last executing test programs: 4.587705014s ago: executing program 3 (id=257): socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000680)={0x0, 0x0, 0xd, 0x0, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x5) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r4, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) r7 = syz_open_dev$vivid(&(0x7f00000001c0), 0x2, 0x2) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000400)={0x0, 0x1, @stop_pts=0x5320000000000000}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'batadv_slave_1\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x220, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0xffffffff, 0xffffff00], 'batadv0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x5e, 0xa, 0x0, 0x1}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x1ff, 0x4, 0x0, [0x1, 0xb73, 0x8001, 0x1ff, 0x5b, 0xde2, 0x80, 0x3ff, 0x0, 0x1, 0x1000, 0xc, 0xe3, 0x84, 0x1, 0x81], 0x4}}, @common=@inet=@ipcomp={{0x2c}, {[0x4d3, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x1, {0x2}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24}}, {{@ipv6={@mcast1, @private0, [0xff, 0xff, 0xffffffff, 0xffffffff], [0x100fffffe, 0xff, 0xffffff, 0xffff00], 'ip6_vti0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x6, 0xf5350167a9ffbcc2, 0x56}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@hl={{0x24}, {0x3, 0x79}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x25, "0c60337aa376c01a1f338d9d3a270f2a16ea33644261e7e127e53c74bdce"}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x44c) 3.856291522s ago: executing program 1 (id=260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xe7) 3.364039235s ago: executing program 1 (id=262): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x8027b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x80000, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x330, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x8000, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.311557387s ago: executing program 3 (id=263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffffffffffffffffffffffff86dd690000000028110000000000000000000000ffffe0000001ff020000000000000000000000000001"], 0x62) 3.17001789s ago: executing program 2 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000000c0)={0xffffffffffffffdb, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x40000000002, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x80000001, 0x8, 0x8, 0xb, 0x10000, 0x45], 0x26000, 0x3c0251}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.029322214s ago: executing program 1 (id=265): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) write(r0, &(0x7f0000000080)='4', 0x1) 3.028405103s ago: executing program 3 (id=266): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x58, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.849804848s ago: executing program 0 (id=267): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)={0xabd3, 0x2, [{0x2, 0x1}, {0xe, 0x1}]}) 2.693849042s ago: executing program 1 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory0/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)="0454226d69fc84", 0x7) 2.612060924s ago: executing program 0 (id=269): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000200)={'pcmda12\x00', [0x5, 0xe00, 0xffff, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x2, 0x1, 0x0, 0x2, 0x36683148, 0x3800000, 0x5, 0x100, 0x100, 0x401, 0x8, 0x1, 0x1, 0x6, 0xc, 0x9, 0xfffffffa, 0x7, 0x6, 0xa4, 0x7, 0x8, 0xbc]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0) unshare(0x26020480) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2.450105548s ago: executing program 1 (id=270): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000880)=""/94, &(0x7f0000000780)=""/102, 0x200000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x25000, 0x24, &(0x7f0000000000)=""/36}, {0x4, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x3}) 2.403608599s ago: executing program 0 (id=271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) finit_module(r1, 0x0, 0x3) 2.335324191s ago: executing program 2 (id=272): socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 2.187762645s ago: executing program 0 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x100, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000003, 0x5, 0x6, 0x5d05}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) 1.764964595s ago: executing program 1 (id=274): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x5}, {0x0, 0x4000000000004, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0xffffffff, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) 1.210902789s ago: executing program 2 (id=275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000010ffffffffffffffffffffffff86dd690000000028110000000000000000000000ffffe0000001ff020000000000000000000000000001"], 0x62) 1.16440653s ago: executing program 0 (id=276): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8804) 952.574536ms ago: executing program 3 (id=277): mmap(&(0x7f0000488000/0x3000)=nil, 0x3000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x0, 0x0, 0x1000, &(0x7f0000ff3000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 952.245886ms ago: executing program 2 (id=278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)="55ee47dd4f070400000000008257931df1", 0x11}], 0x1}, 0x8810) 603.955045ms ago: executing program 3 (id=279): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000200)={'pcmda12\x00', [0x5, 0xe00, 0xffff, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x2, 0x1, 0x0, 0x2, 0x36683148, 0x3800000, 0x5, 0x100, 0x100, 0x401, 0x8, 0x1, 0x1, 0x6, 0xc, 0x9, 0xfffffffa, 0x7, 0x6, 0xa4, 0x7, 0x8, 0xbc]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0) unshare(0x26020480) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 542.776737ms ago: executing program 2 (id=280): fsmount(0xffffffffffffffff, 0x1, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 307.256012ms ago: executing program 3 (id=281): socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) 96.103227ms ago: executing program 0 (id=282): pipe(0x0) close(0x3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffe3e) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200005d00000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 0s ago: executing program 2 (id=283): socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 90.520349][ T5764] cgroup: Unknown subsys name 'net' [ 90.665489][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.367593][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.292682][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.303175][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.317392][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.325574][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.333769][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.342356][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.351078][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.359680][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.367308][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.376280][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.384483][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.392439][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.400737][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.410883][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.418959][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.427322][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.435433][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.446607][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.455268][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.462926][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.495458][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.522945][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.530308][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.538296][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.011866][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 95.054766][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 95.280163][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 95.294409][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.302314][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.309971][ T5783] bridge_slave_0: entered allmulticast mode [ 95.317404][ T5783] bridge_slave_0: entered promiscuous mode [ 95.327508][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.334698][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.342058][ T5783] bridge_slave_1: entered allmulticast mode [ 95.349459][ T5783] bridge_slave_1: entered promiscuous mode [ 95.357676][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.364872][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.372271][ T5784] bridge_slave_0: entered allmulticast mode [ 95.379590][ T5784] bridge_slave_0: entered promiscuous mode [ 95.387885][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 95.427293][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.434557][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.441957][ T5784] bridge_slave_1: entered allmulticast mode [ 95.449120][ T5784] bridge_slave_1: entered promiscuous mode [ 95.525040][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.544644][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.573105][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.588768][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.679277][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.686681][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.694255][ T5780] bridge_slave_0: entered allmulticast mode [ 95.701994][ T5780] bridge_slave_0: entered promiscuous mode [ 95.721056][ T5783] team0: Port device team_slave_0 added [ 95.730300][ T5783] team0: Port device team_slave_1 added [ 95.739220][ T5784] team0: Port device team_slave_0 added [ 95.749488][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.756807][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.764217][ T5780] bridge_slave_1: entered allmulticast mode [ 95.772251][ T5780] bridge_slave_1: entered promiscuous mode [ 95.803335][ T5784] team0: Port device team_slave_1 added [ 95.866901][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.874188][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.882206][ T5786] bridge_slave_0: entered allmulticast mode [ 95.889964][ T5786] bridge_slave_0: entered promiscuous mode [ 95.912197][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.919658][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.946552][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.969547][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.982525][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.993158][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.001038][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.008887][ T5786] bridge_slave_1: entered allmulticast mode [ 96.017426][ T5786] bridge_slave_1: entered promiscuous mode [ 96.024936][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.033899][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.060213][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.072913][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.081902][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.108893][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.153163][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.160770][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.188357][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.237905][ T5780] team0: Port device team_slave_0 added [ 96.260609][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.276452][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.288699][ T5780] team0: Port device team_slave_1 added [ 96.315435][ T5784] hsr_slave_0: entered promiscuous mode [ 96.322099][ T5784] hsr_slave_1: entered promiscuous mode [ 96.377880][ T5786] team0: Port device team_slave_0 added [ 96.423998][ T5786] team0: Port device team_slave_1 added [ 96.438083][ T5783] hsr_slave_0: entered promiscuous mode [ 96.445458][ T5783] hsr_slave_1: entered promiscuous mode [ 96.453799][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.462381][ T5783] Cannot create hsr debugfs directory [ 96.470366][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.477699][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.503745][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.514877][ T5789] Bluetooth: hci3: command tx timeout [ 96.552193][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.560918][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.586948][ T5789] Bluetooth: hci0: command tx timeout [ 96.587104][ T5789] Bluetooth: hci2: command tx timeout [ 96.587453][ T5789] Bluetooth: hci1: command tx timeout [ 96.592917][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.671984][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.679223][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.708253][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.732385][ T5780] hsr_slave_0: entered promiscuous mode [ 96.740053][ T5780] hsr_slave_1: entered promiscuous mode [ 96.747023][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.754725][ T5780] Cannot create hsr debugfs directory [ 96.769256][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.776495][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.802874][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.967283][ T5786] hsr_slave_0: entered promiscuous mode [ 96.973984][ T5786] hsr_slave_1: entered promiscuous mode [ 96.980994][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.990165][ T5786] Cannot create hsr debugfs directory [ 97.329491][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.350710][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.362996][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.394943][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.448994][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.470833][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.481865][ T27] cfg80211: failed to load regulatory.db [ 97.504380][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.516139][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.619699][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.644549][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.661150][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.678892][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.809770][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.820497][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.833671][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.844630][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.903131][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.973606][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.986955][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.013374][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.020955][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.054964][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.062320][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.091382][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.117377][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.173992][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.189497][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.197212][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.219770][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.227011][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.260887][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.268125][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.280642][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.287947][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.443894][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.548106][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.603945][ T5789] Bluetooth: hci3: command tx timeout [ 98.611223][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.618601][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.628819][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.636309][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.665424][ T5789] Bluetooth: hci2: command tx timeout [ 98.671102][ T5789] Bluetooth: hci1: command tx timeout [ 98.677223][ T5796] Bluetooth: hci0: command tx timeout [ 98.823121][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.999840][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.023950][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.051210][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.183784][ T5780] veth0_vlan: entered promiscuous mode [ 99.218162][ T5783] veth0_vlan: entered promiscuous mode [ 99.238571][ T5784] veth0_vlan: entered promiscuous mode [ 99.249040][ T5780] veth1_vlan: entered promiscuous mode [ 99.268193][ T5784] veth1_vlan: entered promiscuous mode [ 99.283964][ T5783] veth1_vlan: entered promiscuous mode [ 99.361952][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.397256][ T5783] veth0_macvtap: entered promiscuous mode [ 99.409418][ T5780] veth0_macvtap: entered promiscuous mode [ 99.423368][ T5780] veth1_macvtap: entered promiscuous mode [ 99.447346][ T5783] veth1_macvtap: entered promiscuous mode [ 99.463951][ T5784] veth0_macvtap: entered promiscuous mode [ 99.488305][ T5784] veth1_macvtap: entered promiscuous mode [ 99.508747][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.538529][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.552949][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.567581][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.577538][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.586719][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.609153][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.621419][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.633665][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.685673][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.700859][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.712967][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.730226][ T5786] veth0_vlan: entered promiscuous mode [ 99.741326][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.750880][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.760226][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.769618][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.786782][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.798438][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.809143][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.821405][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.833980][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.852740][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.863689][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.874628][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.885601][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.897874][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.911837][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.920923][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.930837][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.940856][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.962011][ T5786] veth1_vlan: entered promiscuous mode [ 100.049499][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.070054][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.145703][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.153613][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.233992][ T5786] veth0_macvtap: entered promiscuous mode [ 100.296461][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.307983][ T5786] veth1_macvtap: entered promiscuous mode [ 100.314262][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.387858][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.417099][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.439763][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.460007][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.470538][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.481427][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.494428][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.538657][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.539647][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.557146][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.572014][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.582167][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.594081][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.604561][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.615726][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.629008][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.656447][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.667437][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.668486][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.685799][ T5084] Bluetooth: hci3: command tx timeout [ 100.691511][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.701831][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.711377][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.753089][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.758243][ T5084] Bluetooth: hci1: command tx timeout [ 100.766648][ T5084] Bluetooth: hci0: command tx timeout [ 100.767017][ T5789] Bluetooth: hci2: command tx timeout [ 100.794802][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.805526][ T5760] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.005447][ T5760] usb 2-1: Using ep0 maxpacket: 8 [ 101.007480][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.029763][ T5760] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 101.036967][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.068983][ T5760] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 101.082382][ T5850] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.104163][ T5760] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.136729][ T5760] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 101.156179][ T5760] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 101.173370][ T5760] usb 2-1: config 168 interface 0 has no altsetting 0 [ 101.183926][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.198583][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.205488][ T5760] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 101.213577][ T5760] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 101.273504][ T5760] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.309886][ T5760] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 101.349620][ T5760] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 101.413600][ T5760] usb 2-1: config 168 interface 0 has no altsetting 0 [ 101.428559][ T5760] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 101.452940][ T5760] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 101.481418][ T5760] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.515896][ T5760] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 101.545659][ T5760] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 101.589366][ T5854] Zero length message leads to an empty skb [ 101.607676][ T5760] usb 2-1: config 168 interface 0 has no altsetting 0 [ 101.632331][ T5760] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.648573][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.658164][ T5760] usb 2-1: Product: syz [ 101.662411][ T5760] usb 2-1: Manufacturer: syz [ 101.667250][ T5760] usb 2-1: SerialNumber: syz [ 101.671880][ T5856] syzkaller0: entered promiscuous mode [ 101.686228][ T5856] syzkaller0: entered allmulticast mode [ 102.083192][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bbcc400: rx timeout, send abort [ 102.337649][ T5760] adutux 2-1:168.0: interrupt endpoints not found [ 102.584076][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bbcc800: rx timeout, send abort [ 102.593049][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bbcc400: abort rx timeout. Force session deactivation [ 102.755199][ T5789] Bluetooth: hci3: command tx timeout [ 102.825476][ T5789] Bluetooth: hci2: command tx timeout [ 102.831072][ T5789] Bluetooth: hci0: command tx timeout [ 102.836661][ T5789] Bluetooth: hci1: command tx timeout [ 102.864981][ T5760] usb 2-1: USB disconnect, device number 2 [ 103.092443][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bbcc800: abort rx timeout. Force session deactivation [ 103.549310][ T5876] syzkaller0: entered promiscuous mode [ 103.554876][ T5876] syzkaller0: entered allmulticast mode [ 103.747879][ T5880] syzkaller0: entered promiscuous mode [ 103.795312][ T5880] syzkaller0: entered allmulticast mode [ 104.448757][ T5842] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.495877][ T5890] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 104.505415][ T5890] CPU: 0 PID: 5890 Comm: syz.2.15 Not tainted syzkaller #0 [ 104.512779][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.522916][ T5890] Call Trace: [ 104.526265][ T5890] [ 104.529230][ T5890] dump_stack_lvl+0x18c/0x250 [ 104.533976][ T5890] ? show_regs_print_info+0x20/0x20 [ 104.539223][ T5890] ? load_image+0x420/0x420 [ 104.543766][ T5890] sysfs_create_dir_ns+0x26e/0x2a0 [ 104.548934][ T5890] ? __lock_acquire+0x7d80/0x7d80 [ 104.554084][ T5890] ? sysfs_warn_dup+0xa0/0xa0 [ 104.558795][ T5890] ? rcu_is_watching+0x15/0xb0 [ 104.563607][ T5890] ? do_raw_spin_unlock+0x121/0x230 [ 104.568870][ T5890] kobject_add_internal+0x617/0xc90 [ 104.574130][ T5890] kobject_add+0x164/0x240 [ 104.578626][ T5890] ? kobject_init+0x1d0/0x1d0 [ 104.583352][ T5890] ? get_device_parent+0x366/0x390 [ 104.588507][ T5890] device_add+0x3fa/0xc40 [ 104.592875][ T5890] tty_register_device_attr+0x425/0x950 [ 104.598467][ T5890] ? tty_register_device+0x30/0x30 [ 104.603617][ T5890] ? tty_port_init+0x132/0x1a0 [ 104.608412][ T5890] ? gsm_dlci_alloc+0x32a/0x630 [ 104.613302][ T5890] ? __might_fault+0xaa/0x120 [ 104.618021][ T5890] gsm_activate_mux+0x110/0x2a0 [ 104.622923][ T5890] gsmld_ioctl+0x12ca/0x1900 [ 104.627562][ T5890] ? gsmld_write+0x120/0x120 [ 104.632249][ T5890] ? __init_ldsem+0x150/0x150 [ 104.636978][ T5890] ? __fget_files+0x28/0x460 [ 104.641627][ T5890] ? gsmld_write+0x120/0x120 [ 104.646249][ T5890] tty_ioctl+0x9b5/0xdc0 [ 104.650534][ T5890] ? tty_get_icount+0xb0/0xb0 [ 104.655264][ T5890] __se_sys_ioctl+0xfd/0x170 [ 104.659926][ T5890] do_syscall_64+0x55/0xb0 [ 104.664374][ T5890] ? clear_bhb_loop+0x40/0x90 [ 104.669134][ T5890] ? clear_bhb_loop+0x40/0x90 [ 104.673860][ T5890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.679798][ T5890] RIP: 0033:0x7f1e4d19e0d9 [ 104.684268][ T5890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.703942][ T5890] RSP: 002b:00007f1e4b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.712480][ T5890] RAX: ffffffffffffffda RBX: 00007f1e4d426090 RCX: 00007f1e4d19e0d9 [ 104.720622][ T5890] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 104.728629][ T5890] RBP: 00007f1e4d235024 R08: 0000000000000000 R09: 0000000000000000 [ 104.736636][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.744633][ T5890] R13: 00007f1e4d426128 R14: 00007f1e4d426090 R15: 00007ffda5dcfb18 [ 104.752674][ T5890] [ 104.757629][ T5890] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 104.995795][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 106.057099][ T5842] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 106.065400][ T5842] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.077428][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.090727][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.104370][ T5842] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.117490][ T5842] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.126734][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.362634][ T5842] usb 4-1: GET_CAPABILITIES returned 0 [ 106.399700][ T5842] usbtmc 4-1:16.0: can't read capabilities [ 106.575731][ T5843] usb 4-1: USB disconnect, device number 2 [ 107.714224][ T5926] Bluetooth: MGMT ver 1.22 [ 107.725358][ T5926] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 108.086624][ T5934] warning: `syz.1.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.179893][ T5934] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 108.256252][ T5934] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.267815][ T5939] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 108.294810][ T5939] CPU: 0 PID: 5939 Comm: syz.0.29 Not tainted syzkaller #0 [ 108.302114][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.312589][ T5939] Call Trace: [ 108.315927][ T5939] [ 108.318905][ T5939] dump_stack_lvl+0x18c/0x250 [ 108.323676][ T5939] ? show_regs_print_info+0x20/0x20 [ 108.328935][ T5939] ? load_image+0x420/0x420 [ 108.333532][ T5939] sysfs_create_dir_ns+0x26e/0x2a0 [ 108.338715][ T5939] ? __lock_acquire+0x7d80/0x7d80 [ 108.343823][ T5939] ? sysfs_warn_dup+0xa0/0xa0 [ 108.348612][ T5939] ? rcu_is_watching+0x15/0xb0 [ 108.353465][ T5939] ? do_raw_spin_unlock+0x121/0x230 [ 108.358746][ T5939] kobject_add_internal+0x617/0xc90 [ 108.364030][ T5939] kobject_add+0x164/0x240 [ 108.368647][ T5939] ? kobject_init+0x1d0/0x1d0 [ 108.373412][ T5939] ? get_device_parent+0x366/0x390 [ 108.374258][ T5912] null_blk: disk nullb1 created [ 108.378601][ T5939] device_add+0x3fa/0xc40 [ 108.378656][ T5939] tty_register_device_attr+0x425/0x950 [ 108.378695][ T5939] ? tty_register_device+0x30/0x30 [ 108.378732][ T5939] ? tty_port_init+0x132/0x1a0 [ 108.378757][ T5939] ? gsm_dlci_alloc+0x32a/0x630 [ 108.408635][ T5939] ? __might_fault+0xaa/0x120 [ 108.413466][ T5939] gsm_activate_mux+0x110/0x2a0 [ 108.418393][ T5939] gsmld_ioctl+0x12ca/0x1900 [ 108.423150][ T5939] ? gsmld_write+0x120/0x120 [ 108.427914][ T5939] ? __init_ldsem+0x150/0x150 [ 108.432668][ T5939] ? __fget_files+0x28/0x460 [ 108.437365][ T5939] ? gsmld_write+0x120/0x120 [ 108.442024][ T5939] tty_ioctl+0x9b5/0xdc0 [ 108.446388][ T5939] ? tty_get_icount+0xb0/0xb0 [ 108.451162][ T5939] __se_sys_ioctl+0xfd/0x170 [ 108.455855][ T5939] do_syscall_64+0x55/0xb0 [ 108.460336][ T5939] ? clear_bhb_loop+0x40/0x90 [ 108.465044][ T5939] ? clear_bhb_loop+0x40/0x90 [ 108.469870][ T5939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.475848][ T5939] RIP: 0033:0x7f197bd9e0d9 [ 108.480324][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.499998][ T5939] RSP: 002b:00007f1979fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.508482][ T5939] RAX: ffffffffffffffda RBX: 00007f197c026090 RCX: 00007f197bd9e0d9 [ 108.516598][ T5939] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 108.524625][ T5939] RBP: 00007f197be35024 R08: 0000000000000000 R09: 0000000000000000 [ 108.532653][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.540687][ T5939] R13: 00007f197c026128 R14: 00007f197c026090 R15: 00007ffd02468338 [ 108.548754][ T5939] [ 108.551889][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.575414][ T5939] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 108.684809][ T5942] ======================================================= [ 108.684809][ T5942] WARNING: The mand mount option has been deprecated and [ 108.684809][ T5942] and is ignored by this kernel. Remove the mand [ 108.684809][ T5942] option from the mount to silence this warning. [ 108.684809][ T5942] ======================================================= [ 109.309411][ T5952] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 109.320136][ T5952] overlayfs: missing 'lowerdir' [ 109.610116][ T5959] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 109.873691][ T5966] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.943152][ T28] audit: type=1800 audit(1787767258.258:2): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.38" name="attr_allow_any_host" dev="configfs" ino=8420 res=0 errno=0 [ 109.970759][ T5966] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.992841][ T5969] nvmet: adding nsid 1 to subsystem testnqn [ 110.140934][ T5973] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 110.279634][ T28] audit: type=1800 audit(1787767258.598:3): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.38" name="addr_trtype" dev="configfs" ino=7772 res=0 errno=0 [ 110.339354][ T5969] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 110.455181][ T28] audit: type=1800 audit(1787767258.638:4): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.38" name="addr_adrfam" dev="configfs" ino=7773 res=0 errno=0 [ 110.605803][ T28] audit: type=1800 audit(1787767258.638:5): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.38" name="addr_traddr" dev="configfs" ino=7774 res=0 errno=0 [ 110.626020][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.652100][ T5983] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 110.691454][ T28] audit: type=1800 audit(1787767258.658:6): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.38" name="addr_trsvcid" dev="configfs" ino=7775 res=0 errno=0 [ 110.770665][ T5969] nvme nvme0: rdma connection establishment failed (-512) [ 110.834722][ T2921] Bluetooth: hci4: Frame reassembly failed (-84) [ 110.883563][ T2921] Bluetooth: hci4: Frame reassembly failed (-84) [ 111.038552][ T5989] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 111.678321][ T6002] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty65' [ 111.688885][ T6002] CPU: 0 PID: 6002 Comm: syz.3.49 Not tainted syzkaller #0 [ 111.696172][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.706715][ T6002] Call Trace: [ 111.710033][ T6002] [ 111.712981][ T6002] dump_stack_lvl+0x18c/0x250 [ 111.717686][ T6002] ? show_regs_print_info+0x20/0x20 [ 111.722908][ T6002] ? load_image+0x420/0x420 [ 111.727441][ T6002] sysfs_create_dir_ns+0x26e/0x2a0 [ 111.732593][ T6002] ? __lock_acquire+0x7d80/0x7d80 [ 111.737668][ T6002] ? sysfs_warn_dup+0xa0/0xa0 [ 111.742369][ T6002] ? rcu_is_watching+0x15/0xb0 [ 111.747181][ T6002] ? do_raw_spin_unlock+0x121/0x230 [ 111.752461][ T6002] kobject_add_internal+0x617/0xc90 [ 111.757752][ T6002] kobject_add+0x164/0x240 [ 111.762253][ T6002] ? kobject_init+0x1d0/0x1d0 [ 111.767015][ T6002] ? get_device_parent+0x366/0x390 [ 111.772180][ T6002] device_add+0x3fa/0xc40 [ 111.776533][ T6002] tty_register_device_attr+0x425/0x950 [ 111.782112][ T6002] ? tty_register_device+0x30/0x30 [ 111.787247][ T6002] ? tty_port_init+0x132/0x1a0 [ 111.792044][ T6002] ? gsm_dlci_alloc+0x32a/0x630 [ 111.796915][ T6002] ? __might_fault+0xaa/0x120 [ 111.801608][ T6002] gsm_activate_mux+0x110/0x2a0 [ 111.806502][ T6002] gsmld_ioctl+0x12ca/0x1900 [ 111.811139][ T6002] ? gsmld_write+0x120/0x120 [ 111.815756][ T6002] ? __init_ldsem+0x150/0x150 [ 111.820451][ T6002] ? __fget_files+0x28/0x460 [ 111.825086][ T6002] ? gsmld_write+0x120/0x120 [ 111.829711][ T6002] tty_ioctl+0x9b5/0xdc0 [ 111.833986][ T6002] ? tty_get_icount+0xb0/0xb0 [ 111.838707][ T6002] __se_sys_ioctl+0xfd/0x170 [ 111.843355][ T6002] do_syscall_64+0x55/0xb0 [ 111.847811][ T6002] ? clear_bhb_loop+0x40/0x90 [ 111.852513][ T6002] ? clear_bhb_loop+0x40/0x90 [ 111.857236][ T6002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.863241][ T6002] RIP: 0033:0x7f6582f9e0d9 [ 111.867671][ T6002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.887309][ T6002] RSP: 002b:00007f6583da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.895810][ T6002] RAX: ffffffffffffffda RBX: 00007f6583226090 RCX: 00007f6582f9e0d9 [ 111.903818][ T6002] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 111.911823][ T6002] RBP: 00007f6583035024 R08: 0000000000000000 R09: 0000000000000000 [ 111.919819][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.927805][ T6002] R13: 00007f6583226128 R14: 00007f6583226090 R15: 00007ffcc3f6ee08 [ 111.935842][ T6002] [ 111.938903][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.955789][ T6002] kobject: kobject_add_internal failed for gsmtty65 with -EEXIST, don't try to register things with the same name in the same directory. [ 112.850312][ T5796] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.915458][ T5084] Bluetooth: hci3: command tx timeout [ 113.111614][ T6010] siw: device registration error -23 [ 113.214935][ T28] audit: type=1800 audit(1787767261.528:7): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.54" name="attr_allow_any_host" dev="configfs" ino=7860 res=0 errno=0 [ 113.244216][ T28] audit: type=1800 audit(1787767261.558:8): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.54" name="addr_trtype" dev="configfs" ino=7861 res=0 errno=0 [ 113.895681][ T6015] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 113.957873][ T28] audit: type=1800 audit(1787767262.238:9): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.54" name="addr_adrfam" dev="configfs" ino=8575 res=0 errno=0 [ 113.987066][ T6010] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 114.027304][ T6014] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 114.082888][ T28] audit: type=1800 audit(1787767262.278:10): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.54" name="addr_traddr" dev="configfs" ino=8578 res=0 errno=0 [ 114.174452][ T28] audit: type=1800 audit(1787767262.298:11): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.54" name="addr_trsvcid" dev="configfs" ino=8579 res=0 errno=0 [ 114.265388][ T6010] nvme nvme0: rdma connection establishment failed (-512) [ 114.496432][ T6031] zonefs (nullb1): Mounting 64000 zones [ 115.489589][ T6038] Bluetooth: ISO socket layer initialized [ 115.580466][ T6043] syz.1.61[6043]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 115.647347][ T6031] zonefs (nullb1): Zone group "seq" has 63999 files [ 115.820791][ T6047] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 115.833037][ T6047] CPU: 0 PID: 6047 Comm: syz.1.62 Not tainted syzkaller #0 [ 115.840419][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.850723][ T6047] Call Trace: [ 115.854166][ T6047] [ 115.857315][ T6047] dump_stack_lvl+0x18c/0x250 [ 115.862299][ T6047] ? show_regs_print_info+0x20/0x20 [ 115.868375][ T6047] ? load_image+0x420/0x420 [ 115.873053][ T6047] sysfs_create_dir_ns+0x26e/0x2a0 [ 115.878225][ T6047] ? __lock_acquire+0x7d80/0x7d80 [ 115.883307][ T6047] ? sysfs_warn_dup+0xa0/0xa0 [ 115.888042][ T6047] ? rcu_is_watching+0x15/0xb0 [ 115.892890][ T6047] ? do_raw_spin_unlock+0x121/0x230 [ 115.898260][ T6047] kobject_add_internal+0x617/0xc90 [ 115.903617][ T6047] kobject_add+0x164/0x240 [ 115.908189][ T6047] ? kobject_init+0x1d0/0x1d0 [ 115.913477][ T6047] ? get_device_parent+0x366/0x390 [ 115.919105][ T6047] device_add+0x3fa/0xc40 [ 115.923569][ T6047] tty_register_device_attr+0x425/0x950 [ 115.929201][ T6047] ? tty_register_device+0x30/0x30 [ 115.934991][ T6047] ? tty_port_init+0x132/0x1a0 [ 115.939906][ T6047] ? gsm_dlci_alloc+0x32a/0x630 [ 115.944846][ T6047] ? __might_fault+0xaa/0x120 [ 115.949772][ T6047] gsm_activate_mux+0x110/0x2a0 [ 115.954824][ T6047] gsmld_ioctl+0x12ca/0x1900 [ 115.960090][ T6047] ? gsmld_write+0x120/0x120 [ 115.964738][ T6047] ? __init_ldsem+0x150/0x150 [ 115.969457][ T6047] ? __fget_files+0x28/0x460 [ 115.974092][ T6047] ? gsmld_write+0x120/0x120 [ 115.978803][ T6047] tty_ioctl+0x9b5/0xdc0 [ 115.983431][ T6047] ? tty_get_icount+0xb0/0xb0 [ 115.988152][ T6047] __se_sys_ioctl+0xfd/0x170 [ 115.992789][ T6047] do_syscall_64+0x55/0xb0 [ 115.997245][ T6047] ? clear_bhb_loop+0x40/0x90 [ 116.002009][ T6047] ? clear_bhb_loop+0x40/0x90 [ 116.006759][ T6047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.012718][ T6047] RIP: 0033:0x7f1be9b9e0d9 [ 116.017181][ T6047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.036883][ T6047] RSP: 002b:00007f1beaaf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.045375][ T6047] RAX: ffffffffffffffda RBX: 00007f1be9e26090 RCX: 00007f1be9b9e0d9 [ 116.053498][ T6047] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 116.061535][ T6047] RBP: 00007f1be9c35024 R08: 0000000000000000 R09: 0000000000000000 [ 116.069597][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.077793][ T6047] R13: 00007f1be9e26128 R14: 00007f1be9e26090 R15: 00007ffd0baeba18 [ 116.085832][ T6047] [ 116.088954][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.235529][ T6047] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 117.397337][ T6037] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.418313][ T6037] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.507661][ T6037] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.546477][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.561605][ T6037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.582605][ T6037] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.593391][ T6037] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.610236][ T6063] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 117.624361][ T6037] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.640399][ T6037] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.669058][ T6037] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.500435][ T6067] raw_sendmsg: syz.1.67 forgot to set AF_INET. Fix it! [ 118.531744][ T27] libceph: connect (1)[c::]:6789 error -101 [ 118.540541][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 118.613462][ T10] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 118.624507][ T10] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 118.642106][ T6087] zonefs (nullb1): Mounting 64000 zones [ 118.676560][ T5842] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.817766][ T27] libceph: connect (1)[c::]:6789 error -101 [ 118.829433][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 118.880719][ T6087] zonefs (nullb1): Zone group "seq" has 63999 files [ 118.959972][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.976392][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.988583][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.004995][ T5842] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.019594][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.055811][ T5842] usb 4-1: config 0 descriptor?? [ 119.242832][ T6067] ceph: No mds server is up or the cluster is laggy [ 119.625614][ T5796] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.631963][ T5796] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.638335][ T5084] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.066421][ T5842] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 120.154392][ T5842] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 120.473815][ T6102] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 120.485514][ T6102] CPU: 0 PID: 6102 Comm: syz.1.75 Not tainted syzkaller #0 [ 120.492824][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.502960][ T6102] Call Trace: [ 120.506505][ T6102] [ 120.509494][ T6102] dump_stack_lvl+0x18c/0x250 [ 120.514262][ T6102] ? show_regs_print_info+0x20/0x20 [ 120.519538][ T6102] ? load_image+0x420/0x420 [ 120.524163][ T6102] sysfs_create_dir_ns+0x26e/0x2a0 [ 120.529427][ T6102] ? __lock_acquire+0x7d80/0x7d80 [ 120.534540][ T6102] ? sysfs_warn_dup+0xa0/0xa0 [ 120.539285][ T6102] ? rcu_is_watching+0x15/0xb0 [ 120.544152][ T6102] ? do_raw_spin_unlock+0x121/0x230 [ 120.549438][ T6102] kobject_add_internal+0x617/0xc90 [ 120.554730][ T6102] kobject_add+0x164/0x240 [ 120.559236][ T6102] ? kobject_init+0x1d0/0x1d0 [ 120.563998][ T6102] ? get_device_parent+0x366/0x390 [ 120.569166][ T6102] device_add+0x3fa/0xc40 [ 120.574258][ T6102] tty_register_device_attr+0x425/0x950 [ 120.579902][ T6102] ? tty_register_device+0x30/0x30 [ 120.585109][ T6102] ? tty_port_init+0x132/0x1a0 [ 120.589934][ T6102] ? gsm_dlci_alloc+0x32a/0x630 [ 120.594848][ T6102] ? __might_fault+0xaa/0x120 [ 120.599594][ T6102] gsm_activate_mux+0x110/0x2a0 [ 120.604524][ T6102] gsmld_ioctl+0x12ca/0x1900 [ 120.609192][ T6102] ? gsmld_write+0x120/0x120 [ 120.613853][ T6102] ? __init_ldsem+0x150/0x150 [ 120.618592][ T6102] ? __fget_files+0x28/0x460 [ 120.623287][ T6102] ? gsmld_write+0x120/0x120 [ 120.627942][ T6102] tty_ioctl+0x9b5/0xdc0 [ 120.632247][ T6102] ? tty_get_icount+0xb0/0xb0 [ 120.636980][ T6102] __se_sys_ioctl+0xfd/0x170 [ 120.641638][ T6102] do_syscall_64+0x55/0xb0 [ 120.646130][ T6102] ? clear_bhb_loop+0x40/0x90 [ 120.650880][ T6102] ? clear_bhb_loop+0x40/0x90 [ 120.655639][ T6102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.661606][ T6102] RIP: 0033:0x7f1be9b9e0d9 [ 120.666120][ T6102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.685879][ T6102] RSP: 002b:00007f1beaaf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.694577][ T6102] RAX: ffffffffffffffda RBX: 00007f1be9e26090 RCX: 00007f1be9b9e0d9 [ 120.702654][ T6102] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 120.711053][ T6102] RBP: 00007f1be9c35024 R08: 0000000000000000 R09: 0000000000000000 [ 120.719098][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.727164][ T6102] R13: 00007f1be9e26128 R14: 00007f1be9e26090 R15: 00007ffd0baeba18 [ 120.735231][ T6102] [ 120.738512][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.935338][ T6102] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 121.017588][ T5867] usb 4-1: USB disconnect, device number 3 [ 121.410796][ T6108] input: syz1 as /devices/virtual/input/input5 [ 121.720188][ T5796] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.727177][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.733261][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.386868][ T6116] siw: device registration error -23 [ 122.635903][ T28] audit: type=1800 audit(1787767270.928:12): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="attr_allow_any_host" dev="configfs" ino=7989 res=0 errno=0 [ 122.656906][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.664516][ T28] audit: type=1800 audit(1787767270.978:13): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="addr_trtype" dev="configfs" ino=7995 res=0 errno=0 [ 122.750890][ T28] audit: type=1800 audit(1787767271.068:14): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="addr_adrfam" dev="configfs" ino=7996 res=0 errno=0 [ 122.758614][ T6116] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 122.772353][ T28] audit: type=1800 audit(1787767271.068:15): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="addr_traddr" dev="configfs" ino=7997 res=0 errno=0 [ 122.772407][ T28] audit: type=1800 audit(1787767271.068:16): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="addr_trsvcid" dev="configfs" ino=7998 res=0 errno=0 [ 122.933573][ T6124] Bluetooth: hci0: unsupported parameter 255 [ 122.972079][ T6124] Bluetooth: hci0: unsupported parameter 255 [ 123.714562][ T6116] nvme nvme0: rdma connection establishment failed (-512) [ 123.785501][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.794033][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.300522][ T6150] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 125.322631][ T6150] CPU: 0 PID: 6150 Comm: syz.1.88 Not tainted syzkaller #0 [ 125.329959][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.340079][ T6150] Call Trace: [ 125.343413][ T6150] [ 125.346393][ T6150] dump_stack_lvl+0x18c/0x250 [ 125.351142][ T6150] ? show_regs_print_info+0x20/0x20 [ 125.356407][ T6150] ? load_image+0x420/0x420 [ 125.360993][ T6150] sysfs_create_dir_ns+0x26e/0x2a0 [ 125.366178][ T6150] ? __lock_acquire+0x7d80/0x7d80 [ 125.371272][ T6150] ? sysfs_warn_dup+0xa0/0xa0 [ 125.376012][ T6150] ? rcu_is_watching+0x15/0xb0 [ 125.380846][ T6150] ? do_raw_spin_unlock+0x121/0x230 [ 125.386127][ T6150] kobject_add_internal+0x617/0xc90 [ 125.391402][ T6150] kobject_add+0x164/0x240 [ 125.395874][ T6150] ? kobject_init+0x1d0/0x1d0 [ 125.400654][ T6150] ? get_device_parent+0x366/0x390 [ 125.405811][ T6150] device_add+0x3fa/0xc40 [ 125.410184][ T6150] tty_register_device_attr+0x425/0x950 [ 125.415864][ T6150] ? tty_register_device+0x30/0x30 [ 125.421052][ T6150] ? tty_port_init+0x132/0x1a0 [ 125.425858][ T6150] ? gsm_dlci_alloc+0x32a/0x630 [ 125.430756][ T6150] ? __might_fault+0xaa/0x120 [ 125.435476][ T6150] gsm_activate_mux+0x110/0x2a0 [ 125.440370][ T6150] gsmld_ioctl+0x12ca/0x1900 [ 125.445011][ T6150] ? gsmld_write+0x120/0x120 [ 125.449653][ T6150] ? __init_ldsem+0x150/0x150 [ 125.454396][ T6150] ? __fget_files+0x28/0x460 [ 125.459042][ T6150] ? gsmld_write+0x120/0x120 [ 125.463673][ T6150] tty_ioctl+0x9b5/0xdc0 [ 125.467963][ T6150] ? tty_get_icount+0xb0/0xb0 [ 125.472686][ T6150] __se_sys_ioctl+0xfd/0x170 [ 125.477330][ T6150] do_syscall_64+0x55/0xb0 [ 125.481789][ T6150] ? clear_bhb_loop+0x40/0x90 [ 125.486507][ T6150] ? clear_bhb_loop+0x40/0x90 [ 125.491360][ T6150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.497293][ T6150] RIP: 0033:0x7f1be9b9e0d9 [ 125.501744][ T6150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.521455][ T6150] RSP: 002b:00007f1beaaf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.530002][ T6150] RAX: ffffffffffffffda RBX: 00007f1be9e26090 RCX: 00007f1be9b9e0d9 [ 125.538018][ T6150] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 125.546123][ T6150] RBP: 00007f1be9c35024 R08: 0000000000000000 R09: 0000000000000000 [ 125.554138][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.562155][ T6150] R13: 00007f1be9e26128 R14: 00007f1be9e26090 R15: 00007ffd0baeba18 [ 125.570177][ T6150] [ 125.573247][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.606833][ T6152] input: syz1 as /devices/virtual/input/input6 [ 125.661589][ T6150] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 125.909097][ T6158] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 126.979939][ T6167] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty65' [ 126.995752][ T6167] CPU: 0 PID: 6167 Comm: syz.0.93 Not tainted syzkaller #0 [ 127.003049][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.013162][ T6167] Call Trace: [ 127.016489][ T6167] [ 127.019562][ T6167] dump_stack_lvl+0x18c/0x250 [ 127.024317][ T6167] ? show_regs_print_info+0x20/0x20 [ 127.029577][ T6167] ? load_image+0x420/0x420 [ 127.034134][ T6167] sysfs_create_dir_ns+0x26e/0x2a0 [ 127.039284][ T6167] ? __lock_acquire+0x7d80/0x7d80 [ 127.044347][ T6167] ? sysfs_warn_dup+0xa0/0xa0 [ 127.049064][ T6167] ? rcu_is_watching+0x15/0xb0 [ 127.053881][ T6167] ? do_raw_spin_unlock+0x121/0x230 [ 127.059140][ T6167] kobject_add_internal+0x617/0xc90 [ 127.064390][ T6167] kobject_add+0x164/0x240 [ 127.068874][ T6167] ? kobject_init+0x1d0/0x1d0 [ 127.073668][ T6167] ? get_device_parent+0x366/0x390 [ 127.078856][ T6167] device_add+0x3fa/0xc40 [ 127.083235][ T6167] tty_register_device_attr+0x425/0x950 [ 127.088871][ T6167] ? tty_register_device+0x30/0x30 [ 127.094039][ T6167] ? tty_port_init+0x132/0x1a0 [ 127.098946][ T6167] ? gsm_dlci_alloc+0x32a/0x630 [ 127.103860][ T6167] ? __might_fault+0xaa/0x120 [ 127.108746][ T6167] gsm_activate_mux+0x110/0x2a0 [ 127.113700][ T6167] gsmld_ioctl+0x12ca/0x1900 [ 127.118352][ T6167] ? gsmld_write+0x120/0x120 [ 127.122992][ T6167] ? __init_ldsem+0x150/0x150 [ 127.127716][ T6167] ? __fget_files+0x28/0x460 [ 127.132366][ T6167] ? gsmld_write+0x120/0x120 [ 127.137086][ T6167] tty_ioctl+0x9b5/0xdc0 [ 127.141381][ T6167] ? tty_get_icount+0xb0/0xb0 [ 127.146752][ T6167] __se_sys_ioctl+0xfd/0x170 [ 127.151951][ T6167] do_syscall_64+0x55/0xb0 [ 127.156434][ T6167] ? clear_bhb_loop+0x40/0x90 [ 127.161269][ T6167] ? clear_bhb_loop+0x40/0x90 [ 127.166525][ T6167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.172462][ T6167] RIP: 0033:0x7f197bd9e0d9 [ 127.176907][ T6167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.196655][ T6167] RSP: 002b:00007f1979fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.205257][ T6167] RAX: ffffffffffffffda RBX: 00007f197c026090 RCX: 00007f197bd9e0d9 [ 127.213735][ T6167] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 127.221922][ T6167] RBP: 00007f197be35024 R08: 0000000000000000 R09: 0000000000000000 [ 127.229941][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.238049][ T6167] R13: 00007f197c026128 R14: 00007f197c026090 R15: 00007ffd02468338 [ 127.246088][ T6167] [ 127.249274][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.265490][ T6167] kobject: kobject_add_internal failed for gsmtty65 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.437032][ T6175] siw: device registration error -23 [ 128.449589][ T28] audit: type=1800 audit(1787767276.768:17): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.95" name="attr_allow_any_host" dev="configfs" ino=8829 res=0 errno=0 [ 128.461973][ T28] audit: type=1800 audit(1787767276.778:18): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.95" name="addr_trtype" dev="configfs" ino=8830 res=0 errno=0 [ 128.470244][ T28] audit: type=1800 audit(1787767276.778:19): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.95" name="addr_adrfam" dev="configfs" ino=8831 res=0 errno=0 [ 128.470967][ T28] audit: type=1800 audit(1787767276.788:20): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.95" name="addr_traddr" dev="configfs" ino=8832 res=0 errno=0 [ 128.487724][ T28] audit: type=1800 audit(1787767276.808:21): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.95" name="addr_trsvcid" dev="configfs" ino=8833 res=0 errno=0 [ 128.488290][ T6175] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 128.681963][ T6181] syzkaller0: entered promiscuous mode [ 128.681990][ T6181] syzkaller0: entered allmulticast mode [ 128.791995][ T6175] nvme nvme0: rdma connection establishment failed (-104) [ 129.262227][ T6190] input: syz1 as /devices/virtual/input/input7 [ 130.692820][ T6187] sched: RT throttling activated [ 130.843411][ T6195] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 131.780053][ T6176] tty tty24: ldisc open failed (-12), clearing slot 23 [ 132.009827][ T6212] siw: device registration error -23 [ 132.023708][ T28] audit: type=1800 audit(1787767280.338:22): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.108" name="attr_allow_any_host" dev="configfs" ino=8980 res=0 errno=0 [ 132.097365][ T6212] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 132.121776][ T28] audit: type=1800 audit(1787767280.368:23): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.108" name="addr_trtype" dev="configfs" ino=8981 res=0 errno=0 [ 132.142174][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.161991][ T28] audit: type=1800 audit(1787767280.388:24): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.108" name="addr_adrfam" dev="configfs" ino=8982 res=0 errno=0 [ 132.194921][ T28] audit: type=1800 audit(1787767280.408:25): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.108" name="addr_traddr" dev="configfs" ino=8983 res=0 errno=0 [ 132.222729][ T28] audit: type=1800 audit(1787767280.418:26): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.108" name="addr_trsvcid" dev="configfs" ino=8984 res=0 errno=0 [ 134.669369][ T6209] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 134.697909][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.704836][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.714737][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.735604][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.751279][ T6209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.763695][ T6209] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.782667][ T6220] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 134.902881][ T6225] input: syz1 as /devices/virtual/input/input8 [ 135.988906][ T6238] loop7: detected capacity change from 0 to 7 [ 136.035356][ T6238] Dev loop7: unable to read RDB block 7 [ 136.044069][ T6238] loop7: unable to read partition table [ 136.056501][ T6238] loop7: partition table beyond EOD, truncated [ 136.073995][ T6238] loop_reread_partitions: partition scan of loop7 (ъщ) failed (rc=-5) [ 136.230981][ T6238] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.367783][ T6249] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 136.386341][ T3389] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.471697][ T5139] Dev loop7: unable to read RDB block 7 [ 136.536499][ T5139] loop7: unable to read partition table [ 136.588890][ T5139] loop7: partition table beyond EOD, truncated [ 136.675343][ T3389] usb 3-1: Using ep0 maxpacket: 16 [ 136.836072][ T5796] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.842634][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.879459][ T3389] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 137.020648][ T3389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.141352][ T3389] usb 3-1: Product: syz [ 137.196645][ T3389] usb 3-1: Manufacturer: syz [ 137.201348][ T3389] usb 3-1: SerialNumber: syz [ 137.504193][ T6259] input: syz1 as /devices/virtual/input/input9 [ 138.599811][ T3389] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 138.675900][ T3389] usb 3-1: USB disconnect, device number 2 [ 139.028570][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030b4f800: rx timeout, send abort [ 139.528766][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030b4f400: rx timeout, send abort [ 139.537489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.545852][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030b4f800: abort rx timeout. Force session deactivation [ 140.037494][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030b4f400: abort rx timeout. Force session deactivation [ 142.049385][ T6298] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 142.058329][ T6298] CPU: 0 PID: 6298 Comm: syz.0.137 Not tainted syzkaller #0 [ 142.065962][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.076082][ T6298] Call Trace: [ 142.079485][ T6298] [ 142.082514][ T6298] dump_stack_lvl+0x18c/0x250 [ 142.087309][ T6298] ? show_regs_print_info+0x20/0x20 [ 142.092595][ T6298] ? load_image+0x420/0x420 [ 142.097192][ T6298] sysfs_create_dir_ns+0x26e/0x2a0 [ 142.102405][ T6298] ? __lock_acquire+0x7d80/0x7d80 [ 142.107528][ T6298] ? sysfs_warn_dup+0xa0/0xa0 [ 142.112282][ T6298] ? rcu_is_watching+0x15/0xb0 [ 142.117200][ T6298] ? do_raw_spin_unlock+0x121/0x230 [ 142.122502][ T6298] kobject_add_internal+0x617/0xc90 [ 142.127901][ T6298] kobject_add+0x164/0x240 [ 142.132414][ T6298] ? kobject_init+0x1d0/0x1d0 [ 142.137190][ T6298] ? get_device_parent+0x366/0x390 [ 142.142384][ T6298] device_add+0x3fa/0xc40 [ 142.146793][ T6298] tty_register_device_attr+0x425/0x950 [ 142.152711][ T6298] ? tty_register_device+0x30/0x30 [ 142.157995][ T6298] ? tty_port_init+0x132/0x1a0 [ 142.162836][ T6298] ? gsm_dlci_alloc+0x32a/0x630 [ 142.167774][ T6298] ? __might_fault+0xaa/0x120 [ 142.172531][ T6298] gsm_activate_mux+0x110/0x2a0 [ 142.177468][ T6298] gsmld_ioctl+0x12ca/0x1900 [ 142.182143][ T6298] ? gsmld_write+0x120/0x120 [ 142.187010][ T6298] ? __init_ldsem+0x150/0x150 [ 142.191773][ T6298] ? __fget_files+0x28/0x460 [ 142.196457][ T6298] ? gsmld_write+0x120/0x120 [ 142.201124][ T6298] tty_ioctl+0x9b5/0xdc0 [ 142.205431][ T6298] ? tty_get_icount+0xb0/0xb0 [ 142.210172][ T6298] __se_sys_ioctl+0xfd/0x170 [ 142.214888][ T6298] do_syscall_64+0x55/0xb0 [ 142.219392][ T6298] ? clear_bhb_loop+0x40/0x90 [ 142.224150][ T6298] ? clear_bhb_loop+0x40/0x90 [ 142.228915][ T6298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.234971][ T6298] RIP: 0033:0x7f197bd9e0d9 [ 142.239544][ T6298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.259298][ T6298] RSP: 002b:00007f1979fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.267790][ T6298] RAX: ffffffffffffffda RBX: 00007f197c026090 RCX: 00007f197bd9e0d9 [ 142.275831][ T6298] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 142.283862][ T6298] RBP: 00007f197be35024 R08: 0000000000000000 R09: 0000000000000000 [ 142.292102][ T6298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.300149][ T6298] R13: 00007f197c026128 R14: 00007f197c026090 R15: 00007ffd02468338 [ 142.308562][ T6298] [ 142.311675][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.401647][ T6296] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 142.627853][ T6298] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 143.304261][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c90b000: rx timeout, send abort [ 143.804444][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c90b800: rx timeout, send abort [ 143.813329][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c90b000: abort rx timeout. Force session deactivation [ 143.889399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 143.908358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 143.928295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 143.945287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 143.968520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 143.995157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 144.018933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 144.038571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 144.058492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 144.313302][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c90b800: abort rx timeout. Force session deactivation [ 148.676280][ T6323] siw: device registration error -23 [ 148.735775][ T28] audit: type=1800 audit(1787767297.058:27): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.144" name="attr_allow_any_host" dev="configfs" ino=9579 res=0 errno=0 [ 148.789089][ T28] audit: type=1800 audit(1787767297.098:28): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.144" name="addr_trtype" dev="configfs" ino=9580 res=0 errno=0 [ 148.816140][ T6323] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 148.865274][ T28] audit: type=1800 audit(1787767297.098:29): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.144" name="addr_adrfam" dev="configfs" ino=9581 res=0 errno=0 [ 149.023297][ T6332] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 149.242654][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c973400: rx timeout, send abort [ 149.742820][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c1c9800: rx timeout, send abort [ 149.751339][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c973400: abort rx timeout. Force session deactivation [ 150.251149][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c1c9800: abort rx timeout. Force session deactivation [ 150.440031][ T28] audit: type=1800 audit(1787767297.108:30): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.144" name="addr_traddr" dev="configfs" ino=9582 res=0 errno=0 [ 150.875726][ T28] audit: type=1800 audit(1787767297.108:31): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.144" name="addr_trsvcid" dev="configfs" ino=9583 res=0 errno=0 [ 150.896206][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.920934][ T6323] nvme nvme0: rdma connection establishment failed (-104) [ 152.589808][ T6353] syzkaller1: entered promiscuous mode [ 152.608559][ T6356] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 152.620633][ T6353] syzkaller1: entered allmulticast mode [ 152.626551][ T6356] CPU: 1 PID: 6356 Comm: syz.1.156 Not tainted syzkaller #0 [ 152.633918][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.644036][ T6356] Call Trace: [ 152.647554][ T6356] [ 152.650551][ T6356] dump_stack_lvl+0x18c/0x250 [ 152.655303][ T6356] ? show_regs_print_info+0x20/0x20 [ 152.660594][ T6356] ? load_image+0x420/0x420 [ 152.665197][ T6356] sysfs_create_dir_ns+0x26e/0x2a0 [ 152.670422][ T6356] ? __lock_acquire+0x7d80/0x7d80 [ 152.675534][ T6356] ? sysfs_warn_dup+0xa0/0xa0 [ 152.680289][ T6356] ? rcu_is_watching+0x15/0xb0 [ 152.685172][ T6356] ? do_raw_spin_unlock+0x121/0x230 [ 152.690450][ T6356] kobject_add_internal+0x617/0xc90 [ 152.695898][ T6356] kobject_add+0x164/0x240 [ 152.700489][ T6356] ? kobject_init+0x1d0/0x1d0 [ 152.705255][ T6356] ? get_device_parent+0x366/0x390 [ 152.710463][ T6356] device_add+0x3fa/0xc40 [ 152.714871][ T6356] tty_register_device_attr+0x425/0x950 [ 152.720510][ T6356] ? tty_register_device+0x30/0x30 [ 152.725707][ T6356] ? tty_port_init+0x132/0x1a0 [ 152.730533][ T6356] ? gsm_dlci_alloc+0x32a/0x630 [ 152.735452][ T6356] ? __might_fault+0xaa/0x120 [ 152.740197][ T6356] gsm_activate_mux+0x110/0x2a0 [ 152.745144][ T6356] gsmld_ioctl+0x12ca/0x1900 [ 152.750177][ T6356] ? gsmld_write+0x120/0x120 [ 152.754850][ T6356] ? __init_ldsem+0x150/0x150 [ 152.759625][ T6356] ? __fget_files+0x28/0x460 [ 152.764306][ T6356] ? gsmld_write+0x120/0x120 [ 152.769057][ T6356] tty_ioctl+0x9b5/0xdc0 [ 152.773429][ T6356] ? tty_get_icount+0xb0/0xb0 [ 152.778385][ T6356] __se_sys_ioctl+0xfd/0x170 [ 152.783081][ T6356] do_syscall_64+0x55/0xb0 [ 152.787739][ T6356] ? clear_bhb_loop+0x40/0x90 [ 152.792483][ T6356] ? clear_bhb_loop+0x40/0x90 [ 152.797320][ T6356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.803301][ T6356] RIP: 0033:0x7f1be9b9e0d9 [ 152.807781][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.828012][ T6356] RSP: 002b:00007f1beaaf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.836758][ T6356] RAX: ffffffffffffffda RBX: 00007f1be9e26090 RCX: 00007f1be9b9e0d9 [ 152.844828][ T6356] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 152.853130][ T6356] RBP: 00007f1be9c35024 R08: 0000000000000000 R09: 0000000000000000 [ 152.861274][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.869662][ T6356] R13: 00007f1be9e26128 R14: 00007f1be9e26090 R15: 00007ffd0baeba18 [ 152.877720][ T6356] [ 152.883061][ T6356] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 153.741016][ T28] audit: type=1800 audit(1787767302.058:32): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="attr_allow_any_host" dev="configfs" ino=9714 res=0 errno=0 [ 153.762135][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.770618][ T6361] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 153.901036][ T28] audit: type=1800 audit(1787767302.058:33): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="addr_trtype" dev="configfs" ino=9715 res=0 errno=0 [ 153.976564][ T28] audit: type=1800 audit(1787767302.058:34): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="addr_adrfam" dev="configfs" ino=9716 res=0 errno=0 [ 154.000460][ T28] audit: type=1800 audit(1787767302.088:35): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="addr_traddr" dev="configfs" ino=9717 res=0 errno=0 [ 154.021546][ T6361] nvme nvme0: rdma connection establishment failed (-104) [ 154.046523][ T6366] siw: device registration error -23 [ 154.077989][ T28] audit: type=1800 audit(1787767302.088:36): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="addr_trsvcid" dev="configfs" ino=9718 res=0 errno=0 [ 154.196130][ T6366] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 154.260364][ T28] audit: type=1800 audit(1787767302.398:37): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.160" name="attr_allow_any_host" dev="configfs" ino=9722 res=0 errno=0 [ 156.375728][ T28] audit: type=1800 audit(1787767302.438:38): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.160" name="addr_trtype" dev="configfs" ino=9723 res=0 errno=0 [ 156.396098][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.403086][ T28] audit: type=1800 audit(1787767302.478:39): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.160" name="addr_adrfam" dev="configfs" ino=9728 res=0 errno=0 [ 156.425285][ T28] audit: type=1800 audit(1787767302.488:40): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.160" name="addr_traddr" dev="configfs" ino=9729 res=0 errno=0 [ 156.445654][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.451936][ T28] audit: type=1800 audit(1787767302.498:41): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.160" name="addr_trsvcid" dev="configfs" ino=9730 res=0 errno=0 [ 156.516603][ T6372] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 156.548627][ T6366] nvme nvme0: rdma connection establishment failed (-512) [ 160.187517][ T6394] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 161.235166][ T5760] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 162.890935][ T5760] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.910458][ T5760] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 162.926196][ T5760] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 162.953158][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.971199][ T5760] usb 4-1: Product: syz [ 162.977991][ T5760] usb 4-1: Manufacturer: syz [ 162.982718][ T5760] usb 4-1: SerialNumber: syz [ 163.007538][ T5760] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 163.024624][ T6416] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.046767][ T5760] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 163.046767][ T5760] Please send a copy of this message to and [ 163.155237][ T5796] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.182172][ T6419] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 165.025638][ T5760] ums-sddr09: probe of 4-1:1.0 failed with error -32 [ 165.049384][ T5760] usb 4-1: USB disconnect, device number 4 [ 166.415189][ T5843] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 166.435154][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 167.192289][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 167.207583][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.234820][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.251776][ T5843] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 167.270903][ T5843] usb 1-1: config 2 has no interface number 0 [ 167.348614][ T6453] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 167.674385][ T9] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 168.049611][ T5843] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 168.061168][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.069864][ T5843] usb 1-1: config 2 interface 88 has no altsetting 0 [ 168.081405][ T9] usb 4-1: config 0 descriptor?? [ 168.090479][ T5843] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 168.101103][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 168.114984][ T5843] usb 1-1: Product: syz [ 168.119532][ T5843] usb 1-1: Manufacturer: syz [ 168.124319][ T5843] usb 1-1: SerialNumber: syz [ 168.172514][ T6437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.302742][ T5843] asix: probe of 1-1:2.88 failed with error -71 [ 169.369144][ T5843] usb 1-1: USB disconnect, device number 2 [ 169.377355][ T9] hid-led 0003:27B8:01ED.0002: item fetching failed at offset 3/5 [ 169.393477][ T9] hid-led: probe of 0003:27B8:01ED.0002 failed with error -22 [ 169.658058][ T5843] usb 4-1: USB disconnect, device number 5 [ 170.244459][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 170.797407][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.598641][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.610094][ T27] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 171.619328][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.651946][ T27] usb 3-1: config 0 descriptor?? [ 171.699078][ T6479] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 171.708911][ T6479] CPU: 1 PID: 6479 Comm: syz.1.195 Not tainted syzkaller #0 [ 171.716365][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.726478][ T6479] Call Trace: [ 171.729807][ T6479] [ 171.732784][ T6479] dump_stack_lvl+0x18c/0x250 [ 171.737528][ T6479] ? show_regs_print_info+0x20/0x20 [ 171.742798][ T6479] ? load_image+0x420/0x420 [ 171.747370][ T6479] sysfs_create_dir_ns+0x26e/0x2a0 [ 171.752561][ T6479] ? __lock_acquire+0x7d80/0x7d80 [ 171.757652][ T6479] ? sysfs_warn_dup+0xa0/0xa0 [ 171.762424][ T6479] ? rcu_is_watching+0x15/0xb0 [ 171.767263][ T6479] ? do_raw_spin_unlock+0x121/0x230 [ 171.772538][ T6479] kobject_add_internal+0x617/0xc90 [ 171.777819][ T6479] kobject_add+0x164/0x240 [ 171.782309][ T6479] ? kobject_init+0x1d0/0x1d0 [ 171.787054][ T6479] ? get_device_parent+0x366/0x390 [ 171.792237][ T6479] device_add+0x3fa/0xc40 [ 171.799473][ T6479] tty_register_device_attr+0x425/0x950 [ 171.805108][ T6479] ? tty_register_device+0x30/0x30 [ 171.810311][ T6479] ? tty_port_init+0x132/0x1a0 [ 171.815138][ T6479] ? gsm_dlci_alloc+0x32a/0x630 [ 171.820059][ T6479] ? __might_fault+0xaa/0x120 [ 171.824891][ T6479] gsm_activate_mux+0x110/0x2a0 [ 171.829903][ T6479] gsmld_ioctl+0x12ca/0x1900 [ 171.834545][ T6479] ? gsmld_write+0x120/0x120 [ 171.839189][ T6479] ? __init_ldsem+0x150/0x150 [ 171.843962][ T6479] ? __fget_files+0x28/0x460 [ 171.848585][ T6479] ? gsmld_write+0x120/0x120 [ 171.853220][ T6479] tty_ioctl+0x9b5/0xdc0 [ 171.857499][ T6479] ? tty_get_icount+0xb0/0xb0 [ 171.862191][ T6479] __se_sys_ioctl+0xfd/0x170 [ 171.866816][ T6479] do_syscall_64+0x55/0xb0 [ 171.871260][ T6479] ? clear_bhb_loop+0x40/0x90 [ 171.875965][ T6479] ? clear_bhb_loop+0x40/0x90 [ 171.880681][ T6479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.886640][ T6479] RIP: 0033:0x7f1be9b9e0d9 [ 171.891072][ T6479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.910701][ T6479] RSP: 002b:00007f1beaaf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.919154][ T6479] RAX: ffffffffffffffda RBX: 00007f1be9e26090 RCX: 00007f1be9b9e0d9 [ 171.927183][ T6479] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 171.935207][ T6479] RBP: 00007f1be9c35024 R08: 0000000000000000 R09: 0000000000000000 [ 171.943490][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.951515][ T6479] R13: 00007f1be9e26128 R14: 00007f1be9e26090 R15: 00007ffd0baeba18 [ 171.959524][ T6479] [ 171.962668][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.969861][ T6479] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 174.291295][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 174.298740][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 174.356156][ T27] usb 3-1: USB disconnect, device number 3 [ 174.490639][ T6489] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty65' [ 174.499575][ T6489] CPU: 0 PID: 6489 Comm: syz.3.198 Not tainted syzkaller #0 [ 174.506939][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.517064][ T6489] Call Trace: [ 174.520566][ T6489] [ 174.523565][ T6489] dump_stack_lvl+0x18c/0x250 [ 174.528336][ T6489] ? show_regs_print_info+0x20/0x20 [ 174.533627][ T6489] ? load_image+0x420/0x420 [ 174.538198][ T6489] sysfs_create_dir_ns+0x26e/0x2a0 [ 174.543374][ T6489] ? __lock_acquire+0x7d80/0x7d80 [ 174.548466][ T6489] ? sysfs_warn_dup+0xa0/0xa0 [ 174.553198][ T6489] ? rcu_is_watching+0x15/0xb0 [ 174.558036][ T6489] ? do_raw_spin_unlock+0x121/0x230 [ 174.563318][ T6489] kobject_add_internal+0x617/0xc90 [ 174.568600][ T6489] kobject_add+0x164/0x240 [ 174.573107][ T6489] ? kobject_init+0x1d0/0x1d0 [ 174.577858][ T6489] ? get_device_parent+0x366/0x390 [ 174.583045][ T6489] device_add+0x3fa/0xc40 [ 174.587436][ T6489] tty_register_device_attr+0x425/0x950 [ 174.593150][ T6489] ? tty_register_device+0x30/0x30 [ 174.598340][ T6489] ? tty_port_init+0x132/0x1a0 [ 174.603161][ T6489] ? gsm_dlci_alloc+0x32a/0x630 [ 174.608076][ T6489] ? __might_fault+0xaa/0x120 [ 174.612799][ T6489] gsm_activate_mux+0x110/0x2a0 [ 174.617718][ T6489] gsmld_ioctl+0x12ca/0x1900 [ 174.622373][ T6489] ? gsmld_write+0x120/0x120 [ 174.627046][ T6489] ? __init_ldsem+0x150/0x150 [ 174.631801][ T6489] ? __fget_files+0x28/0x460 [ 174.636497][ T6489] ? gsmld_write+0x120/0x120 [ 174.641145][ T6489] tty_ioctl+0x9b5/0xdc0 [ 174.645459][ T6489] ? tty_get_icount+0xb0/0xb0 [ 174.650200][ T6489] __se_sys_ioctl+0xfd/0x170 [ 174.654885][ T6489] do_syscall_64+0x55/0xb0 [ 174.659364][ T6489] ? clear_bhb_loop+0x40/0x90 [ 174.664133][ T6489] ? clear_bhb_loop+0x40/0x90 [ 174.668874][ T6489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.674841][ T6489] RIP: 0033:0x7f6582f9e0d9 [ 174.679306][ T6489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.698989][ T6489] RSP: 002b:00007f6583da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.707480][ T6489] RAX: ffffffffffffffda RBX: 00007f6583226090 RCX: 00007f6582f9e0d9 [ 174.715568][ T6489] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 174.723598][ T6489] RBP: 00007f6583035024 R08: 0000000000000000 R09: 0000000000000000 [ 174.731698][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.739721][ T6489] R13: 00007f6583226128 R14: 00007f6583226090 R15: 00007ffcc3f6ee08 [ 174.747774][ T6489] [ 174.807402][ T5760] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 174.854352][ T6489] kobject: kobject_add_internal failed for gsmtty65 with -EEXIST, don't try to register things with the same name in the same directory. [ 175.025438][ T5760] usb 1-1: Using ep0 maxpacket: 16 [ 175.137379][ T5760] usb 1-1: unable to get BOS descriptor or descriptor too short [ 175.770307][ T5760] usb 1-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 175.838128][ T5760] usb 1-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.944188][ T5760] usb 1-1: config 1 interface 0 has no altsetting 0 [ 175.963946][ T5760] usb 1-1: language id specifier not provided by device, defaulting to English [ 176.004103][ T5760] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40 [ 176.048185][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.082787][ T5760] usb 1-1: Product: syz [ 176.118326][ T5760] usb 1-1: SerialNumber: syz [ 176.177595][ T5798] udevd[5798]: setting mode of /dev/gsmtty95 to 020600 failed: No such file or directory [ 176.229365][ T5798] udevd[5798]: setting owner of /dev/gsmtty95 to uid=0, gid=0 failed: No such file or directory [ 177.019623][ T5760] usbhid 1-1:1.0: can't add hid device: -71 [ 177.055437][ T5760] usbhid: probe of 1-1:1.0 failed with error -71 [ 177.077779][ T5760] usb 1-1: USB disconnect, device number 3 [ 177.210588][ T6505] syzkaller1: entered promiscuous mode [ 177.234859][ T6505] syzkaller1: entered allmulticast mode [ 177.869254][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c899c00: rx timeout, send abort [ 178.369419][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027447c00: rx timeout, send abort [ 178.385138][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c899c00: abort rx timeout. Force session deactivation [ 178.877788][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027447c00: abort rx timeout. Force session deactivation [ 179.654860][ T6523] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 179.664017][ T6523] CPU: 1 PID: 6523 Comm: syz.0.210 Not tainted syzkaller #0 [ 179.671377][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.681582][ T6523] Call Trace: [ 179.684928][ T6523] [ 179.687934][ T6523] dump_stack_lvl+0x18c/0x250 [ 179.692700][ T6523] ? show_regs_print_info+0x20/0x20 [ 179.697976][ T6523] ? load_image+0x420/0x420 [ 179.702562][ T6523] sysfs_create_dir_ns+0x26e/0x2a0 [ 179.707746][ T6523] ? __lock_acquire+0x7d80/0x7d80 [ 179.712938][ T6523] ? sysfs_warn_dup+0xa0/0xa0 [ 179.717665][ T6523] ? rcu_is_watching+0x15/0xb0 [ 179.722459][ T6523] ? do_raw_spin_unlock+0x121/0x230 [ 179.727777][ T6523] kobject_add_internal+0x617/0xc90 [ 179.733052][ T6523] kobject_add+0x164/0x240 [ 179.737512][ T6523] ? kobject_init+0x1d0/0x1d0 [ 179.742249][ T6523] ? get_device_parent+0x366/0x390 [ 179.747402][ T6523] device_add+0x3fa/0xc40 [ 179.751771][ T6523] tty_register_device_attr+0x425/0x950 [ 179.757373][ T6523] ? tty_register_device+0x30/0x30 [ 179.762654][ T6523] ? tty_port_init+0x132/0x1a0 [ 179.767456][ T6523] ? gsm_dlci_alloc+0x32a/0x630 [ 179.772427][ T6523] ? __might_fault+0xaa/0x120 [ 179.777233][ T6523] gsm_activate_mux+0x110/0x2a0 [ 179.782195][ T6523] gsmld_ioctl+0x12ca/0x1900 [ 179.786813][ T6523] ? gsmld_write+0x120/0x120 [ 179.791429][ T6523] ? __init_ldsem+0x150/0x150 [ 179.796121][ T6523] ? __fget_files+0x28/0x460 [ 179.800831][ T6523] ? gsmld_write+0x120/0x120 [ 179.805466][ T6523] tty_ioctl+0x9b5/0xdc0 [ 179.809763][ T6523] ? tty_get_icount+0xb0/0xb0 [ 179.814473][ T6523] __se_sys_ioctl+0xfd/0x170 [ 179.819110][ T6523] do_syscall_64+0x55/0xb0 [ 179.823584][ T6523] ? clear_bhb_loop+0x40/0x90 [ 179.828306][ T6523] ? clear_bhb_loop+0x40/0x90 [ 179.833032][ T6523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.838976][ T6523] RIP: 0033:0x7f197bd9e0d9 [ 179.843432][ T6523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.863236][ T6523] RSP: 002b:00007f1979fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.871717][ T6523] RAX: ffffffffffffffda RBX: 00007f197c026090 RCX: 00007f197bd9e0d9 [ 179.879734][ T6523] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 179.887739][ T6523] RBP: 00007f197be35024 R08: 0000000000000000 R09: 0000000000000000 [ 179.895750][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.903757][ T6523] R13: 00007f197c026128 R14: 00007f197c026090 R15: 00007ffd02468338 [ 179.911774][ T6523] [ 179.914927][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.926726][ T6523] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 180.097470][ T97] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 180.107219][ T97] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 180.120380][ T6527] zonefs (nullb1): Mounting 64000 zones [ 180.449911][ T6530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.213'. [ 180.584068][ T6527] zonefs (nullb1): Zone group "seq" has 63999 files [ 180.744732][ T6530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.213'. [ 180.946191][ T6535] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 180.957906][ T6535] CPU: 1 PID: 6535 Comm: syz.3.214 Not tainted syzkaller #0 [ 180.965370][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.975749][ T6535] Call Trace: [ 180.979092][ T6535] [ 180.982104][ T6535] dump_stack_lvl+0x18c/0x250 [ 180.986858][ T6535] ? show_regs_print_info+0x20/0x20 [ 180.992125][ T6535] ? load_image+0x420/0x420 [ 180.996714][ T6535] sysfs_create_dir_ns+0x26e/0x2a0 [ 181.001909][ T6535] ? __lock_acquire+0x7d80/0x7d80 [ 181.007096][ T6535] ? sysfs_warn_dup+0xa0/0xa0 [ 181.011866][ T6535] ? rcu_is_watching+0x15/0xb0 [ 181.016709][ T6535] ? do_raw_spin_unlock+0x121/0x230 [ 181.022069][ T6535] kobject_add_internal+0x617/0xc90 [ 181.027373][ T6535] kobject_add+0x164/0x240 [ 181.031870][ T6535] ? kobject_init+0x1d0/0x1d0 [ 181.036634][ T6535] ? get_device_parent+0x366/0x390 [ 181.041823][ T6535] device_add+0x3fa/0xc40 [ 181.046232][ T6535] tty_register_device_attr+0x425/0x950 [ 181.051945][ T6535] ? tty_register_device+0x30/0x30 [ 181.057230][ T6535] ? tty_port_init+0x132/0x1a0 [ 181.062059][ T6535] ? gsm_dlci_alloc+0x32a/0x630 [ 181.067010][ T6535] ? __might_fault+0xaa/0x120 [ 181.071760][ T6535] gsm_activate_mux+0x110/0x2a0 [ 181.076710][ T6535] gsmld_ioctl+0x12ca/0x1900 [ 181.081557][ T6535] ? gsmld_write+0x120/0x120 [ 181.086261][ T6535] ? __init_ldsem+0x150/0x150 [ 181.091022][ T6535] ? __fget_files+0x28/0x460 [ 181.095700][ T6535] ? gsmld_write+0x120/0x120 [ 181.100443][ T6535] tty_ioctl+0x9b5/0xdc0 [ 181.104870][ T6535] ? tty_get_icount+0xb0/0xb0 [ 181.109614][ T6535] __se_sys_ioctl+0xfd/0x170 [ 181.114286][ T6535] do_syscall_64+0x55/0xb0 [ 181.118741][ T6535] ? clear_bhb_loop+0x40/0x90 [ 181.123456][ T6535] ? clear_bhb_loop+0x40/0x90 [ 181.128168][ T6535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.134095][ T6535] RIP: 0033:0x7f6582f9e0d9 [ 181.138553][ T6535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.158308][ T6535] RSP: 002b:00007f6583da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.167053][ T6535] RAX: ffffffffffffffda RBX: 00007f6583226090 RCX: 00007f6582f9e0d9 [ 181.175082][ T6535] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 181.183103][ T6535] RBP: 00007f6583035024 R08: 0000000000000000 R09: 0000000000000000 [ 181.191115][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.199138][ T6535] R13: 00007f6583226128 R14: 00007f6583226090 R15: 00007ffcc3f6ee08 [ 181.207180][ T6535] [ 181.210259][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.322673][ T6535] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 181.615198][ T5760] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.755501][ T5760] usb 1-1: Using ep0 maxpacket: 16 [ 182.763149][ T5760] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 182.784166][ T5760] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 182.793795][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.802878][ T5760] usb 1-1: Product: syz [ 182.808233][ T5760] usb 1-1: Manufacturer: syz [ 182.813306][ T5760] usb 1-1: SerialNumber: syz [ 183.011258][ T6544] syzkaller0: entered promiscuous mode [ 183.038431][ T6544] syzkaller0: entered allmulticast mode [ 184.565588][ T5760] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 184.587140][ T5760] usb 1-1: unit 6: unexpected type 0x03 [ 184.592819][ T5760] usb 1-1: unit 12 not found! [ 184.623099][ T5760] usb 1-1: unit 4 not found! [ 184.635102][ T5760] usb 1-1: unit 8 not found! [ 184.645566][ T5760] usb 1-1: unit 1 not found! [ 184.650351][ T5760] usb 1-1: unit 9 not found! [ 184.664912][ T97] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 184.685118][ T97] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 184.704685][ T6561] zonefs (nullb1): Mounting 64000 zones [ 184.942568][ T5760] usb 1-1: USB disconnect, device number 4 [ 185.330278][ T6561] zonefs (nullb1): Zone group "seq" has 63999 files [ 185.788435][ T6570] syzkaller0: entered promiscuous mode [ 185.794108][ T6570] syzkaller0: entered allmulticast mode [ 185.845609][ T5843] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 186.103172][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.208286][ T5843] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.300925][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.152524][ T5843] usb 1-1: config 0 descriptor?? [ 188.192466][ T6577] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 188.201059][ T6577] CPU: 1 PID: 6577 Comm: syz.3.228 Not tainted syzkaller #0 [ 188.208531][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.218643][ T6577] Call Trace: [ 188.221988][ T6577] [ 188.225012][ T6577] dump_stack_lvl+0x18c/0x250 [ 188.229753][ T6577] ? show_regs_print_info+0x20/0x20 [ 188.235019][ T6577] ? load_image+0x420/0x420 [ 188.239599][ T6577] sysfs_create_dir_ns+0x26e/0x2a0 [ 188.244780][ T6577] ? __lock_acquire+0x7d80/0x7d80 [ 188.249881][ T6577] ? sysfs_warn_dup+0xa0/0xa0 [ 188.254627][ T6577] ? rcu_is_watching+0x15/0xb0 [ 188.259464][ T6577] ? do_raw_spin_unlock+0x121/0x230 [ 188.264726][ T6577] kobject_add_internal+0x617/0xc90 [ 188.270014][ T6577] kobject_add+0x164/0x240 [ 188.274487][ T6577] ? kobject_init+0x1d0/0x1d0 [ 188.279200][ T6577] ? get_device_parent+0x366/0x390 [ 188.284358][ T6577] device_add+0x3fa/0xc40 [ 188.288754][ T6577] tty_register_device_attr+0x425/0x950 [ 188.294354][ T6577] ? tty_register_device+0x30/0x30 [ 188.299513][ T6577] ? tty_port_init+0x132/0x1a0 [ 188.304316][ T6577] ? gsm_dlci_alloc+0x32a/0x630 [ 188.309214][ T6577] ? __might_fault+0xaa/0x120 [ 188.313952][ T6577] gsm_activate_mux+0x110/0x2a0 [ 188.318868][ T6577] gsmld_ioctl+0x12ca/0x1900 [ 188.323528][ T6577] ? gsmld_write+0x120/0x120 [ 188.328171][ T6577] ? __init_ldsem+0x150/0x150 [ 188.332950][ T6577] ? __fget_files+0x28/0x460 [ 188.337636][ T6577] ? gsmld_write+0x120/0x120 [ 188.342539][ T6577] tty_ioctl+0x9b5/0xdc0 [ 188.346832][ T6577] ? tty_get_icount+0xb0/0xb0 [ 188.351660][ T6577] __se_sys_ioctl+0xfd/0x170 [ 188.356313][ T6577] do_syscall_64+0x55/0xb0 [ 188.360772][ T6577] ? clear_bhb_loop+0x40/0x90 [ 188.365488][ T6577] ? clear_bhb_loop+0x40/0x90 [ 188.370205][ T6577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.376131][ T6577] RIP: 0033:0x7f6582f9e0d9 [ 188.380581][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.400307][ T6577] RSP: 002b:00007f6583da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.408762][ T6577] RAX: ffffffffffffffda RBX: 00007f6583226090 RCX: 00007f6582f9e0d9 [ 188.416770][ T6577] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 188.424787][ T6577] RBP: 00007f6583035024 R08: 0000000000000000 R09: 0000000000000000 [ 188.432804][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.440807][ T6577] R13: 00007f6583226128 R14: 00007f6583226090 R15: 00007ffcc3f6ee08 [ 188.448827][ T6577] [ 188.457403][ T6577] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 188.679624][ T5843] usbhid 1-1:0.0: can't add hid device: -71 [ 188.686008][ T5843] usbhid: probe of 1-1:0.0 failed with error -71 [ 188.709229][ T5843] usb 1-1: USB disconnect, device number 5 [ 189.236209][ T5843] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 190.088724][ T5843] usb 1-1: device descriptor read/all, error -71 [ 191.424756][ T28] audit: type=1800 audit(1787767339.738:42): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.233" name="attr_allow_any_host" dev="configfs" ino=11038 res=0 errno=0 [ 191.457693][ T28] audit: type=1800 audit(1787767339.768:43): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.233" name="addr_trtype" dev="configfs" ino=11039 res=0 errno=0 [ 191.465615][ T6605] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 191.522762][ T28] audit: type=1800 audit(1787767339.768:44): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.233" name="addr_adrfam" dev="configfs" ino=11040 res=0 errno=0 [ 191.566868][ T28] audit: type=1800 audit(1787767339.768:45): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.233" name="addr_traddr" dev="configfs" ino=11041 res=0 errno=0 [ 191.601759][ T28] audit: type=1800 audit(1787767339.768:46): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.233" name="addr_trsvcid" dev="configfs" ino=11042 res=0 errno=0 [ 191.668607][ T6605] nvme nvme0: rdma connection establishment failed (-104) [ 191.702900][ T5936] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 191.713793][ T5936] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 191.743430][ T6610] zonefs (nullb1): Mounting 64000 zones [ 191.881107][ T6610] zonefs (nullb1): Zone group "seq" has 63999 files [ 194.749913][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.756493][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.437256][ T5936] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 195.452329][ T5936] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 195.965142][ T5842] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 196.035328][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 196.161277][ T5842] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.172946][ T5842] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1096, setting to 1024 [ 196.195706][ T5842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.202953][ T5842] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 196.235219][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 196.235241][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.253580][ T8] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 196.273463][ T5842] usb 4-1: config 0 descriptor?? [ 196.281900][ T6645] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 196.289465][ T8] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 196.305943][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 196.321560][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.333375][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.361775][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.376369][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 196.392996][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.414881][ T8] usb 3-1: config 0 descriptor?? [ 196.434940][ T6649] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 196.688378][ T8] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 196.727532][ T8] usb 3-1: USB disconnect, device number 4 [ 196.742426][ T8] usblp0: removed [ 196.797352][ T5842] kye 0003:0458:5014.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 196.852073][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 196.861323][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 196.905198][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 196.924644][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 196.944927][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 196.952474][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 196.964737][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 196.974777][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 196.991258][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 196.998269][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.020414][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.027306][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.041305][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.050622][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.062500][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.071804][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.083325][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.090405][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.101856][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.108956][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.122813][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.129830][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.144076][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.151554][ T5842] kye 0003:0458:5014.0003: unknown main item tag 0x0 [ 197.172242][ T5842] kye 0003:0458:5014.0003: hidraw0: USB HID v80.01 Device [HID 0458:5014] on usb-dummy_hcd.3-1/input0 [ 197.187228][ T5842] kye 0003:0458:5014.0003: tablet-enabling feature report not found [ 197.195507][ T5842] kye 0003:0458:5014.0003: tablet enabling failed [ 197.209372][ T5842] usb 4-1: USB disconnect, device number 6 [ 197.300710][ T6662] fido_id[6662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 197.346768][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 197.406005][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 197.538612][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 197.548271][ T8] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 197.562184][ T8] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 197.571794][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 197.595267][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 197.605006][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 197.605473][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 197.620592][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 197.642819][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 197.654912][ T9] usb 1-1: config 139 has an invalid interface number: 49 but max is 0 [ 197.668185][ T9] usb 1-1: config 139 has no interface number 0 [ 197.679681][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.688420][ T9] usb 1-1: config 139 interface 49 has no altsetting 0 [ 197.703704][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 197.714423][ T8] usb 3-1: config 0 descriptor?? [ 197.723992][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.732407][ T9] usb 1-1: Product: syz [ 197.749542][ T9] usb 1-1: Manufacturer: syz [ 197.754274][ T9] usb 1-1: SerialNumber: syz [ 197.862810][ T5936] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 197.872749][ T5936] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 197.894112][ T6669] zonefs (nullb1): Mounting 64000 zones [ 197.970336][ T8] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 198.130355][ T6669] zonefs (nullb1): Zone group "seq" has 63999 files [ 198.268061][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.279605][ T8] usb 3-1: USB disconnect, device number 5 [ 198.301478][ T8] usblp0: removed [ 198.333366][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.380830][ T9] radio-usb-si4713 1-1:139.49: Si4713 development board discovered: (10C4:8244) [ 198.411176][ T28] audit: type=1800 audit(1787767346.728:47): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.256" name="attr_allow_any_host" dev="configfs" ino=11526 res=0 errno=0 [ 198.414560][ T9] radio-usb-si4713: probe of 1-1:139.49 failed with error -71 [ 198.432902][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.452693][ T6672] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 198.463129][ T28] audit: type=1800 audit(1787767346.758:48): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.256" name="addr_trtype" dev="configfs" ino=11527 res=0 errno=0 [ 198.483590][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.486370][ T9] usbhid 1-1:139.49: couldn't find an input interrupt endpoint [ 198.506886][ T28] audit: type=1800 audit(1787767346.758:49): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.256" name="addr_adrfam" dev="configfs" ino=11528 res=0 errno=0 [ 198.528362][ T28] audit: type=1800 audit(1787767346.758:50): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.256" name="addr_traddr" dev="configfs" ino=11529 res=0 errno=0 [ 198.546290][ T9] usb 1-1: USB disconnect, device number 8 [ 198.549048][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.561829][ T28] audit: type=1800 audit(1787767346.768:51): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.256" name="addr_trsvcid" dev="configfs" ino=11530 res=0 errno=0 [ 198.582446][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.689512][ T6672] nvme nvme0: rdma connection establishment failed (-104) [ 198.862852][ T6676] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 198.872305][ T6676] CPU: 1 PID: 6676 Comm: syz.3.257 Not tainted syzkaller #0 [ 198.879843][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.890044][ T6676] Call Trace: [ 198.893378][ T6676] [ 198.896376][ T6676] dump_stack_lvl+0x18c/0x250 [ 198.901136][ T6676] ? show_regs_print_info+0x20/0x20 [ 198.906396][ T6676] ? load_image+0x420/0x420 [ 198.910979][ T6676] sysfs_create_dir_ns+0x26e/0x2a0 [ 198.916145][ T6676] ? __lock_acquire+0x7d80/0x7d80 [ 198.921230][ T6676] ? sysfs_warn_dup+0xa0/0xa0 [ 198.925962][ T6676] ? rcu_is_watching+0x15/0xb0 [ 198.930801][ T6676] ? do_raw_spin_unlock+0x121/0x230 [ 198.936083][ T6676] kobject_add_internal+0x617/0xc90 [ 198.941802][ T6676] kobject_add+0x164/0x240 [ 198.946310][ T6676] ? kobject_init+0x1d0/0x1d0 [ 198.951120][ T6676] ? get_device_parent+0x366/0x390 [ 198.956317][ T6676] device_add+0x3fa/0xc40 [ 198.960729][ T6676] tty_register_device_attr+0x425/0x950 [ 198.966360][ T6676] ? tty_register_device+0x30/0x30 [ 198.971641][ T6676] ? tty_port_init+0x132/0x1a0 [ 198.976472][ T6676] ? gsm_dlci_alloc+0x32a/0x630 [ 198.981414][ T6676] ? __might_fault+0xaa/0x120 [ 198.986163][ T6676] gsm_activate_mux+0x110/0x2a0 [ 198.991094][ T6676] gsmld_ioctl+0x12ca/0x1900 [ 198.995785][ T6676] ? gsmld_write+0x120/0x120 [ 199.000545][ T6676] ? __init_ldsem+0x150/0x150 [ 199.005280][ T6676] ? __fget_files+0x28/0x460 [ 199.009943][ T6676] ? gsmld_write+0x120/0x120 [ 199.014589][ T6676] tty_ioctl+0x9b5/0xdc0 [ 199.018884][ T6676] ? tty_get_icount+0xb0/0xb0 [ 199.023602][ T6676] __se_sys_ioctl+0xfd/0x170 [ 199.028457][ T6676] do_syscall_64+0x55/0xb0 [ 199.032947][ T6676] ? clear_bhb_loop+0x40/0x90 [ 199.037661][ T6676] ? clear_bhb_loop+0x40/0x90 [ 199.042470][ T6676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.048758][ T6676] RIP: 0033:0x7f6582f9e0d9 [ 199.053207][ T6676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.073210][ T6676] RSP: 002b:00007f6583da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.081860][ T6676] RAX: ffffffffffffffda RBX: 00007f6583226090 RCX: 00007f6582f9e0d9 [ 199.090277][ T6676] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 199.098312][ T6676] RBP: 00007f6583035024 R08: 0000000000000000 R09: 0000000000000000 [ 199.106326][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.114338][ T6676] R13: 00007f6583226128 R14: 00007f6583226090 R15: 00007ffcc3f6ee08 [ 199.122372][ T6676] [ 199.125654][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.238596][ T6676] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 199.638954][ T6683] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 200.440403][ T6695] kvm: pic: level sensitive irq not supported [ 200.440963][ T6695] kvm: pic: level sensitive irq not supported [ 200.476213][ T6695] kvm: pic: single mode not supported [ 200.482422][ T6695] kvm: pic: level sensitive irq not supported [ 200.506574][ T6695] kvm: pic: level sensitive irq not supported [ 200.551541][ T6695] kvm: pic: single mode not supported [ 200.575804][ T6695] kvm: pic: single mode not supported [ 200.606230][ T6695] kvm: pic: single mode not supported [ 200.612331][ T6695] kvm: pic: level sensitive irq not supported [ 200.652052][ T6695] kvm: pic: single mode not supported [ 200.658368][ T6695] kvm: pic: level sensitive irq not supported [ 200.680222][ T6695] kvm: pic: single mode not supported [ 200.686465][ T6695] kvm: pic: level sensitive irq not supported [ 200.795260][ T6710] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 202.531726][ T6735] syzkaller0: entered promiscuous mode [ 202.552442][ T6735] syzkaller0: entered allmulticast mode [ 202.913009][ T6739] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 202.971145][ T6741] dummy_hcd dummy_hcd.0: remove, state 1 [ 202.996934][ T6741] usb usb1: USB disconnect, device number 1 [ 203.097092][ T6741] dummy_hcd dummy_hcd.0: stopped [ 203.106739][ T6741] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 203.394891][ T6746] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 203.406703][ T6746] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 203.415173][ T6746] CPU: 1 PID: 6746 Comm: syz.0.282 Not tainted syzkaller #0 [ 203.422689][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.432796][ T6746] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 203.438343][ T6746] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 48 35 cb fa eb 0c e8 41 35 cb fa eb 05 e8 3a 35 cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 a4 b2 23 fb 4d 8b 36 4c 89 f7 e8 [ 203.458354][ T6746] RSP: 0018:ffffc9001a5e7850 EFLAGS: 00010246 [ 203.464478][ T6746] RAX: 0000000000000000 RBX: ffff888058532050 RCX: 0000000000080000 [ 203.472497][ T6746] RDX: ffffc9000c6c9000 RSI: 0000000000004155 RDI: 0000000000004156 [ 203.480601][ T6746] RBP: ffff888025fbf000 R08: ffff8880278f8000 R09: 0000000000000004 [ 203.488696][ T6746] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 203.496724][ T6746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 203.504867][ T6746] FS: 00007f1979ff66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 203.514029][ T6746] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.520755][ T6746] CR2: 00007f197bd87240 CR3: 000000002ea14000 CR4: 00000000003506e0 [ 203.528878][ T6746] Call Trace: [ 203.532547][ T6746] [ 203.535523][ T6746] ? dummy_pullup+0x120/0x120 [ 203.540271][ T6746] gadget_bind_driver+0x390/0x770 [ 203.545531][ T6746] ? gadget_match_driver+0x130/0x130 [ 203.550862][ T6746] really_probe+0x247/0xae0 [ 203.555391][ T6746] ? pm_runtime_barrier+0x14b/0x1c0 [ 203.560626][ T6746] __driver_probe_device+0x1f5/0x390 [ 203.565945][ T6746] driver_probe_device+0x4f/0x420 [ 203.571003][ T6746] __driver_attach+0x444/0x6d0 [ 203.575820][ T6746] bus_for_each_dev+0x235/0x2b0 [ 203.580702][ T6746] ? driver_attach+0x50/0x50 [ 203.585346][ T6746] ? bus_remove_file+0x140/0x140 [ 203.590334][ T6746] ? do_raw_spin_unlock+0x121/0x230 [ 203.595338][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027444c00: rx timeout, send abort [ 203.595592][ T6746] bus_add_driver+0x340/0x630 [ 203.609197][ T6746] driver_register+0x23a/0x310 [ 203.614003][ T6746] usb_gadget_register_driver_owner+0xf9/0x270 [ 203.623020][ T6746] raw_ioctl+0x1613/0x3d80 [ 203.627479][ T6746] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 203.633872][ T6746] ? tomoyo_path_number_perm+0x217/0x5e0 [ 203.639648][ T6746] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 203.645322][ T6746] ? make_qualifier+0x260/0x260 [ 203.650914][ T6746] ? __fget_files+0x28/0x460 [ 203.655599][ T6746] ? bpf_lsm_file_ioctl+0x9/0x10 [ 203.660660][ T6746] ? security_file_ioctl+0x80/0xa0 [ 203.666101][ T6746] ? make_qualifier+0x260/0x260 [ 203.671354][ T6746] __se_sys_ioctl+0xfd/0x170 [ 203.676175][ T6746] do_syscall_64+0x55/0xb0 [ 203.680626][ T6746] ? clear_bhb_loop+0x40/0x90 [ 203.685359][ T6746] ? clear_bhb_loop+0x40/0x90 [ 203.690110][ T6746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.696043][ T6746] RIP: 0033:0x7f197bd9dd6b [ 203.700506][ T6746] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 203.720149][ T6746] RSP: 002b:00007f1979ff3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.728595][ T6746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f197bd9dd6b [ 203.736608][ T6746] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 203.744639][ T6746] RBP: 00007f1979ff4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 203.752639][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.760663][ T6746] R13: 0000200000000240 R14: 0000000000000002 R15: 0000000000000000 [ 203.768671][ T6746] [ 203.771723][ T6746] Modules linked in: [ 204.095735][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cd74400: rx timeout, send abort [ 204.104571][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027444c00: abort rx timeout. Force session deactivation [ 204.425651][ T6746] ---[ end trace 0000000000000000 ]--- [ 204.431233][ T6746] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 204.461238][ T6746] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 48 35 cb fa eb 0c e8 41 35 cb fa eb 05 e8 3a 35 cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 a4 b2 23 fb 4d 8b 36 4c 89 f7 e8 [ 204.485535][ T6746] RSP: 0018:ffffc9001a5e7850 EFLAGS: 00010246 [ 204.491819][ T6746] RAX: 0000000000000000 RBX: ffff888058532050 RCX: 0000000000080000 [ 204.500838][ T6746] RDX: ffffc9000c6c9000 RSI: 0000000000004155 RDI: 0000000000004156 [ 204.510338][ T6746] RBP: ffff888025fbf000 R08: ffff8880278f8000 R09: 0000000000000004 [ 204.518959][ T6746] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 204.527401][ T6746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 204.536445][ T6746] FS: 00007f1979ff66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 204.551445][ T6746] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.558482][ T6746] CR2: 00007f1e4d3ef2f8 CR3: 000000002ea14000 CR4: 00000000003506f0 [ 204.573786][ T6746] Kernel panic - not syncing: Fatal exception [ 204.580523][ T6746] Kernel Offset: disabled [ 204.584880][ T6746] Rebooting in 86400 seconds..