7465] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 199.770428][ T7465] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 7f 60 f6 90 0f 0b 90 eb e1 e8 eb 7f 60 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 199.795960][ T7465] RSP: 0018:ffffc900033ff008 EFLAGS: 00010287 [ 199.803358][ T7465] RAX: ffffffff8b678505 RBX: ffff888047964050 RCX: 0000000000080000 [ 199.813254][ T7465] RDX: ffffc90003901000 RSI: 0000000000000410 RDI: 0000000000000411 [ 199.823086][ T7465] RBP: dffffc0000000000 R08: ffffffff8b678077 R09: 0000000000000000 [ 199.832822][ T7465] R10: dffffc0000000000 R11: ffffed1008f2c831 R12: ffffffff8b678077 [ 199.842527][ T7465] R13: ffff88804cfe0f40 R14: 0000000000000001 R15: 0000000000000000 [ 199.852583][ T7465] FS: 00007f30facda6c0(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 199.863628][ T7465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.872552][ T7465] CR2: 000000110c32ce83 CR3: 000000005f634000 CR4: 00000000003526f0 [ 199.882778][ T7465] Call Trace: [ 199.886928][ T7465] [ 199.890528][ T7465] rate_control_rate_init_all_links+0xf4/0x190 [ 199.898064][ T7465] sta_apply_auth_flags+0x1bc/0x430 [ 199.904453][ T7465] sta_apply_parameters+0x1291/0x1b50 [ 199.911005][ T7465] ieee80211_add_station+0x3de/0x700 [ 199.917460][ T7465] rdev_add_station+0xfc/0x290 [ 199.923275][ T7465] nl80211_new_station+0x1b4e/0x1fd0 [ 199.929882][ T7465] ? __pfx_nl80211_new_station+0x10/0x10 [ 199.936760][ T7465] ? __rtnl_unlock+0xc3/0xe0 [ 199.942397][ T7465] ? nl80211_pre_doit+0x53d/0x890 [ 199.948544][ T7465] genl_family_rcv_msg_doit+0x233/0x340 [ 199.955339][ T7465] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 199.962728][ T7465] ? bpf_lsm_capable+0x9/0x20 [ 199.969305][ T7465] ? security_capable+0x7e/0x2c0 [ 199.975813][ T7465] genl_rcv_msg+0x614/0x7a0 [ 199.978027][ T7436] usb 3-1: device firmware changed [ 199.981234][ T5715] usb 3-1: USB disconnect, device number 11 [ 199.995050][ T7465] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.001176][ T7465] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 200.007732][ T7465] ? __pfx_nl80211_new_station+0x10/0x10 [ 200.014933][ T7465] ? __pfx_nl80211_post_doit+0x10/0x10 [ 200.021575][ T7465] ? __asan_memcpy+0x40/0x70 [ 200.027241][ T7465] ? __skb_clone+0x5c/0x6c0 [ 200.032748][ T7465] netlink_rcv_skb+0x226/0x4a0 [ 200.038598][ T7465] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.045257][ T7465] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.051821][ T7465] ? down_read+0x2b9/0x320 [ 200.057255][ T7465] genl_rcv+0x28/0x40 [ 200.062130][ T7465] netlink_unicast+0x7bd/0x940 [ 200.067993][ T7465] netlink_sendmsg+0x7c3/0xae0 [ 200.075157][ T7465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.081601][ T7465] ? apparmor_socket_sendmsg+0x98/0x360 [ 200.088397][ T7465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.094916][ T7465] sock_sendmsg_nosec+0x13a/0x180 [ 200.101046][ T7465] ____sys_sendmsg+0x54e/0x850 [ 200.106892][ T7465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.113337][ T7465] ? import_iovec+0x73/0xa0 [ 200.118922][ T7465] ___sys_sendmsg+0x2a5/0x360 [ 200.124850][ T7465] ? __lock_acquire+0x747/0x2de0 [ 200.130881][ T7465] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.137245][ T7465] ? futex_wait+0x2a2/0x390 [ 200.142774][ T7465] ? __fget_files+0x2a/0x420 [ 200.148425][ T7465] ? __fget_files+0x3a2/0x420 [ 200.154180][ T7465] __x64_sys_sendmsg+0x1b1/0x290 [ 200.160204][ T7465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.166893][ T7465] do_syscall_64+0x166/0x520 [ 200.172480][ T7465] ? trace_irq_disable+0x3b/0x140 [ 200.179478][ T7465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.187336][ T7465] ? clear_bhb_loop+0x70/0xc0 [ 200.193047][ T7465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.200247][ T7465] RIP: 0033:0x7f30f9d9e159 [ 200.205864][ T7465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.229539][ T7465] RSP: 002b:00007f30facda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.239813][ T7465] RAX: ffffffffffffffda RBX: 00007f30fa025fa0 RCX: 00007f30f9d9e159 [ 200.249493][ T7465] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 200.259205][ T7465] RBP: 00007f30f9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 200.268906][ T7465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.279522][ T7465] R13: 00007f30fa026038 R14: 00007f30fa025fa0 R15: 00007ffead519b38 [ 200.289862][ T7465] [ 200.293624][ T7465] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.302387][ T7465] CPU: 0 UID: 0 PID: 7465 Comm: syz.1.433 Not tainted syzkaller #0 PREEMPT(full) [ 200.313452][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.325556][ T7465] Call Trace: [ 200.329522][ T7465] [ 200.333066][ T7465] vpanic+0x56d/0xa70 [ 200.337896][ T7465] ? __pfx__printk+0x10/0x10 [ 200.343446][ T7465] ? __pfx_vpanic+0x10/0x10 [ 200.348911][ T7465] ? is_bpf_text_address+0x292/0x2b0 [ 200.355310][ T7465] ? is_bpf_text_address+0x26/0x2b0 [ 200.361608][ T7465] panic+0xc5/0xd0 [ 200.366170][ T7465] ? __pfx_panic+0x10/0x10 [ 200.371552][ T7465] __warn+0x315/0x4c0 [ 200.376396][ T7465] ? rate_control_rate_init+0x5a6/0x630 [ 200.383101][ T7465] ? rate_control_rate_init+0x5a6/0x630 [ 200.389810][ T7465] __report_bug+0x276/0x570 [ 200.395278][ T7465] ? rate_control_rate_init+0x5a6/0x630 [ 200.402023][ T7465] ? __pfx___report_bug+0x10/0x10 [ 200.408110][ T7465] ? __lock_acquire+0x747/0x2de0 [ 200.414102][ T7465] ? __lock_acquire+0x747/0x2de0 [ 200.420091][ T7465] ? rate_control_rate_init+0x5a6/0x630 [ 200.426799][ T7465] report_bug+0x16b/0x220 [ 200.432090][ T7465] ? rate_control_rate_init+0x5a6/0x630 [ 200.438796][ T7465] ? rate_control_rate_init+0x5a8/0x630 [ 200.445521][ T7465] handle_bug+0x9c/0x200 [ 200.450680][ T7465] exc_invalid_op+0x1a/0x50 [ 200.456132][ T7465] asm_exc_invalid_op+0x1a/0x20 [ 200.461985][ T7465] RIP: 0010:rate_control_rate_init+0x5a6/0x630 [ 200.469537][ T7465] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 7f 60 f6 90 0f 0b 90 eb e1 e8 eb 7f 60 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00 [ 200.493112][ T7465] RSP: 0018:ffffc900033ff008 EFLAGS: 00010287 [ 200.500429][ T7465] RAX: ffffffff8b678505 RBX: ffff888047964050 RCX: 0000000000080000 [ 200.510037][ T7465] RDX: ffffc90003901000 RSI: 0000000000000410 RDI: 0000000000000411 [ 200.519681][ T7465] RBP: dffffc0000000000 R08: ffffffff8b678077 R09: 0000000000000000 [ 200.529290][ T7465] R10: dffffc0000000000 R11: ffffed1008f2c831 R12: ffffffff8b678077 [ 200.538902][ T7465] R13: ffff88804cfe0f40 R14: 0000000000000001 R15: 0000000000000000 [ 200.548512][ T7465] ? rate_control_rate_init+0x117/0x630 [ 200.555222][ T7465] ? rate_control_rate_init+0x117/0x630 [ 200.561967][ T7465] ? rate_control_rate_init+0x5a5/0x630 [ 200.568691][ T7465] ? rate_control_rate_init+0x5a5/0x630 [ 200.575413][ T7465] rate_control_rate_init_all_links+0xf4/0x190 [ 200.582862][ T7465] sta_apply_auth_flags+0x1bc/0x430 [ 200.589206][ T7465] sta_apply_parameters+0x1291/0x1b50 [ 200.595740][ T7465] ieee80211_add_station+0x3de/0x700 [ 200.602142][ T7465] rdev_add_station+0xfc/0x290 [ 200.607931][ T7465] nl80211_new_station+0x1b4e/0x1fd0 [ 200.614358][ T7465] ? __pfx_nl80211_new_station+0x10/0x10 [ 200.621172][ T7465] ? __rtnl_unlock+0xc3/0xe0 [ 200.626746][ T7465] ? nl80211_pre_doit+0x53d/0x890 [ 200.632808][ T7465] genl_family_rcv_msg_doit+0x233/0x340 [ 200.639527][ T7465] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 200.646879][ T7465] ? bpf_lsm_capable+0x9/0x20 [ 200.652535][ T7465] ? security_capable+0x7e/0x2c0 [ 200.658517][ T7465] genl_rcv_msg+0x614/0x7a0 [ 200.664001][ T7465] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.670078][ T7465] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 200.676561][ T7465] ? __pfx_nl80211_new_station+0x10/0x10 [ 200.683364][ T7465] ? __pfx_nl80211_post_doit+0x10/0x10 [ 200.689945][ T7465] ? __asan_memcpy+0x40/0x70 [ 200.695491][ T7465] ? __skb_clone+0x5c/0x6c0 [ 200.700927][ T7465] netlink_rcv_skb+0x226/0x4a0 [ 200.706676][ T7465] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.712740][ T7465] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.719130][ T7465] ? down_read+0x2b9/0x320 [ 200.724491][ T7465] genl_rcv+0x28/0x40 [ 200.729340][ T7465] netlink_unicast+0x7bd/0x940 [ 200.735094][ T7465] netlink_sendmsg+0x7c3/0xae0 [ 200.740843][ T7465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.747221][ T7465] ? apparmor_socket_sendmsg+0x98/0x360 [ 200.753934][ T7465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.760303][ T7465] sock_sendmsg_nosec+0x13a/0x180 [ 200.766363][ T7465] ____sys_sendmsg+0x54e/0x850 [ 200.772105][ T7465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.778474][ T7465] ? import_iovec+0x73/0xa0 [ 200.783905][ T7465] ___sys_sendmsg+0x2a5/0x360 [ 200.789533][ T7465] ? __lock_acquire+0x747/0x2de0 [ 200.795487][ T7465] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.801757][ T7465] ? futex_wait+0x2a2/0x390 [ 200.807213][ T7465] ? __fget_files+0x2a/0x420 [ 200.812751][ T7465] ? __fget_files+0x3a2/0x420 [ 200.818396][ T7465] __x64_sys_sendmsg+0x1b1/0x290 [ 200.824339][ T7465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.830962][ T7465] do_syscall_64+0x166/0x520 [ 200.836483][ T7465] ? trace_irq_disable+0x3b/0x140 [ 200.842566][ T7465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.849893][ T7465] ? clear_bhb_loop+0x70/0xc0 [ 200.855533][ T7465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.862625][ T7465] RIP: 0033:0x7f30f9d9e159 [ 200.867945][ T7465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.891498][ T7465] RSP: 002b:00007f30facda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.901626][ T7465] RAX: ffffffffffffffda RBX: 00007f30fa025fa0 RCX: 00007f30f9d9e159 [ 200.911209][ T7465] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 200.920897][ T7465] RBP: 00007f30f9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 200.930485][ T7465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.940069][ T7465] R13: 00007f30fa026038 R14: 00007f30fa025fa0 R15: 00007ffead519b38 [ 200.949674][ T7465] [ 200.953928][ T7465] Kernel Offset: disabled [ 200.959131][ T7465] Rebooting in 86400 seconds..