last executing test programs: 7.643080966s ago: executing program 3 (id=5783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x100) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0xeeee8000, 0x50000, 0xc, 0x6, 0x4, 0xa, 0x3, 0xa, 0x0, 0x1, 0x3, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x4, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x8, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x2, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x442a4, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.614221644s ago: executing program 3 (id=5800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xdd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.928029668s ago: executing program 3 (id=5810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.802944311s ago: executing program 1 (id=5813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.626184818s ago: executing program 3 (id=5817): unshare(0x64000600) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) 1.455032559s ago: executing program 2 (id=5819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109280, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f00000000c0)='\x00', 0x82281, &(0x7f0000000200)={@align=0x5, {0x800, 0xf, 0x4f, 0x3}}, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0xfff}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x4}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x448, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x41c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x3, 0x9, 0x4, 0x6, 0x40, 0x4, 0x40, 0x6, 0x482e3068, 0xff, 0xfffffbea, 0x6, 0x542, 0x400040, 0xe0000, 0x1, 0xc, 0x1, 0x800, 0xd, 0x0, 0x7ff, 0xb3e, 0x3ff, 0x7, 0x7, 0x400, 0x7, 0xa45, 0xc, 0x7f, 0x401, 0x5, 0xfffffff7, 0xfffffff2, 0xdf8, 0x9, 0x7436, 0x7, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1, 0x2bf7, 0x6, 0x7, 0x0, 0x3, 0x3, 0x1, 0x9, 0x1, 0x4, 0x4, 0x6, 0x3, 0x10000, 0x7, 0x5, 0x3, 0x80000001, 0x9, 0x5, 0x1cb, 0x5, 0x7, 0x7, 0x7, 0xfff, 0x2, 0x7, 0x9, 0xffff, 0x1, 0x3, 0x4, 0x8, 0xe1cc, 0x9, 0xc7, 0x7, 0x55, 0x6, 0x75a, 0x8, 0x2, 0x6, 0x40, 0x8, 0x7, 0x5, 0x0, 0xf03, 0x7, 0x8, 0x9, 0x3, 0x7, 0x21931f93, 0x1, 0x800, 0x10, 0xfffffffd, 0x0, 0x2, 0xffffffc0, 0x2, 0x7ff, 0x6ed4, 0xffffff80, 0x3, 0x200, 0xcc4, 0x2, 0x3, 0x10b, 0x2, 0x9, 0xac21, 0x0, 0x8, 0xc33, 0xff, 0x1, 0x8, 0x85, 0x2, 0xf1c6, 0x8, 0x5, 0x6, 0x40, 0x4, 0x2, 0xa, 0x80000001, 0x7, 0x7, 0x3, 0x9, 0x7, 0xa93, 0x80000000, 0x80000001, 0x7f, 0x1ff, 0x0, 0x3, 0x870, 0x67bae144, 0x9, 0x4, 0x6a8, 0xe4b, 0x1, 0x13, 0x1, 0x6, 0x4a68, 0xe, 0x10, 0xffffffff, 0x7f, 0x0, 0xa0a, 0x9, 0x3, 0xffffffe8, 0xc71, 0x8, 0xffffff5b, 0x8, 0x0, 0x80000001, 0x5, 0x6, 0x0, 0x30869cc6, 0x0, 0x3ff, 0x4, 0x80, 0x5, 0x15bf41b1, 0xf, 0x6, 0xfffffffe, 0x8, 0x0, 0x943, 0x7, 0xe, 0x5, 0x9, 0x2, 0x0, 0x1, 0x1000, 0x1000, 0x7ff, 0x6, 0x2, 0x0, 0x7, 0xb263, 0x1, 0x7, 0x4, 0x1, 0xc, 0x1, 0x200, 0x8001, 0x5, 0x303f, 0x5d, 0x3, 0x4, 0x3, 0x4, 0x2, 0x7, 0x39b1e32c, 0x0, 0x8a84, 0x9, 0x40, 0x10000, 0x1, 0xb, 0xfffffffd, 0x4, 0x6, 0x5, 0xf2, 0x1834, 0x10000, 0x7ff, 0x1, 0xeb7, 0x67f1, 0x9, 0xffff, 0x3ff, 0x80000000, 0xd, 0x3, 0x10001, 0x2]}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) r2 = socket$inet_smc(0x2b, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 1.26835285s ago: executing program 2 (id=5821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xdd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.058858336s ago: executing program 4 (id=5822): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f00000028c0)=[{&(0x7f00000000c0)="e6", 0x1}, {&(0x7f00000018c0)="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", 0x57c}], 0x2, 0x3) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x877f, 0xc) 1.006715874s ago: executing program 0 (id=5823): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010b52acdc00fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000aa060a000200aaaa"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) 938.351257ms ago: executing program 2 (id=5824): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 937.935107ms ago: executing program 4 (id=5825): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec970000033a00fe8000000000000000000000000000aaff0200"/51], 0xffe) 876.601908ms ago: executing program 0 (id=5826): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b40)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x40}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}}, 0x0) 836.228918ms ago: executing program 4 (id=5827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 794.608955ms ago: executing program 0 (id=5828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xe) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) 762.746983ms ago: executing program 1 (id=5829): bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x2}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20048001}, 0x8000) 678.262085ms ago: executing program 2 (id=5830): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="81000000000000000000", @ANYBLOB="03"], 0x50) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 648.868473ms ago: executing program 3 (id=5831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109280, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f00000000c0)='\x00', 0x82281, &(0x7f0000000200)={@align=0x5, {0x800, 0xf, 0x4f, 0x3}}, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0xfff}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x4}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x448, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x41c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x3, 0x9, 0x4, 0x6, 0x40, 0x4, 0x40, 0x6, 0x482e3068, 0xff, 0xfffffbea, 0x6, 0x542, 0x400040, 0xe0000, 0x1, 0xc, 0x1, 0x800, 0xd, 0x0, 0x7ff, 0xb3e, 0x3ff, 0x7, 0x7, 0x400, 0x7, 0xa45, 0xc, 0x7f, 0x401, 0x5, 0xfffffff7, 0xfffffff2, 0xdf8, 0x9, 0x7436, 0x7, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1, 0x2bf7, 0x6, 0x7, 0x0, 0x3, 0x3, 0x1, 0x9, 0x1, 0x4, 0x4, 0x6, 0x3, 0x10000, 0x7, 0x5, 0x3, 0x80000001, 0x9, 0x5, 0x1cb, 0x5, 0x7, 0x7, 0x7, 0xfff, 0x2, 0x7, 0x9, 0xffff, 0x1, 0x3, 0x4, 0x8, 0xe1cc, 0x9, 0xc7, 0x7, 0x55, 0x6, 0x75a, 0x8, 0x2, 0x6, 0x40, 0x8, 0x7, 0x5, 0x0, 0xf03, 0x7, 0x8, 0x9, 0x3, 0x7, 0x21931f93, 0x1, 0x800, 0x10, 0xfffffffd, 0x0, 0x2, 0xffffffc0, 0x2, 0x7ff, 0x6ed4, 0xffffff80, 0x3, 0x200, 0xcc4, 0x2, 0x3, 0x10b, 0x2, 0x9, 0xac21, 0x0, 0x8, 0xc33, 0xff, 0x1, 0x8, 0x85, 0x2, 0xf1c6, 0x8, 0x5, 0x6, 0x40, 0x4, 0x2, 0xa, 0x80000001, 0x7, 0x7, 0x3, 0x9, 0x7, 0xa93, 0x80000000, 0x80000001, 0x7f, 0x1ff, 0x0, 0x3, 0x870, 0x67bae144, 0x9, 0x4, 0x6a8, 0xe4b, 0x1, 0x13, 0x1, 0x6, 0x4a68, 0xe, 0x10, 0xffffffff, 0x7f, 0x0, 0xa0a, 0x9, 0x3, 0xffffffe8, 0xc71, 0x8, 0xffffff5b, 0x8, 0x0, 0x80000001, 0x5, 0x6, 0x0, 0x30869cc6, 0x0, 0x3ff, 0x4, 0x80, 0x5, 0x15bf41b1, 0xf, 0x6, 0xfffffffe, 0x8, 0x0, 0x943, 0x7, 0xe, 0x5, 0x9, 0x2, 0x0, 0x1, 0x1000, 0x1000, 0x7ff, 0x6, 0x2, 0x0, 0x7, 0xb263, 0x1, 0x7, 0x4, 0x1, 0xc, 0x1, 0x200, 0x8001, 0x5, 0x303f, 0x5d, 0x3, 0x4, 0x3, 0x4, 0x2, 0x7, 0x39b1e32c, 0x0, 0x8a84, 0x9, 0x40, 0x10000, 0x1, 0xb, 0xfffffffd, 0x4, 0x6, 0x5, 0xf2, 0x1834, 0x10000, 0x7ff, 0x1, 0xeb7, 0x67f1, 0x9, 0xffff, 0x3ff, 0x80000000, 0xd, 0x3, 0x10001, 0x2]}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 561.132701ms ago: executing program 1 (id=5832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xd321) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @private1}, 0x1c) shutdown(r0, 0x0) 559.707027ms ago: executing program 0 (id=5833): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) 558.89113ms ago: executing program 2 (id=5834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xdd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 422.351706ms ago: executing program 0 (id=5835): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004a40)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffffe, 0x8000000000000001, 0xfffffe9a, 0x4000000, 0x4, 0x6}}]}}}]}, 0x8c}}, 0x0) 405.468247ms ago: executing program 0 (id=5836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prlimit64(r0, 0xc, 0x0, &(0x7f0000000f80)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001014d9ec29bd7000fcd9df250800030001000000080001000200000008004a0001000000e033659b56a582838917f1cf41a9b6ffcbd0d5e48dc355e628577dd49876ff169d5142ae02aefe63737ce462db7095577938e102f926aeee64bd9d1d49d00496f96824fbacac8a4fb027ee5fcd40b0a75bf3aa400f1e24267619404d209d28d00283c80afd75460b90b1b372b50e660eca35c486ee3cb80ad255aaed1b89266ab5ee0fc58a53f342d419b1f0d81f3c6c2923fe24e51521b22d556cc305930eff3967e751d2164ef02788a4409ca0175301fbb7a0f51f1a75d2e4cc3b2ef9cb34ff14cd"], 0x28}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 370.613278ms ago: executing program 1 (id=5837): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec970000033a00fe8000000000000000000000000000aaff0200"/51], 0xffe) 254.260029ms ago: executing program 4 (id=5838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000180)='/^}.\x00', 0x0, &(0x7f00000001c0)={@_ha_fsid={[0xe, 0x81]}, {0x5, 0xc4c, 0x9}}, 0x5, &(0x7f0000000200)={@_ha_fsid}, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) 253.66417ms ago: executing program 3 (id=5839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 184.97155ms ago: executing program 4 (id=5840): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xff, 0x3}, 0xff}, 0x18, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x805}, 0x20008000) 137.439501ms ago: executing program 1 (id=5841): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) 74.542568ms ago: executing program 2 (id=5842): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) lremovexattr(0x0, 0x0) 54.037192ms ago: executing program 4 (id=5843): socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$6lowpan_control(r2, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$FUSE_INIT(r2, 0x0, 0x0) 0s ago: executing program 1 (id=5844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xe) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22804 comm="syz.0.4789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4f24f9ce59 code=0x7ffc0000 [ 957.522425][ T29] audit: type=1326 audit(1780936648.056:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22804 comm="syz.0.4789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f24f9ce59 code=0x7ffc0000 [ 957.547438][ T3115] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 957.577540][ T29] audit: type=1326 audit(1780936648.056:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22804 comm="syz.0.4789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f24f9ce59 code=0x7ffc0000 [ 957.603478][ T29] audit: type=1326 audit(1780936648.056:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22804 comm="syz.0.4789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f24f9ce59 code=0x7ffc0000 [ 957.629583][ T29] audit: type=1326 audit(1780936648.056:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22804 comm="syz.0.4789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f24f9ce59 code=0x7ffc0000 [ 957.669324][ T29] audit: type=1326 audit(1780936648.056:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22804 comm="syz.0.4789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f24f9ce59 code=0x7ffc0000 [ 957.717485][T22813] input: syz0 as /devices/virtual/input/input49 [ 957.735117][ T29] audit: type=1326 audit(1780936648.056:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22804 comm="syz.0.4789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f24f9ce59 code=0x7ffc0000 [ 957.770351][ T3115] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 957.790811][ T3115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.826109][ T3115] usb 2-1: Product: syz [ 957.834463][ T3115] usb 2-1: Manufacturer: syz [ 957.847610][ T3115] usb 2-1: SerialNumber: syz [ 957.856882][T22811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4791'. [ 957.882378][ T3115] usb 2-1: config 0 descriptor?? [ 957.897787][ T3115] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 108 [ 958.226560][T22829] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 958.254640][T22831] syzkaller0: entered promiscuous mode [ 958.275908][T22831] syzkaller0: entered allmulticast mode [ 958.595308][T22835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.636175][T22835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.702758][T22833] FAULT_INJECTION: forcing a failure. [ 958.702758][T22833] name failslab, interval 1, probability 0, space 0, times 0 [ 958.715962][T22833] CPU: 0 UID: 0 PID: 22833 Comm: syz.0.4797 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.715997][T22833] Tainted: [L]=SOFTLOCKUP [ 958.716003][T22833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 958.716012][T22833] Call Trace: [ 958.716018][T22833] [ 958.716025][T22833] dump_stack_lvl+0xe8/0x150 [ 958.716051][T22833] should_fail_ex+0x412/0x560 [ 958.716074][T22833] should_failslab+0xa8/0x100 [ 958.716091][T22833] __kmalloc_noprof+0xe8/0x760 [ 958.716122][T22833] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 958.716147][T22833] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 958.716173][T22833] genl_family_rcv_msg_doit+0xd9/0x330 [ 958.716202][T22833] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 958.716228][T22833] ? apparmor_capable+0x126/0x170 [ 958.716249][T22833] ? bpf_lsm_capable+0x9/0x20 [ 958.716264][T22833] ? security_capable+0x7e/0x2c0 [ 958.716291][T22833] genl_rcv_msg+0x61c/0x7a0 [ 958.716315][T22833] ? __pfx_genl_rcv_msg+0x10/0x10 [ 958.716334][T22833] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 958.716352][T22833] ? __pfx_ref_tracker_free+0x10/0x10 [ 958.716370][T22833] ? __asan_memcpy+0x40/0x70 [ 958.716388][T22833] ? __skb_clone+0x63/0x7a0 [ 958.716412][T22833] netlink_rcv_skb+0x232/0x4b0 [ 958.716435][T22833] ? __pfx_genl_rcv_msg+0x10/0x10 [ 958.716460][T22833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 958.716496][T22833] ? down_read+0x270/0x2e0 [ 958.716513][T22833] ? genl_rcv+0xd/0x40 [ 958.716530][T22833] genl_rcv+0x28/0x40 [ 958.716546][T22833] netlink_unicast+0x75c/0x8e0 [ 958.716577][T22833] netlink_sendmsg+0x813/0xb40 [ 958.716602][T22833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.716621][T22833] ? aa_sock_msg_perm+0xf1/0x1b0 [ 958.716645][T22833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 958.716667][T22833] ____sys_sendmsg+0x972/0x9f0 [ 958.716684][T22833] ? __might_fault+0xaf/0x130 [ 958.716711][T22833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.716736][T22833] ? import_iovec+0x73/0xa0 [ 958.716760][T22833] ___sys_sendmsg+0x2a5/0x360 [ 958.716776][T22833] ? __lock_acquire+0x6b5/0x2cf0 [ 958.716797][T22833] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.716845][T22833] ? __fget_files+0x2a/0x420 [ 958.716864][T22833] ? __fget_files+0x3a0/0x420 [ 958.716891][T22833] __x64_sys_sendmsg+0x1bd/0x2a0 [ 958.716911][T22833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 958.716936][T22833] ? __pfx_ksys_write+0x10/0x10 [ 958.717016][T22833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.717035][T22833] do_syscall_64+0x174/0x580 [ 958.717050][T22833] ? trace_irq_disable+0x3b/0x140 [ 958.717071][T22833] ? clear_bhb_loop+0x40/0x90 [ 958.717088][T22833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.717102][T22833] RIP: 0033:0x7f4f24f9ce59 [ 958.717118][T22833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.717131][T22833] RSP: 002b:00007f4f25db8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.717147][T22833] RAX: ffffffffffffffda RBX: 00007f4f25215fa0 RCX: 00007f4f24f9ce59 [ 958.717157][T22833] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 958.717167][T22833] RBP: 00007f4f25db8090 R08: 0000000000000000 R09: 0000000000000000 [ 958.717176][T22833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.717186][T22833] R13: 00007f4f25216038 R14: 00007f4f25215fa0 R15: 00007f4f2533fa48 [ 958.717215][T22833] [ 959.404806][T22845] syzkaller0: entered promiscuous mode [ 959.410835][T22845] syzkaller0: entered allmulticast mode [ 959.947993][ T3115] (null): failure setting delay to 10us [ 959.953924][ T3115] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 959.974512][T22854] FAULT_INJECTION: forcing a failure. [ 959.974512][T22854] name failslab, interval 1, probability 0, space 0, times 0 [ 960.008472][T22854] CPU: 1 UID: 0 PID: 22854 Comm: syz.2.4804 Tainted: G L syzkaller #0 PREEMPT(full) [ 960.008499][T22854] Tainted: [L]=SOFTLOCKUP [ 960.008505][T22854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 960.008514][T22854] Call Trace: [ 960.008520][T22854] [ 960.008528][T22854] dump_stack_lvl+0xe8/0x150 [ 960.008552][T22854] should_fail_ex+0x412/0x560 [ 960.008572][T22854] should_failslab+0xa8/0x100 [ 960.008586][T22854] ? skb_clone+0x212/0x3a0 [ 960.008603][T22854] kmem_cache_alloc_noprof+0x87/0x650 [ 960.008623][T22854] ? __netlink_lookup+0xc6/0x8b0 [ 960.008642][T22854] skb_clone+0x212/0x3a0 [ 960.008660][T22854] __netlink_deliver_tap+0x404/0x850 [ 960.008692][T22854] ? netlink_deliver_tap+0x2e/0x1b0 [ 960.008714][T22854] netlink_deliver_tap+0x19c/0x1b0 [ 960.008737][T22854] netlink_unicast+0x730/0x8e0 [ 960.008767][T22854] netlink_sendmsg+0x813/0xb40 [ 960.008791][T22854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 960.008810][T22854] ? aa_sock_msg_perm+0xf1/0x1b0 [ 960.008832][T22854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 960.008854][T22854] ____sys_sendmsg+0x972/0x9f0 [ 960.008870][T22854] ? __might_fault+0xaf/0x130 [ 960.008905][T22854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 960.008928][T22854] ? import_iovec+0x73/0xa0 [ 960.008948][T22854] ___sys_sendmsg+0x2a5/0x360 [ 960.008962][T22854] ? __lock_acquire+0x6b5/0x2cf0 [ 960.008982][T22854] ? __pfx____sys_sendmsg+0x10/0x10 [ 960.009026][T22854] ? __fget_files+0x2a/0x420 [ 960.009043][T22854] ? __fget_files+0x3a0/0x420 [ 960.009069][T22854] __x64_sys_sendmsg+0x1bd/0x2a0 [ 960.009088][T22854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 960.009112][T22854] ? __pfx_ksys_write+0x10/0x10 [ 960.009140][T22854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.009158][T22854] do_syscall_64+0x174/0x580 [ 960.009176][T22854] ? clear_bhb_loop+0x40/0x90 [ 960.009196][T22854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.009212][T22854] RIP: 0033:0x7fd42f39ce59 [ 960.009228][T22854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.009242][T22854] RSP: 002b:00007fd430211028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 960.009259][T22854] RAX: ffffffffffffffda RBX: 00007fd42f615fa0 RCX: 00007fd42f39ce59 [ 960.009271][T22854] RDX: 0000000000004880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 960.009282][T22854] RBP: 00007fd430211090 R08: 0000000000000000 R09: 0000000000000000 [ 960.009292][T22854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.009302][T22854] R13: 00007fd42f616038 R14: 00007fd42f615fa0 R15: 00007fd42f73fa48 [ 960.009328][T22854] [ 960.316076][ T5767] usb 2-1: USB disconnect, device number 108 [ 960.678919][T22864] FAULT_INJECTION: forcing a failure. [ 960.678919][T22864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.693006][T22864] CPU: 1 UID: 0 PID: 22864 Comm: syz.1.4809 Tainted: G L syzkaller #0 PREEMPT(full) [ 960.693034][T22864] Tainted: [L]=SOFTLOCKUP [ 960.693040][T22864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 960.693049][T22864] Call Trace: [ 960.693057][T22864] [ 960.693064][T22864] dump_stack_lvl+0xe8/0x150 [ 960.693088][T22864] should_fail_ex+0x412/0x560 [ 960.693112][T22864] _copy_to_user+0x31/0xb0 [ 960.693134][T22864] snd_pcm_oss_read2+0x341/0x420 [ 960.693155][T22864] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 960.693175][T22864] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 960.693197][T22864] ? __pfx_snd_pcm_post_prepare+0x10/0x10 [ 960.693217][T22864] ? snd_pcm_action_nonatomic+0x25c/0x2b0 [ 960.693240][T22864] snd_pcm_oss_read+0x628/0x8e0 [ 960.693270][T22864] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 960.693290][T22864] vfs_read+0x20c/0xa70 [ 960.693319][T22864] ? __pfx_vfs_read+0x10/0x10 [ 960.693339][T22864] ? __fget_files+0x2a/0x420 [ 960.693360][T22864] ? __fget_files+0x2a/0x420 [ 960.693377][T22864] ? __fget_files+0x3a0/0x420 [ 960.693395][T22864] ? __fget_files+0x2a/0x420 [ 960.693418][T22864] ksys_read+0x150/0x270 [ 960.693439][T22864] ? __pfx_ksys_read+0x10/0x10 [ 960.693464][T22864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.693481][T22864] do_syscall_64+0x174/0x580 [ 960.693494][T22864] ? trace_irq_disable+0x3b/0x140 [ 960.693515][T22864] ? clear_bhb_loop+0x40/0x90 [ 960.693533][T22864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.693548][T22864] RIP: 0033:0x7fc44f19ce59 [ 960.693564][T22864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.693577][T22864] RSP: 002b:00007fc450140028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 960.693595][T22864] RAX: ffffffffffffffda RBX: 00007fc44f415fa0 RCX: 00007fc44f19ce59 [ 960.693605][T22864] RDX: 0000000000002020 RSI: 00002000000063c0 RDI: 0000000000000003 [ 960.693614][T22864] RBP: 00007fc450140090 R08: 0000000000000000 R09: 0000000000000000 [ 960.693623][T22864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 960.693632][T22864] R13: 00007fc44f416038 R14: 00007fc44f415fa0 R15: 00007fc44f53fa48 [ 960.693659][T22864] [ 960.985898][T22867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.017776][T22867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.054711][T22875] FAULT_INJECTION: forcing a failure. [ 961.054711][T22875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.069929][T22867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.099066][T22867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.123230][T22875] CPU: 0 UID: 0 PID: 22875 Comm: syz.1.4811 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.123259][T22875] Tainted: [L]=SOFTLOCKUP [ 961.123266][T22875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 961.123275][T22875] Call Trace: [ 961.123282][T22875] [ 961.123288][T22875] dump_stack_lvl+0xe8/0x150 [ 961.123305][T22875] should_fail_ex+0x412/0x560 [ 961.123319][T22875] _copy_from_iter+0x1d3/0x1670 [ 961.123339][T22875] ? __pfx__copy_from_iter+0x10/0x10 [ 961.123349][T22875] ? sock_alloc_send_pskb+0x896/0x990 [ 961.123363][T22875] ? __pfx__copy_from_iter+0x10/0x10 [ 961.123377][T22875] copy_page_from_iter+0x220/0x2d0 [ 961.123390][T22875] skb_copy_datagram_from_iter+0x306/0x710 [ 961.123407][T22875] tun_get_user+0xc5e/0x43e0 [ 961.123425][T22875] ? aa_file_perm+0x192/0x15e0 [ 961.123437][T22875] ? aa_file_perm+0x50e/0x15e0 [ 961.123446][T22875] ? __pfx_tun_get_user+0x10/0x10 [ 961.123456][T22875] ? __lock_acquire+0x6b5/0x2cf0 [ 961.123468][T22875] ? kstrtoull+0x12f/0x1d0 [ 961.123486][T22875] ? ref_tracker_alloc+0x35c/0x4c0 [ 961.123499][T22875] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 961.123511][T22875] ? tun_get+0x1c/0x2f0 [ 961.123520][T22875] ? tun_get+0x1c/0x2f0 [ 961.123531][T22875] ? tun_get+0x1c/0x2f0 [ 961.123540][T22875] ? tun_get+0x1c/0x2f0 [ 961.123550][T22875] tun_chr_write_iter+0x113/0x200 [ 961.123561][T22875] vfs_write+0x61d/0xb90 [ 961.123580][T22875] ? __pfx_vfs_write+0x10/0x10 [ 961.123599][T22875] ? __fget_files+0x2a/0x420 [ 961.123615][T22875] ksys_write+0x150/0x270 [ 961.123630][T22875] ? __pfx_ksys_write+0x10/0x10 [ 961.123647][T22875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.123657][T22875] do_syscall_64+0x174/0x580 [ 961.123668][T22875] ? trace_irq_disable+0x3b/0x140 [ 961.123683][T22875] ? clear_bhb_loop+0x40/0x90 [ 961.123695][T22875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.123704][T22875] RIP: 0033:0x7fc44f19ce59 [ 961.123714][T22875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.123722][T22875] RSP: 002b:00007fc450140028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 961.123733][T22875] RAX: ffffffffffffffda RBX: 00007fc44f415fa0 RCX: 00007fc44f19ce59 [ 961.123740][T22875] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 961.123746][T22875] RBP: 00007fc450140090 R08: 0000000000000000 R09: 0000000000000000 [ 961.123752][T22875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 961.123757][T22875] R13: 00007fc44f416038 R14: 00007fc44f415fa0 R15: 00007fc44f53fa48 [ 961.123771][T22875] [ 961.413988][T22877] syzkaller0: entered promiscuous mode [ 961.419563][T22877] syzkaller0: entered allmulticast mode [ 961.494650][T22881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.542687][T22881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.890255][T22893] netlink: 'syz.3.4816': attribute type 4 has an invalid length. [ 962.400346][T22901] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 962.557206][ T5686] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 962.707206][ T5686] usb 2-1: Using ep0 maxpacket: 16 [ 962.721948][ T5686] usb 2-1: unable to get BOS descriptor or descriptor too short [ 962.748321][ T5686] usb 2-1: config 1 interface 0 has no altsetting 0 [ 962.772099][ T5686] usb 2-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 962.789712][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.825921][ T5686] usb 2-1: Product: syz [ 962.855678][ T5686] usb 2-1: Manufacturer: syz [ 962.872420][ T5686] usb 2-1: SerialNumber: syz [ 963.027706][T22907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4822'. [ 963.068972][T22907] binder: 22906:22907 ioctl c0306201 0 returned -14 [ 963.118831][ T5686] pwc: Sotec Afina Eye USB webcam detected. [ 963.136536][T22907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.150774][ T5686] pwc: Failed to set LED on/off time (-71) [ 963.170073][T22907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.192894][ T5686] pwc: send_video_command error -71 [ 963.204203][ T5686] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 963.228817][ T5686] Philips webcam 2-1:1.0: probe with driver Philips webcam failed with error -71 [ 963.267055][ T5686] usb 2-1: USB disconnect, device number 109 [ 963.349774][T22910] syzkaller0: entered promiscuous mode [ 963.355570][T22910] syzkaller0: entered allmulticast mode [ 963.418324][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 963.418340][ T29] audit: type=1326 audit(1780936654.116:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22912 comm="syz.3.4824" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f8919ce59 code=0x0 [ 963.633988][T22919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.643343][T22919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.865818][T22925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.879387][T22925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.007960][ T24] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 964.018604][T22927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.027654][T22927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.044665][T22927] xt_connbytes: Forcing CT accounting to be enabled [ 964.053672][T22927] netlink: 'syz.4.4830': attribute type 10 has an invalid length. [ 964.061828][T22927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4830'. [ 964.169145][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.183879][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 964.197895][ T24] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 964.207149][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.215184][ T24] usb 2-1: Product: syz [ 964.219798][ T24] usb 2-1: Manufacturer: syz [ 964.224801][ T24] usb 2-1: SerialNumber: syz [ 964.745698][T22949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4838'. [ 964.790825][T22949] binder: 22948:22949 ioctl c0306201 0 returned -14 [ 964.814890][T22949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.831948][T22949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.851916][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 964.921453][ T24] usb 2-1: USB disconnect, device number 110 [ 964.965618][T22955] xt_hashlimit: size too large, truncated to 1048576 [ 965.221953][T22960] all: renamed from bridge_slave_1 (while UP) [ 965.709184][T22973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.723481][T22973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.893682][T22982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.904601][T22982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.259177][ T5686] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 966.270753][T22993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.288309][T22993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.329624][T22995] FAULT_INJECTION: forcing a failure. [ 966.329624][T22995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.347280][T22995] CPU: 1 UID: 0 PID: 22995 Comm: syz.3.4853 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.347313][T22995] Tainted: [L]=SOFTLOCKUP [ 966.347319][T22995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 966.347329][T22995] Call Trace: [ 966.347336][T22995] [ 966.347344][T22995] dump_stack_lvl+0xe8/0x150 [ 966.347368][T22995] should_fail_ex+0x412/0x560 [ 966.347388][T22995] strncpy_from_user+0x36/0x2b0 [ 966.347407][T22995] do_getname+0x77/0x250 [ 966.347427][T22995] path_removexattrat+0x1ad/0x750 [ 966.347445][T22995] ? __pfx_path_removexattrat+0x10/0x10 [ 966.347459][T22995] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 966.347478][T22995] ? __pfx_vfs_write+0x10/0x10 [ 966.347524][T22995] ? __pfx_ksys_write+0x10/0x10 [ 966.347550][T22995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.347568][T22995] __x64_sys_removexattr+0x62/0x70 [ 966.347599][T22995] do_syscall_64+0x174/0x580 [ 966.347615][T22995] ? trace_irq_disable+0x3b/0x140 [ 966.347636][T22995] ? clear_bhb_loop+0x40/0x90 [ 966.347656][T22995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.347673][T22995] RIP: 0033:0x7f8f8919ce59 [ 966.347689][T22995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.347704][T22995] RSP: 002b:00007f8f8a12a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 966.347722][T22995] RAX: ffffffffffffffda RBX: 00007f8f89415fa0 RCX: 00007f8f8919ce59 [ 966.347734][T22995] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000200 [ 966.347745][T22995] RBP: 00007f8f8a12a090 R08: 0000000000000000 R09: 0000000000000000 [ 966.347756][T22995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.347766][T22995] R13: 00007f8f89416038 R14: 00007f8f89415fa0 R15: 00007f8f8953fa48 [ 966.347792][T22995] [ 966.571524][T22997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4854'. [ 966.605613][T22997] binder: 22996:22997 ioctl c0306201 0 returned -14 [ 966.642498][T22997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.654302][ T5686] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 966.670030][ T5686] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 966.694282][T22997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.722491][ T5686] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 966.744157][ T5686] usb 2-1: config 0 interface 0 has no altsetting 0 [ 966.776915][ T5686] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 966.817521][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.827065][ T5686] usb 2-1: Product: syz [ 966.841591][ T5686] usb 2-1: Manufacturer: syz [ 966.867205][ T5686] usb 2-1: SerialNumber: syz [ 966.876395][ T5686] usb 2-1: config 0 descriptor?? [ 966.892923][T22986] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 967.122299][T22986] FAULT_INJECTION: forcing a failure. [ 967.122299][T22986] name failslab, interval 1, probability 0, space 0, times 0 [ 967.164236][T22986] CPU: 0 UID: 0 PID: 22986 Comm: syz.1.4850 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.164258][T22986] Tainted: [L]=SOFTLOCKUP [ 967.164262][T22986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 967.164268][T22986] Call Trace: [ 967.164273][T22986] [ 967.164278][T22986] dump_stack_lvl+0xe8/0x150 [ 967.164295][T22986] should_fail_ex+0x412/0x560 [ 967.164310][T22986] should_failslab+0xa8/0x100 [ 967.164320][T22986] ? skb_clone+0x212/0x3a0 [ 967.164331][T22986] kmem_cache_alloc_noprof+0x87/0x650 [ 967.164346][T22986] ? __netlink_lookup+0xc6/0x8b0 [ 967.164358][T22986] skb_clone+0x212/0x3a0 [ 967.164370][T22986] __netlink_deliver_tap+0x404/0x850 [ 967.164391][T22986] ? netlink_deliver_tap+0x2e/0x1b0 [ 967.164411][T22986] netlink_deliver_tap+0x19c/0x1b0 [ 967.164433][T22986] netlink_unicast+0x730/0x8e0 [ 967.164462][T22986] netlink_sendmsg+0x813/0xb40 [ 967.164484][T22986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.164502][T22986] ? aa_sock_msg_perm+0xf1/0x1b0 [ 967.164527][T22986] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 967.164547][T22986] ____sys_sendmsg+0x972/0x9f0 [ 967.164557][T22986] ? __might_fault+0xaf/0x130 [ 967.164573][T22986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.164587][T22986] ? import_iovec+0x73/0xa0 [ 967.164602][T22986] ___sys_sendmsg+0x2a5/0x360 [ 967.164611][T22986] ? __lock_acquire+0x6b5/0x2cf0 [ 967.164624][T22986] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.164651][T22986] ? __fget_files+0x2a/0x420 [ 967.164662][T22986] ? __fget_files+0x3a0/0x420 [ 967.164679][T22986] __x64_sys_sendmsg+0x1bd/0x2a0 [ 967.164690][T22986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 967.164704][T22986] ? __pfx_ksys_write+0x10/0x10 [ 967.164723][T22986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.164733][T22986] do_syscall_64+0x174/0x580 [ 967.164743][T22986] ? trace_irq_disable+0x3b/0x140 [ 967.164758][T22986] ? clear_bhb_loop+0x40/0x90 [ 967.164770][T22986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.164780][T22986] RIP: 0033:0x7fc44f19ce59 [ 967.164790][T22986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.164799][T22986] RSP: 002b:00007fc45011f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.164811][T22986] RAX: ffffffffffffffda RBX: 00007fc44f416090 RCX: 00007fc44f19ce59 [ 967.164818][T22986] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 967.164824][T22986] RBP: 00007fc45011f090 R08: 0000000000000000 R09: 0000000000000000 [ 967.164830][T22986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.164836][T22986] R13: 00007fc44f416128 R14: 00007fc44f416090 R15: 00007fc44f53fa48 [ 967.164851][T22986] [ 967.753913][T23010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.771049][T23010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.162848][T23026] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 969.354550][T23030] FAULT_INJECTION: forcing a failure. [ 969.354550][T23030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.371290][T23030] CPU: 1 UID: 0 PID: 23030 Comm: syz.4.4865 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.371318][T23030] Tainted: [L]=SOFTLOCKUP [ 969.371325][T23030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 969.371336][T23030] Call Trace: [ 969.371344][T23030] [ 969.371351][T23030] dump_stack_lvl+0xe8/0x150 [ 969.371376][T23030] should_fail_ex+0x412/0x560 [ 969.371399][T23030] _copy_from_user+0x2d/0xb0 [ 969.371420][T23030] generic_map_update_batch+0x69a/0x990 [ 969.371450][T23030] ? __pfx_generic_map_update_batch+0x10/0x10 [ 969.371469][T23030] ? __fget_files+0x2a/0x420 [ 969.371494][T23030] ? __pfx_generic_map_update_batch+0x10/0x10 [ 969.371513][T23030] bpf_map_do_batch+0x39b/0x630 [ 969.371534][T23030] __sys_bpf+0x7c1/0x950 [ 969.371559][T23030] ? __pfx___sys_bpf+0x10/0x10 [ 969.371595][T23030] ? ksys_write+0x242/0x270 [ 969.371620][T23030] ? __pfx_ksys_write+0x10/0x10 [ 969.371645][T23030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.371663][T23030] __x64_sys_bpf+0x7c/0x90 [ 969.371685][T23030] do_syscall_64+0x174/0x580 [ 969.371701][T23030] ? trace_irq_disable+0x3b/0x140 [ 969.371723][T23030] ? clear_bhb_loop+0x40/0x90 [ 969.371742][T23030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.371758][T23030] RIP: 0033:0x7f5c4079ce59 [ 969.371782][T23030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.371796][T23030] RSP: 002b:00007f5c41678028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 969.371813][T23030] RAX: ffffffffffffffda RBX: 00007f5c40a15fa0 RCX: 00007f5c4079ce59 [ 969.371825][T23030] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 969.371835][T23030] RBP: 00007f5c41678090 R08: 0000000000000000 R09: 0000000000000000 [ 969.371846][T23030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 969.371856][T23030] R13: 00007f5c40a16038 R14: 00007f5c40a15fa0 R15: 00007f5c40b3fa48 [ 969.371882][T23030] [ 969.417945][ T5686] usb 2-1: USB disconnect, device number 111 [ 969.685321][T23035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4867'. [ 969.959672][T23044] usb usb8: usbfs: process 23044 (syz.2.4870) did not claim interface 0 before use [ 970.150645][ T24] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 970.188465][ T24] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 970.331781][T23058] netlink: 'syz.0.4874': attribute type 3 has an invalid length. [ 970.369822][T23053] fido_id[23053]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 970.381165][T23058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4874'. [ 970.518512][T23067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.539570][T23067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.622187][T23070] xt_connbytes: Forcing CT accounting to be enabled [ 970.639106][T23070] set match dimension is over the limit! [ 971.295706][T23082] tipc: Started in network mode [ 971.323955][T23082] tipc: Node identity ac14140f, cluster identity 4711 [ 971.352450][T23082] tipc: New replicast peer: 255.255.255.255 [ 971.403202][T23082] tipc: Enabled bearer , priority 10 [ 971.744506][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4884'. [ 971.770109][T23090] binder: 23089:23090 ioctl c0306201 0 returned -14 [ 972.047635][ T5686] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 972.080171][T23099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.101411][T23099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.169102][T23104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.189497][T23105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.192878][T23104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.207771][T23105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.225193][ T5686] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 972.241301][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.258917][ T5686] usb 2-1: Product: syz [ 972.274455][ T5686] usb 2-1: Manufacturer: syz [ 972.284825][ T5686] usb 2-1: SerialNumber: syz [ 972.301637][ T5686] usb 2-1: config 0 descriptor?? [ 972.315613][ T5686] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 972.497585][T16015] tipc: Node number set to 2886997007 [ 972.513959][ T5686] gspca_sunplus: reg_r err -71 [ 972.526426][ T5686] usb 2-1: USB disconnect, device number 112 [ 972.565095][T23114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4892'. [ 972.575118][T23114] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.764986][T23122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.774764][T23122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.158011][T23132] random: crng reseeded on system resumption [ 973.182359][T23132] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 973.188910][T23132] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 973.199722][T23132] vhci_hcd vhci_hcd.0: Device attached [ 973.377506][ T5686] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 973.387258][ T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 973.437726][ T5686] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 973.537361][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 973.545766][ T24] usb 2-1: config 0 has no interfaces? [ 973.558896][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 973.569165][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.577434][ T24] usb 2-1: Product: syz [ 973.581772][ T24] usb 2-1: Manufacturer: syz [ 973.586387][ T24] usb 2-1: SerialNumber: syz [ 973.595681][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 973.602892][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 973.726391][T23134] vhci_hcd: connection reset by peer [ 973.733358][ T5834] vhci_hcd vhci_hcd.0: stop threads [ 973.742648][ T5834] vhci_hcd vhci_hcd.0: release socket [ 973.751478][ T5834] vhci_hcd vhci_hcd.0: disconnect device [ 973.836107][ T24] r8152-cfgselector 2-1: USB disconnect, device number 113 [ 973.846617][T23143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.862744][T23143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.882954][T23143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4904'. [ 974.482394][T23148] syzkaller0: entered promiscuous mode [ 974.488250][T23148] syzkaller0: entered allmulticast mode [ 974.506193][T23148] tipc: Enabled bearer , priority 0 [ 974.516126][T23147] tipc: Resetting bearer [ 974.545776][T23147] tipc: Disabling bearer [ 974.546391][T23154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.562492][T23154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.637331][T23157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4910'. [ 974.648152][T23157] binder: 23156:23157 ioctl c0306201 0 returned -14 [ 974.659423][T23157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.671055][T23157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.405496][T23169] input: syz0 as /devices/virtual/input/input50 [ 975.553519][T23178] nvme_fabrics: unknown parameter or missing value ']z' in ctrl creation request [ 975.592337][ T29] audit: type=1804 audit(1780936666.286:6854): pid=23180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4917" name="/newroot/366/cgroup.controllers" dev="tmpfs" ino=1933 res=1 errno=0 [ 975.592505][T23178] KVM: debugfs: duplicate directory 23178-15 [ 975.618276][T23180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.632371][T23180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.645201][ T29] audit: type=1800 audit(1780936666.316:6855): pid=23180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4917" name="cgroup.controllers" dev="tmpfs" ino=1933 res=0 errno=0 [ 975.884030][T23180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.896174][T23180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.988885][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4923'. [ 976.521540][T23209] tap0: tun_chr_ioctl cmd 1074025680 [ 976.573392][T16015] IPVS: starting estimator thread 0... [ 976.689815][T23213] IPVS: using max 39 ests per chain, 93600 per kthread [ 976.738563][T12308] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 976.908630][T12308] usb 2-1: Using ep0 maxpacket: 32 [ 976.929973][T12308] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 976.946957][T12308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 976.959653][T12308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 976.969958][T12308] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 976.982195][T12308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.006960][T12308] usb 2-1: config 0 descriptor?? [ 977.023491][T12308] hub 2-1:0.0: USB hub found [ 977.226948][T12308] hub 2-1:0.0: 1 port detected [ 977.434413][T23211] binder: 23210:23211 ioctl c0306201 2000000003c0 returned -14 [ 977.659211][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4935'. [ 978.271162][T12308] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 978.290270][T12308] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 978.324158][T12308] usbhid 2-1:0.0: can't add hid device: -32 [ 978.343436][T12308] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 978.534959][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036057000: rx timeout, send abort [ 978.546634][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888036057000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 978.577302][ T5686] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 978.647994][T23255] syzkaller0: entered promiscuous mode [ 978.663989][T23255] syzkaller0: entered allmulticast mode [ 978.690569][T23255] tipc: Enabled bearer , priority 0 [ 978.722485][T23254] tipc: Resetting bearer [ 978.802421][T23254] tipc: Disabling bearer [ 979.022261][ T29] audit: type=1326 audit(1780936669.716:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23260 comm="syz.4.4945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4079ce59 code=0x7ffc0000 [ 979.061722][T23263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.124575][ T29] audit: type=1326 audit(1780936669.756:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23260 comm="syz.4.4945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4079ce59 code=0x7ffc0000 [ 979.197657][T23267] netlink: 'syz.3.4947': attribute type 10 has an invalid length. [ 979.202532][ T29] audit: type=1326 audit(1780936669.756:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23260 comm="syz.4.4945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c4075d68e code=0x7ffc0000 [ 979.300381][ T29] audit: type=1326 audit(1780936669.756:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23260 comm="syz.4.4945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4079ce59 code=0x7ffc0000 [ 979.343507][T23273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.367651][ T29] audit: type=1326 audit(1780936669.756:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23260 comm="syz.4.4945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4079ce59 code=0x7ffc0000 [ 979.369293][T23273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.469001][T23273] loop5: detected capacity change from 0 to 7 [ 979.483938][ T29] audit: type=1326 audit(1780936669.756:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23260 comm="syz.4.4945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5c4079ce59 code=0x7ffc0000 [ 979.490064][T23273] Dev loop5: unable to read RDB block 7 [ 979.523352][T23273] loop5: AHDI p1 p3 p4 [ 979.527772][T23273] loop5: partition table partially beyond EOD, truncated [ 979.535525][T23273] loop5: p1 start 1818582900 is beyond EOD, truncated [ 979.543213][T23273] loop5: p3 start 719360596 is beyond EOD, truncated [ 979.599310][ T29] audit: type=1326 audit(1780936669.756:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23260 comm="syz.4.4945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4079ce59 code=0x7ffc0000 [ 979.657737][ T5686] usb 2-1: USB disconnect, device number 114 [ 979.699120][T23279] IPv6: addrconf: prefix option has invalid lifetime [ 979.721165][ T29] audit: type=1326 audit(1780936669.756:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23260 comm="syz.4.4945" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4079ce59 code=0x7ffc0000 [ 979.755501][T23263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.007381][ T3115] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 980.017992][T23291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.029158][T23291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.177481][ T3115] usb 2-1: Using ep0 maxpacket: 16 [ 980.192355][ T3115] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 980.218952][ T3115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.227034][ T3115] usb 2-1: Product: syz [ 980.237200][ T3115] usb 2-1: Manufacturer: syz [ 980.248438][ T3115] usb 2-1: SerialNumber: syz [ 980.263123][ T3115] usb 2-1: config 0 descriptor?? [ 980.391651][T23301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.402675][T23301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.416153][T23301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.438136][T23301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.797522][ T3115] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 981.341622][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805899d400: rx timeout, send abort [ 981.351190][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805899d400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 982.587485][T23301] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 982.597226][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 982.603301][T23301] Bluetooth: hci3: Opcode 0x0406 failed: -110 [ 983.390479][T23301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 983.396610][T23301] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 983.407418][T23301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 983.420783][T23308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.449909][ T3115] usb 2-1: USB disconnect, device number 115 [ 983.465827][T23308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.987301][ T5686] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 984.080646][T23346] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 984.127551][ T5686] usb 2-1: device descriptor read/64, error -71 [ 984.135041][T23348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.151989][T23348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.171627][T23348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.183121][T23348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.387192][ T5686] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 984.527309][ T5686] usb 2-1: device descriptor read/64, error -71 [ 984.647575][ T5686] usb usb2-port1: attempt power cycle [ 984.667164][ T5643] Bluetooth: hci2: command 0x0c1a tx timeout [ 984.997413][ T5686] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 985.019100][ T5686] usb 2-1: device descriptor read/8, error -71 [ 985.257201][ T5686] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 985.289281][ T5686] usb 2-1: device descriptor read/8, error -71 [ 985.397833][ T5686] usb usb2-port1: unable to enumerate USB device [ 985.468572][ T5643] Bluetooth: hci0: command 0x0c1a tx timeout [ 985.468598][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 986.347405][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 986.347542][T23348] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 986.845779][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 986.845797][ T29] audit: type=1326 audit(1780936677.536:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.4985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 986.877024][ T29] audit: type=1326 audit(1780936677.536:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.4985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 986.902117][ T29] audit: type=1326 audit(1780936677.536:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.4985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 986.926564][ T29] audit: type=1326 audit(1780936677.536:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.4985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 986.951198][ T29] audit: type=1326 audit(1780936677.536:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.4985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 986.977564][ T29] audit: type=1326 audit(1780936677.536:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.4985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 987.002512][ T29] audit: type=1326 audit(1780936677.536:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.4985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 987.027307][ T29] audit: type=1326 audit(1780936677.536:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.4985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 987.051647][ T29] audit: type=1326 audit(1780936677.536:6919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.4985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 987.076332][ T29] audit: type=1326 audit(1780936677.536:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23371 comm="syz.1.4985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 987.103738][T23348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 987.110035][T23348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 987.116139][T23348] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 987.123698][T23348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 987.131033][T23361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.140096][T23361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.179982][T23361] loop5: detected capacity change from 0 to 7 [ 987.198044][T23361] Dev loop5: unable to read RDB block 7 [ 987.209157][T23361] loop5: unable to read partition table [ 987.215122][T23361] loop5: partition table beyond EOD, truncated [ 987.224976][T23361] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 987.339773][T23379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4987'. [ 987.363971][T23379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'. [ 987.748790][T23392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4993'. [ 987.750003][T23376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.792055][T23376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.830784][T23394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4993'. [ 988.167308][ T3115] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 988.317327][ T3115] usb 2-1: device descriptor read/64, error -71 [ 988.361009][T23411] random: crng reseeded on system resumption [ 988.418034][T23411] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 988.424608][T23411] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 988.433146][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 988.450089][T23411] vhci_hcd vhci_hcd.0: Device attached [ 988.483588][T23417] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5004'. [ 988.533967][T23421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.544270][T23421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.567276][ T3115] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 988.632950][T23424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.644968][T23424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.647223][T12308] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 988.717390][ T3115] usb 2-1: device descriptor read/64, error -71 [ 988.737430][T12308] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 988.753006][T23430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.762471][T23430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.772971][T23430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.784004][T23430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.839584][ T3115] usb usb2-port1: attempt power cycle [ 988.978076][T23414] vhci_hcd: connection reset by peer [ 988.987773][ T5828] vhci_hcd vhci_hcd.2: stop threads [ 988.997771][ T5828] vhci_hcd vhci_hcd.2: release socket [ 989.005295][ T5828] vhci_hcd vhci_hcd.2: disconnect device [ 989.147233][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 989.147518][ T5643] Bluetooth: hci4: command 0x0c1a tx timeout [ 989.173197][T23436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.178902][ T3115] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 989.187735][T23436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.218267][T23438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.228993][ T3115] usb 2-1: device descriptor read/8, error -71 [ 989.229346][T23438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.288629][T23434] binder: 23433:23434 ioctl c0306201 200000000180 returned -14 [ 989.487248][ T3115] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 989.527781][ T3115] usb 2-1: device descriptor read/8, error -71 [ 989.637755][ T3115] usb usb2-port1: unable to enumerate USB device [ 989.670900][T23461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 989.681742][T23461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.692160][T23461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.923250][ T3115] IPVS: starting estimator thread 0... [ 989.930944][T23468] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 990.037220][T23469] IPVS: using max 35 ests per chain, 84000 per kthread [ 990.466342][T23483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.512698][T23483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.578904][T23484] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 990.596284][T23484] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 990.619368][T23484] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 990.649233][T23484] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 990.683436][T23487] syzkaller0: entered promiscuous mode [ 990.713512][T23487] syzkaller0: entered allmulticast mode [ 991.519247][T23513] netlink: 'syz.0.5032': attribute type 4 has an invalid length. [ 991.523985][T23513] netlink: 'syz.0.5032': attribute type 4 has an invalid length. [ 991.525550][T23506] binder: BINDER_SET_CONTEXT_MGR already set [ 991.525560][T23506] binder: 23495:23506 ioctl 4018620d 200000004a80 returned -16 [ 992.258420][T23521] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 992.264969][T23521] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 992.294896][T23521] vhci_hcd vhci_hcd.0: Device attached [ 992.331284][T23525] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 992.337862][T23525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 992.361389][T23521] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5) [ 992.367990][T23521] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 992.377005][T23525] vhci_hcd vhci_hcd.0: Device attached [ 992.389939][T23521] vhci_hcd vhci_hcd.0: Device attached [ 992.465150][T23521] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5034'. [ 992.476562][T23521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5034'. [ 992.490874][T23521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5034'. [ 992.527207][ T3115] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 992.597625][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 992.634843][T23521] input: syz1 as /devices/virtual/input/input51 [ 992.667406][ T5643] Bluetooth: hci0: command 0x0c1a tx timeout [ 992.667858][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 992.673539][ T5643] Bluetooth: hci2: command 0x0c1a tx timeout [ 992.780007][T23521] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(20) [ 992.786644][T23521] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 992.820532][T23521] vhci_hcd vhci_hcd.0: Device attached [ 992.909615][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.917208][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.087894][T23534] vhci_hcd: connection closed [ 993.088147][ T5839] vhci_hcd vhci_hcd.3: stop threads [ 993.102401][ T5839] vhci_hcd vhci_hcd.3: release socket [ 993.108430][ T5839] vhci_hcd vhci_hcd.3: disconnect device [ 993.311944][T23544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5037'. [ 993.327460][T23544] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 993.339212][T23546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.361054][T23546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.626741][T23528] vhci_hcd: connection closed [ 993.628422][T23526] vhci_hcd: connection closed [ 993.634416][T23522] vhci_hcd: connection reset by peer [ 993.658314][ T5834] vhci_hcd vhci_hcd.3: stop threads [ 993.669707][ T5834] vhci_hcd vhci_hcd.3: release socket [ 993.676055][ T5834] vhci_hcd vhci_hcd.3: disconnect device [ 993.683484][ T5834] vhci_hcd vhci_hcd.3: stop threads [ 993.691344][ T5834] vhci_hcd vhci_hcd.3: release socket [ 993.699945][ T5834] vhci_hcd vhci_hcd.3: disconnect device [ 993.705997][ T5834] vhci_hcd vhci_hcd.3: stop threads [ 993.713662][ T5834] vhci_hcd vhci_hcd.3: release socket [ 993.720018][ T5834] vhci_hcd vhci_hcd.3: disconnect device [ 993.857295][T12308] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 994.216422][T23581] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 994.260446][T23585] netlink: 'syz.3.5054': attribute type 4 has an invalid length. [ 994.320128][T23587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.359503][T23587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.431325][T23592] geneve1: entered promiscuous mode [ 994.436827][T23592] macsec1: entered promiscuous mode [ 994.446927][T23592] macsec1: entered allmulticast mode [ 994.452554][T23592] geneve1: entered allmulticast mode [ 994.462676][T23592] geneve1: left allmulticast mode [ 994.476898][T23592] geneve1: left promiscuous mode [ 994.483326][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 994.483340][ T29] audit: type=1326 audit(1780936685.176:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23590 comm="syz.1.5056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 994.549549][ T29] audit: type=1326 audit(1780936685.176:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23590 comm="syz.1.5056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 994.576093][ T29] audit: type=1326 audit(1780936685.206:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23590 comm="syz.1.5056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc44f15d68e code=0x7ffc0000 [ 994.605849][ T29] audit: type=1326 audit(1780936685.206:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23590 comm="syz.1.5056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 994.639710][ T29] audit: type=1326 audit(1780936685.206:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23590 comm="syz.1.5056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 994.665705][ T29] audit: type=1326 audit(1780936685.216:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23590 comm="syz.1.5056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 994.694619][ T29] audit: type=1326 audit(1780936685.216:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23590 comm="syz.1.5056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 994.724622][T23601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.740830][T23601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.752426][ T29] audit: type=1326 audit(1780936685.216:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23590 comm="syz.1.5056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 994.807418][ T29] audit: type=1326 audit(1780936685.216:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23590 comm="syz.1.5056" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44f19ce59 code=0x7ffc0000 [ 994.928075][T23607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.940797][T23607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.955615][T23609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 994.966411][T23609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.977789][T23609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.987486][T23609] FAULT_INJECTION: forcing a failure. [ 994.987486][T23609] name failslab, interval 1, probability 0, space 0, times 0 [ 995.000208][T23609] CPU: 1 UID: 0 PID: 23609 Comm: syz.0.5060 Tainted: G L syzkaller #0 PREEMPT(full) [ 995.000232][T23609] Tainted: [L]=SOFTLOCKUP [ 995.000238][T23609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 995.000247][T23609] Call Trace: [ 995.000257][T23609] [ 995.000265][T23609] dump_stack_lvl+0xe8/0x150 [ 995.000288][T23609] should_fail_ex+0x412/0x560 [ 995.000311][T23609] should_failslab+0xa8/0x100 [ 995.000329][T23609] __kmalloc_cache_noprof+0x88/0x660 [ 995.000346][T23609] ? snd_seq_oss_timer_new+0x51/0x230 [ 995.000359][T23609] ? __raw_spin_lock_init+0x45/0x100 [ 995.000375][T23609] snd_seq_oss_timer_new+0x51/0x230 [ 995.000388][T23609] snd_seq_oss_open+0x8ef/0xfc0 [ 995.000404][T23609] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 995.000432][T23609] ? trace_contention_end+0x3d/0x140 [ 995.000445][T23609] ? __mutex_lock+0x319/0x1550 [ 995.000468][T23609] ? __pfx___mutex_lock+0x10/0x10 [ 995.000481][T23609] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 995.000492][T23609] ? __pfx_free_devinfo+0x10/0x10 [ 995.000504][T23609] ? do_raw_spin_unlock+0xf5/0x210 [ 995.000519][T23609] ? soundcore_open+0x2da/0x490 [ 995.000533][T23609] odev_open+0x67/0xa0 [ 995.000544][T23609] chrdev_open+0x4cd/0x5e0 [ 995.000556][T23609] ? __pfx_chrdev_open+0x10/0x10 [ 995.000566][T23609] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 995.000584][T23609] ? __pfx_chrdev_open+0x10/0x10 [ 995.000593][T23609] do_dentry_open+0x822/0x13a0 [ 995.000611][T23609] vfs_open+0x3b/0x340 [ 995.000620][T23609] ? path_openat+0x2df0/0x3860 [ 995.000635][T23609] path_openat+0x2e08/0x3860 [ 995.000657][T23609] ? __pfx_stack_trace_save+0x10/0x10 [ 995.000674][T23609] ? stack_depot_save_flags+0x33/0x810 [ 995.000689][T23609] ? __pfx_path_openat+0x10/0x10 [ 995.000702][T23609] ? __x64_sys_openat+0x138/0x170 [ 995.000716][T23609] ? __lock_acquire+0x6b5/0x2cf0 [ 995.000732][T23609] do_file_open+0x23e/0x4a0 [ 995.000748][T23609] ? __pfx_do_file_open+0x10/0x10 [ 995.000773][T23609] ? _raw_spin_unlock+0x28/0x50 [ 995.000786][T23609] ? alloc_fd+0x64b/0x6c0 [ 995.000803][T23609] do_sys_openat2+0x113/0x200 [ 995.000816][T23609] ? __pfx_do_sys_openat2+0x10/0x10 [ 995.000828][T23609] ? ksys_write+0x242/0x270 [ 995.000843][T23609] ? __pfx_ksys_write+0x10/0x10 [ 995.000858][T23609] __x64_sys_openat+0x138/0x170 [ 995.000871][T23609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.000882][T23609] do_syscall_64+0x174/0x580 [ 995.000892][T23609] ? trace_irq_disable+0x3b/0x140 [ 995.000906][T23609] ? clear_bhb_loop+0x40/0x90 [ 995.000918][T23609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.000927][T23609] RIP: 0033:0x7f4f24f9ce59 [ 995.000938][T23609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.000946][T23609] RSP: 002b:00007f4f25db8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 995.000963][T23609] RAX: ffffffffffffffda RBX: 00007f4f25215fa0 RCX: 00007f4f24f9ce59 [ 995.000970][T23609] RDX: 00000000000c2882 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 995.000977][T23609] RBP: 00007f4f25db8090 R08: 0000000000000000 R09: 0000000000000000 [ 995.000983][T23609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 995.000989][T23609] R13: 00007f4f25216038 R14: 00007f4f25215fa0 R15: 00007f4f2533fa48 [ 995.001004][T23609] [ 995.001009][T23609] ALSA: seq_oss: can't alloc timer [ 995.531234][T23621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5065'. [ 995.984003][T23646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.001567][T23646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.127447][T20765] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 996.277982][T20765] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 996.298127][T20765] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 996.310270][T20765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.318929][T20765] usb 2-1: Product: syz [ 996.323145][T20765] usb 2-1: Manufacturer: syz [ 996.328184][T20765] usb 2-1: SerialNumber: syz [ 996.559274][T23657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.590947][T23659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.591858][T23657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.610289][T23659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.628297][T23659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.649748][T23659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.979155][T23669] fuse: Bad value for 'group_id' [ 996.984399][T23669] fuse: Bad value for 'group_id' [ 997.043393][T23674] loop2: detected capacity change from 0 to 7 [ 997.051246][T23672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.056083][T23674] Dev loop2: unable to read RDB block 7 [ 997.069967][T23674] loop2: unable to read partition table [ 997.075675][T23672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.076798][T23674] loop2: partition table beyond EOD, truncated [ 997.097495][T23674] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 997.457268][T23691] netlink: 'syz.3.5086': attribute type 10 has an invalid length. [ 997.484449][T23691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.496778][T23691] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 997.683760][T23694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.698185][ T3115] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 997.705252][T23694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.805782][T23699] IPv6: addrconf: prefix option has invalid lifetime [ 998.389342][T23712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.419501][T23712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.819138][T23719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.841718][T20765] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 998.855343][T23719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.864039][T20765] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 998.887216][T20765] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 998.920440][T20765] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 998.969125][T20765] usb 2-1: USB disconnect, device number 124 [ 999.105453][T23721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 999.141526][T23721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.175079][T23721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.246468][T23721] SET target dimension over the limit! [ 999.262872][T23729] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 999.637410][T20765] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 999.653576][T23742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.663465][T23742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.790959][T20765] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 999.800173][T20765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.808252][T20765] usb 2-1: Product: syz [ 999.812499][T20765] usb 2-1: Manufacturer: syz [ 999.817190][T20765] usb 2-1: SerialNumber: syz [ 999.823899][T20765] usb 2-1: config 0 descriptor?? [ 999.924871][T23745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.934799][T23745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.987967][T23745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.996949][T23745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.271028][T23755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.285334][T23755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.439774][T20765] usb 2-1: Firmware version (0.0) predates our first public release. [ 1000.456518][T20765] usb 2-1: Please update to version 0.2 or newer [ 1000.648590][T20765] usb 2-1: Firmware: build  [ 1000.991185][T23771] batadv_slave_1: entered promiscuous mode [ 1001.200925][T20765] usb 2-1: USB disconnect, device number 125 [ 1001.250158][T23778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5115'. [ 1002.002040][T23790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.026971][T23790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.263828][T23771] syz.4.5113 (23771): drop_caches: 3 [ 1002.326446][T23771] batadv_slave_1: left promiscuous mode [ 1002.384536][T23792] xt_hashlimit: size too large, truncated to 1048576 [ 1002.446192][T23798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.472883][T23798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.489524][T23799] netlink: 'syz.0.5121': attribute type 11 has an invalid length. [ 1003.093279][T23811] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1003.105891][T23814] random: crng reseeded on system resumption [ 1003.137369][ T5686] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1003.147024][T23814] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1003.153589][T23814] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1003.167526][T23814] vhci_hcd vhci_hcd.0: Device attached [ 1003.328680][ T5686] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1003.353704][ T5686] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1003.367824][T16015] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1003.378533][ T5686] usb 2-1: can't read configurations, error -71 [ 1003.380938][T23820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.402270][T23820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.431736][T23820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.445963][T23820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.461041][T16015] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 1003.764991][T23815] vhci_hcd: connection reset by peer [ 1003.778188][ T5834] vhci_hcd vhci_hcd.2: stop threads [ 1003.797698][ T5834] vhci_hcd vhci_hcd.2: release socket [ 1003.827838][ T5834] vhci_hcd vhci_hcd.2: disconnect device [ 1003.941573][T23830] fuse: Unknown parameter '' [ 1004.188809][T23843] syzkaller0: entered promiscuous mode [ 1004.194552][T23843] syzkaller0: entered allmulticast mode [ 1004.211154][T23843] tipc: Enabled bearer , priority 0 [ 1004.242529][T23845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.251707][T23842] tipc: Resetting bearer [ 1004.254451][T23845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.315851][T23842] tipc: Disabling bearer [ 1004.427705][ T5686] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1004.442184][T23849] xt_hashlimit: size too large, truncated to 1048576 [ 1004.592713][ T5686] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1004.604288][ T5686] usb 2-1: config 34 has an invalid interface number: 33 but max is 1 [ 1004.615399][ T5686] usb 2-1: config 34 has an invalid interface number: 228 but max is 1 [ 1004.625053][ T5686] usb 2-1: config 34 has no interface number 0 [ 1004.631695][ T5686] usb 2-1: config 34 has no interface number 1 [ 1004.638717][ T5686] usb 2-1: config 34 interface 228 has no altsetting 0 [ 1004.649780][ T5686] usb 2-1: New USB device found, idVendor=1199, idProduct=9078, bcdDevice=82.c9 [ 1004.660806][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.670157][ T5686] usb 2-1: Product: syz [ 1004.674538][ T5686] usb 2-1: Manufacturer: syz [ 1004.679639][ T5686] usb 2-1: SerialNumber: syz [ 1004.938983][ T5686] usb 2-1: USB disconnect, device number 127 [ 1005.028677][T23863] FAULT_INJECTION: forcing a failure. [ 1005.028677][T23863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.071514][T23863] CPU: 0 UID: 0 PID: 23863 Comm: syz.2.5142 Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.071541][T23863] Tainted: [L]=SOFTLOCKUP [ 1005.071548][T23863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1005.071560][T23863] Call Trace: [ 1005.071567][T23863] [ 1005.071574][T23863] dump_stack_lvl+0xe8/0x150 [ 1005.071596][T23863] should_fail_ex+0x412/0x560 [ 1005.071619][T23863] _copy_from_user+0x2d/0xb0 [ 1005.071636][T23863] __sys_connect+0x156/0x450 [ 1005.071652][T23863] ? __pfx___sys_connect+0x10/0x10 [ 1005.071671][T23863] ? __pfx_ksys_write+0x10/0x10 [ 1005.071688][T23863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.071699][T23863] __x64_sys_connect+0x7a/0x90 [ 1005.071714][T23863] do_syscall_64+0x174/0x580 [ 1005.071724][T23863] ? trace_irq_disable+0x3b/0x140 [ 1005.071739][T23863] ? clear_bhb_loop+0x40/0x90 [ 1005.071751][T23863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.071760][T23863] RIP: 0033:0x7fd42f39ce59 [ 1005.071770][T23863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.071778][T23863] RSP: 002b:00007fd4301f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1005.071790][T23863] RAX: ffffffffffffffda RBX: 00007fd42f616090 RCX: 00007fd42f39ce59 [ 1005.071797][T23863] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000007 [ 1005.071803][T23863] RBP: 00007fd4301f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.071809][T23863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.071815][T23863] R13: 00007fd42f616128 R14: 00007fd42f616090 R15: 00007fd42f73fa48 [ 1005.071830][T23863] [ 1005.392310][T23867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.401088][T23867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.426944][ T29] audit: type=1326 audit(1780936696.116:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23869 comm="syz.3.5144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1005.498999][ T29] audit: type=1326 audit(1780936696.116:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23869 comm="syz.3.5144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1005.552050][ T29] audit: type=1326 audit(1780936696.116:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23869 comm="syz.3.5144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1005.578863][ T29] audit: type=1326 audit(1780936696.116:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23869 comm="syz.3.5144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1005.608627][ T29] audit: type=1326 audit(1780936696.116:7020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23869 comm="syz.3.5144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1005.634971][ T29] audit: type=1326 audit(1780936696.116:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23869 comm="syz.3.5144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1005.660689][ T29] audit: type=1326 audit(1780936696.116:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23869 comm="syz.3.5144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1005.685970][ T29] audit: type=1326 audit(1780936696.116:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23869 comm="syz.3.5144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1005.845941][ T29] audit: type=1326 audit(1780936696.116:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23869 comm="syz.3.5144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1005.960614][ T29] audit: type=1326 audit(1780936696.146:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23869 comm="syz.3.5144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1006.083421][T23893] syzkaller0: entered promiscuous mode [ 1006.096016][T23902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.102690][T23893] syzkaller0: entered allmulticast mode [ 1006.130679][T23902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.134684][T23893] tipc: Enabled bearer , priority 0 [ 1006.181760][T23891] tipc: Resetting bearer [ 1006.183484][T23907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.198572][T23904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.221705][T23904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.230084][T23907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.260324][T23891] tipc: Disabling bearer [ 1006.766346][T23914] fuse: Unknown parameter '' [ 1008.427410][T23904] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1008.427673][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 1008.577359][T16015] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1009.114589][T23904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1009.120763][T23904] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1009.126882][T23904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1009.134279][T23909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.155711][T23909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.163861][T23920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.188313][T23920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.275658][T23924] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1009.288253][T23925] xt_hashlimit: size too large, truncated to 1048576 [ 1009.367201][ T5714] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1009.446094][T23931] FAULT_INJECTION: forcing a failure. [ 1009.446094][T23931] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.501902][T23931] CPU: 0 UID: 0 PID: 23931 Comm: syz.3.5157 Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.501931][T23931] Tainted: [L]=SOFTLOCKUP [ 1009.501937][T23931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1009.501947][T23931] Call Trace: [ 1009.501954][T23931] [ 1009.501961][T23931] dump_stack_lvl+0xe8/0x150 [ 1009.501985][T23931] should_fail_ex+0x412/0x560 [ 1009.502005][T23931] ? __d_alloc+0x37/0x6f0 [ 1009.502027][T23931] should_failslab+0xa8/0x100 [ 1009.502046][T23931] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1009.502078][T23931] __d_alloc+0x37/0x6f0 [ 1009.502106][T23931] d_alloc+0x4b/0x190 [ 1009.502125][T23931] ? lookup_one_qstr_excl+0xc4/0x360 [ 1009.502149][T23931] lookup_one_qstr_excl+0xd8/0x360 [ 1009.502171][T23931] ? lookup_noperm_common+0x245/0x430 [ 1009.502194][T23931] start_dirop+0x5c/0x90 [ 1009.502215][T23931] simple_start_creating+0xcc/0x110 [ 1009.502237][T23931] ? __pfx_simple_start_creating+0x10/0x10 [ 1009.502257][T23931] ? do_raw_spin_unlock+0xf5/0x210 [ 1009.502280][T23931] ? mntput+0x65/0xc0 [ 1009.502302][T23931] debugfs_start_creating+0xdb/0x1a0 [ 1009.502322][T23931] __debugfs_create_file+0x6f/0x400 [ 1009.502341][T23931] debugfs_create_file_full+0x3f/0x60 [ 1009.502363][T23931] ref_tracker_dir_debugfs+0x197/0x360 [ 1009.502380][T23931] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1009.502426][T23931] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1009.502448][T23931] ? alloc_netdev_mqs+0xa8/0x1210 [ 1009.502470][T23931] ? __raw_spin_lock_init+0x45/0x100 [ 1009.502494][T23931] alloc_netdev_mqs+0x274/0x1210 [ 1009.502511][T23931] ? __pfx_l2tp_eth_dev_setup+0x10/0x10 [ 1009.502535][T23931] l2tp_eth_create+0x1c5/0xbe0 [ 1009.502551][T23931] ? __asan_memcpy+0x40/0x70 [ 1009.502575][T23931] ? __msecs_to_jiffies+0x3a/0x50 [ 1009.502594][T23931] ? __pfx_l2tp_eth_create+0x10/0x10 [ 1009.502621][T23931] l2tp_nl_cmd_session_create+0x766/0xc60 [ 1009.502638][T23931] ? rcu_is_watching+0x15/0xb0 [ 1009.502662][T23931] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 1009.502686][T23931] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1009.502706][T23931] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1009.502732][T23931] genl_family_rcv_msg_doit+0x22a/0x330 [ 1009.502759][T23931] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1009.502792][T23931] ? bpf_lsm_capable+0x9/0x20 [ 1009.502806][T23931] ? security_capable+0x7e/0x2c0 [ 1009.502833][T23931] genl_rcv_msg+0x61c/0x7a0 [ 1009.502854][T23931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1009.502871][T23931] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 1009.502888][T23931] ? __pfx_ref_tracker_free+0x10/0x10 [ 1009.502917][T23931] netlink_rcv_skb+0x232/0x4b0 [ 1009.502941][T23931] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1009.502961][T23931] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1009.502999][T23931] ? down_read+0x270/0x2e0 [ 1009.503016][T23931] ? genl_rcv+0xd/0x40 [ 1009.503035][T23931] genl_rcv+0x28/0x40 [ 1009.503052][T23931] netlink_unicast+0x75c/0x8e0 [ 1009.503085][T23931] netlink_sendmsg+0x813/0xb40 [ 1009.503110][T23931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.503130][T23931] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1009.503155][T23931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1009.503180][T23931] ____sys_sendmsg+0x972/0x9f0 [ 1009.503197][T23931] ? __might_fault+0xaf/0x130 [ 1009.503224][T23931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1009.503250][T23931] ? import_iovec+0x73/0xa0 [ 1009.503274][T23931] ___sys_sendmsg+0x2a5/0x360 [ 1009.503290][T23931] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.503312][T23931] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.503364][T23931] ? __fget_files+0x2a/0x420 [ 1009.503383][T23931] ? __fget_files+0x3a0/0x420 [ 1009.503420][T23931] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1009.503439][T23931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1009.503465][T23931] ? __pfx_ksys_write+0x10/0x10 [ 1009.503496][T23931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.503515][T23931] do_syscall_64+0x174/0x580 [ 1009.503531][T23931] ? trace_irq_disable+0x3b/0x140 [ 1009.503553][T23931] ? clear_bhb_loop+0x40/0x90 [ 1009.503574][T23931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.503590][T23931] RIP: 0033:0x7f8f8919ce59 [ 1009.503607][T23931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.503621][T23931] RSP: 002b:00007f8f8a0e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.503639][T23931] RAX: ffffffffffffffda RBX: 00007f8f89416180 RCX: 00007f8f8919ce59 [ 1009.503651][T23931] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 1009.503662][T23931] RBP: 00007f8f8a0e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.503672][T23931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.503682][T23931] R13: 00007f8f89416218 R14: 00007f8f89416180 R15: 00007f8f8953fa48 [ 1009.503712][T23931] [ 1010.280954][T23946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.289928][T23946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.508744][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 1010.657198][ T5714] usb 2-1: device descriptor read/64, error -71 [ 1010.898038][ T5714] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1010.942270][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1010.942286][ T29] audit: type=1326 audit(1780936701.636:7031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.5167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1010.974421][ T29] audit: type=1326 audit(1780936701.636:7032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.5167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1011.086458][ T5714] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1011.125227][ T5714] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1011.138859][ T29] audit: type=1326 audit(1780936701.666:7033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.5167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f8915d68e code=0x7ffc0000 [ 1011.171229][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 1011.177462][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 1011.185968][ T5714] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1011.198096][ T29] audit: type=1326 audit(1780936701.666:7034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.5167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1011.223018][ T29] audit: type=1326 audit(1780936701.666:7035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.5167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1011.248907][ T29] audit: type=1326 audit(1780936701.696:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.5167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1011.274828][ T29] audit: type=1326 audit(1780936701.696:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.5167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1011.299643][ T5714] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1011.310601][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.364330][ T29] audit: type=1326 audit(1780936701.696:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23956 comm="syz.3.5167" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1011.388943][ T5714] usb 2-1: Product: syz [ 1011.396376][ T5714] usb 2-1: Manufacturer: syz [ 1011.403277][ T5714] usb 2-1: SerialNumber: syz [ 1011.459444][ T5714] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1011.488742][ T5714] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 1011.503812][ T5714] usb 2-1: found format II with max.bitrate = 128, frame size=0 [ 1011.510693][T23966] FAULT_INJECTION: forcing a failure. [ 1011.510693][T23966] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.514038][ T5714] usb 2-1: 2:1: All rates were zero [ 1011.524703][T23966] CPU: 0 UID: 0 PID: 23966 Comm: syz.2.5171 Tainted: G L syzkaller #0 PREEMPT(full) [ 1011.524728][T23966] Tainted: [L]=SOFTLOCKUP [ 1011.524734][T23966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1011.524743][T23966] Call Trace: [ 1011.524750][T23966] [ 1011.524757][T23966] dump_stack_lvl+0xe8/0x150 [ 1011.524782][T23966] should_fail_ex+0x412/0x560 [ 1011.524813][T23966] should_failslab+0xa8/0x100 [ 1011.524831][T23966] __kmalloc_noprof+0xe8/0x760 [ 1011.524853][T23966] ? tomoyo_encode+0x28b/0x550 [ 1011.524873][T23966] tomoyo_encode+0x28b/0x550 [ 1011.524893][T23966] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1011.524910][T23966] ? tomoyo_domain+0xd7/0x130 [ 1011.524931][T23966] ? tomoyo_path_number_perm+0x219/0x630 [ 1011.524952][T23966] tomoyo_path_number_perm+0x246/0x630 [ 1011.524974][T23966] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1011.524993][T23966] ? __lock_acquire+0x6b5/0x2cf0 [ 1011.525043][T23966] ? __fget_files+0x2a/0x420 [ 1011.525064][T23966] ? __fget_files+0x2a/0x420 [ 1011.525081][T23966] ? __fget_files+0x3a0/0x420 [ 1011.525098][T23966] ? __fget_files+0x2a/0x420 [ 1011.525119][T23966] security_file_ioctl+0xc3/0x2a0 [ 1011.525140][T23966] __se_sys_ioctl+0x47/0x170 [ 1011.525162][T23966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.525180][T23966] do_syscall_64+0x174/0x580 [ 1011.525196][T23966] ? trace_irq_disable+0x3b/0x140 [ 1011.525217][T23966] ? clear_bhb_loop+0x40/0x90 [ 1011.525236][T23966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.525252][T23966] RIP: 0033:0x7fd42f39caeb [ 1011.525268][T23966] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1011.525281][T23966] RSP: 002b:00007fd430210f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1011.525299][T23966] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fd42f39caeb [ 1011.525310][T23966] RDX: 00007fd430210fc0 RSI: 000000004020ae46 RDI: 0000000000000003 [ 1011.525320][T23966] RBP: 00007fd42f452060 R08: 0000000000000000 R09: 0000000000000003 [ 1011.525329][T23966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000c00000 [ 1011.525339][T23966] R13: 0000000000000007 R14: 0000000000000002 R15: 000000000039e000 [ 1011.525365][T23966] [ 1011.525383][T23966] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1011.852507][ T5714] usb 2-1: USB disconnect, device number 3 [ 1011.903956][T16909] udevd[16909]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.061573][T23981] vivid-007: ================= START STATUS ================= [ 1012.079263][T23981] vivid-007: Enable Output Cropping: true [ 1012.112668][T23981] vivid-007: Enable Output Composing: true [ 1012.124599][T23981] vivid-007: Enable Output Scaler: true [ 1012.140418][T23981] vivid-007: Tx RGB Quantization Range: Automatic [ 1012.147443][T23981] vivid-007: Transmit Mode: HDMI [ 1012.153011][T23981] vivid-007: Hotplug Present: 0x00000000 [ 1012.159467][T23981] vivid-007: RxSense Present: 0x00000000 [ 1012.166554][T23985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1012.174703][T23981] vivid-007: EDID Present: 0x00000000 [ 1012.181368][T23981] vivid-007: ================== END STATUS ================== [ 1012.182541][T23985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.201927][T23985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.219484][T23985] FAULT_INJECTION: forcing a failure. [ 1012.219484][T23985] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.240170][T23985] CPU: 1 UID: 0 PID: 23985 Comm: syz.3.5177 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.240199][T23985] Tainted: [L]=SOFTLOCKUP [ 1012.240205][T23985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1012.240215][T23985] Call Trace: [ 1012.240228][T23985] [ 1012.240237][T23985] dump_stack_lvl+0xe8/0x150 [ 1012.240261][T23985] should_fail_ex+0x412/0x560 [ 1012.240285][T23985] should_failslab+0xa8/0x100 [ 1012.240304][T23985] __kmalloc_cache_noprof+0x88/0x660 [ 1012.240326][T23985] ? snd_seq_port_connect+0x6a/0x450 [ 1012.240349][T23985] snd_seq_port_connect+0x6a/0x450 [ 1012.240370][T23985] ? _raw_read_unlock+0x28/0x50 [ 1012.240390][T23985] ? snd_seq_port_use_ptr+0x115/0x140 [ 1012.240410][T23985] snd_seq_ioctl_subscribe_port+0x378/0x7c0 [ 1012.240434][T23985] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 1012.240467][T23985] snd_seq_oss_midi_open+0x4a2/0x8a0 [ 1012.240494][T23985] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 1012.240536][T23985] snd_seq_oss_synth_setup_midi+0x12d/0x530 [ 1012.240567][T23985] snd_seq_oss_open+0x984/0xfc0 [ 1012.240597][T23985] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1012.240650][T23985] ? trace_contention_end+0x3d/0x140 [ 1012.240673][T23985] ? __mutex_lock+0x319/0x1550 [ 1012.240708][T23985] ? __pfx___mutex_lock+0x10/0x10 [ 1012.240730][T23985] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1012.240749][T23985] ? __pfx_free_devinfo+0x10/0x10 [ 1012.240766][T23985] ? do_raw_spin_unlock+0xf5/0x210 [ 1012.240792][T23985] ? soundcore_open+0x2da/0x490 [ 1012.240814][T23985] odev_open+0x67/0xa0 [ 1012.240832][T23985] chrdev_open+0x4cd/0x5e0 [ 1012.240853][T23985] ? __pfx_chrdev_open+0x10/0x10 [ 1012.240871][T23985] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1012.240898][T23985] ? __pfx_chrdev_open+0x10/0x10 [ 1012.240914][T23985] do_dentry_open+0x822/0x13a0 [ 1012.240948][T23985] vfs_open+0x3b/0x340 [ 1012.240963][T23985] ? path_openat+0x2df0/0x3860 [ 1012.240988][T23985] path_openat+0x2e08/0x3860 [ 1012.241024][T23985] ? __pfx_stack_trace_save+0x10/0x10 [ 1012.241049][T23985] ? stack_depot_save_flags+0x33/0x810 [ 1012.241077][T23985] ? __pfx_path_openat+0x10/0x10 [ 1012.241096][T23985] ? __x64_sys_openat+0x138/0x170 [ 1012.241120][T23985] ? __lock_acquire+0x6b5/0x2cf0 [ 1012.241147][T23985] do_file_open+0x23e/0x4a0 [ 1012.241175][T23985] ? __pfx_do_file_open+0x10/0x10 [ 1012.241217][T23985] ? _raw_spin_unlock+0x28/0x50 [ 1012.241244][T23985] ? alloc_fd+0x64b/0x6c0 [ 1012.241274][T23985] do_sys_openat2+0x113/0x200 [ 1012.241296][T23985] ? __pfx_do_sys_openat2+0x10/0x10 [ 1012.241316][T23985] ? ksys_write+0x242/0x270 [ 1012.241341][T23985] ? __pfx_ksys_write+0x10/0x10 [ 1012.241366][T23985] __x64_sys_openat+0x138/0x170 [ 1012.241389][T23985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.241407][T23985] do_syscall_64+0x174/0x580 [ 1012.241423][T23985] ? trace_irq_disable+0x3b/0x140 [ 1012.241446][T23985] ? clear_bhb_loop+0x40/0x90 [ 1012.241466][T23985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.241483][T23985] RIP: 0033:0x7f8f8919ce59 [ 1012.241501][T23985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.241514][T23985] RSP: 002b:00007f8f8a12a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1012.241532][T23985] RAX: ffffffffffffffda RBX: 00007f8f89415fa0 RCX: 00007f8f8919ce59 [ 1012.241544][T23985] RDX: 00000000000c2882 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1012.241554][T23985] RBP: 00007f8f8a12a090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.241565][T23985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1012.241575][T23985] R13: 00007f8f89416038 R14: 00007f8f89415fa0 R15: 00007f8f8953fa48 [ 1012.241603][T23985] [ 1012.697670][T23989] xt_hashlimit: size too large, truncated to 1048576 [ 1012.968340][T24004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.979541][T24004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.574213][T24012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.574682][T24012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.673675][T24012] binder: 24010:24012 ioctl c0306201 2000000003c0 returned -14 [ 1013.710150][T24015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.733132][T24015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.745521][T24018] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1013.766086][T24015] binder: 24014:24015 ioctl c0306201 2000000003c0 returned -14 [ 1013.835598][T24020] FAULT_INJECTION: forcing a failure. [ 1013.835598][T24020] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.850135][T24020] CPU: 0 UID: 0 PID: 24020 Comm: syz.0.5189 Tainted: G L syzkaller #0 PREEMPT(full) [ 1013.850159][T24020] Tainted: [L]=SOFTLOCKUP [ 1013.850165][T24020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1013.850173][T24020] Call Trace: [ 1013.850179][T24020] [ 1013.850185][T24020] dump_stack_lvl+0xe8/0x150 [ 1013.850205][T24020] should_fail_ex+0x412/0x560 [ 1013.850221][T24020] ? __d_alloc+0x37/0x6f0 [ 1013.850238][T24020] should_failslab+0xa8/0x100 [ 1013.850252][T24020] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1013.850284][T24020] __d_alloc+0x37/0x6f0 [ 1013.850305][T24020] d_alloc+0x4b/0x190 [ 1013.850319][T24020] ? lookup_one_qstr_excl+0xc4/0x360 [ 1013.850338][T24020] lookup_one_qstr_excl+0xd8/0x360 [ 1013.850361][T24020] filename_create+0x20e/0x370 [ 1013.850378][T24020] ? do_getname_kernel+0x54/0x230 [ 1013.850395][T24020] ? __pfx_filename_create+0x10/0x10 [ 1013.850413][T24020] ? __asan_memcpy+0x40/0x70 [ 1013.850429][T24020] ? do_getname_kernel+0x183/0x230 [ 1013.850446][T24020] start_creating_path+0x39/0x150 [ 1013.850465][T24020] unix_bind+0x30d/0x1230 [ 1013.850487][T24020] ? tomoyo_socket_bind_permission+0x1ae/0x290 [ 1013.850507][T24020] ? __pfx_unix_bind+0x10/0x10 [ 1013.850525][T24020] ? bpf_lsm_socket_bind+0x9/0x20 [ 1013.850544][T24020] __sys_bind+0x2e3/0x410 [ 1013.850563][T24020] ? __pfx___sys_bind+0x10/0x10 [ 1013.850588][T24020] ? __pfx_ksys_write+0x10/0x10 [ 1013.850612][T24020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.850626][T24020] __x64_sys_bind+0x7a/0x90 [ 1013.850643][T24020] do_syscall_64+0x174/0x580 [ 1013.850658][T24020] ? clear_bhb_loop+0x40/0x90 [ 1013.850674][T24020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.850687][T24020] RIP: 0033:0x7f4f24f9ce59 [ 1013.850700][T24020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.850711][T24020] RSP: 002b:00007f4f25d97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1013.850725][T24020] RAX: ffffffffffffffda RBX: 00007f4f25216090 RCX: 00007f4f24f9ce59 [ 1013.850735][T24020] RDX: 000000000000006e RSI: 0000200000000180 RDI: 000000000000000a [ 1013.850744][T24020] RBP: 00007f4f25d97090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.850752][T24020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.850760][T24020] R13: 00007f4f25216128 R14: 00007f4f25216090 R15: 00007f4f2533fa48 [ 1013.850781][T24020] [ 1014.131983][ T29] audit: type=1326 audit(1780936704.826:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.3.5191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1014.148837][T24022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.160155][ T29] audit: type=1326 audit(1780936704.826:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24021 comm="syz.3.5191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x7ffc0000 [ 1014.166874][T24022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.214312][T24022] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1014.281476][T24024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.290531][T24024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.541566][T24026] fuse: Unknown parameter 'hash' [ 1014.588778][T24028] geneve1: entered promiscuous mode [ 1014.594318][T24028] macsec0: entered promiscuous mode [ 1014.601962][T24028] macsec0: entered allmulticast mode [ 1014.608399][T24028] geneve1: entered allmulticast mode [ 1014.615509][T24028] geneve1: left allmulticast mode [ 1014.620902][T24028] geneve1: left promiscuous mode [ 1015.040785][T24045] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1016.062116][ T5633] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1016.205169][T24087] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 1016.294446][T24092] input: syz0 as /devices/virtual/input/input59 [ 1016.452974][T24098] kvm: Disabled LAPIC found during irq injection [ 1016.740817][T24113] kvm: pic: single mode not supported [ 1016.742260][T24113] kvm: pic: level sensitive irq not supported [ 1017.099764][T24131] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 1017.126300][T24131] kvm: pic: level sensitive irq not supported [ 1017.126588][T24131] kvm: pic: non byte read [ 1017.141279][T24131] kvm: pic: non byte read [ 1017.145996][T24131] kvm: pic: non byte read [ 1017.151039][T24131] kvm: pic: non byte read [ 1017.155808][T24131] kvm: pic: non byte read [ 1017.161120][T24131] kvm: pic: non byte read [ 1017.165848][T24131] kvm: pic: non byte read [ 1017.171276][T24131] kvm: pic: non byte read [ 1017.176046][T24131] kvm: pic: non byte read [ 1017.184451][T24131] kvm: pic: non byte read [ 1017.399527][T24144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.426261][T24144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.052246][T24179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5255'. [ 1018.334758][T24195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5260'. [ 1018.530521][T24201] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5264'. [ 1018.553999][T24206] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 1018.592097][T24206] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 1018.659717][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5267'. [ 1018.882771][T24213] kvm: kvm [24211]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1018.928767][T24219] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1019.306468][T24235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.326942][T24235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.503073][T24241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.538218][T24241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.554010][T24243] input: syz1 as /devices/virtual/input/input60 [ 1019.575672][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 1019.575687][ T29] audit: type=1326 audit(1780936710.266:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24242 comm="syz.3.5282" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f8919ce59 code=0x0 [ 1019.695036][T24246] tipc: Enabled bearer , priority 0 [ 1019.704154][T24246] syzkaller0: left promiscuous mode [ 1019.710081][T24246] syzkaller0: left allmulticast mode [ 1019.957945][T24253] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1019.985346][T24253] kvm: pic: single mode not supported [ 1020.067645][T24263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.083890][T24263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.809611][T16015] tipc: Node number set to 1254769231 [ 1020.840728][T24282] syz.1.5298 (24282): drop_caches: 2 [ 1021.476645][T24322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.593538][T24329] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5315'. [ 1021.818192][T24340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.845142][T24340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.985447][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5323'. [ 1022.024225][T24344] syzkaller0: entered promiscuous mode [ 1022.056000][T24344] syzkaller0: entered allmulticast mode [ 1022.659033][T24381] : renamed from gretap0 (while UP) [ 1022.786774][T24385] syzkaller0: entered promiscuous mode [ 1022.809046][T24385] syzkaller0: entered allmulticast mode [ 1022.846701][T24392] binder: 24361:24392 ioctl c0306201 0 returned -14 [ 1022.896806][T24391] syzkaller0: entered promiscuous mode [ 1022.902858][T24391] syzkaller0: entered allmulticast mode [ 1023.023216][T24397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5345'. [ 1023.036243][T24397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5345'. [ 1023.229121][T24410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5347'. [ 1023.259939][T24410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5347'. [ 1023.282127][T24410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.292071][T24402] netlink: 'syz.2.5347': attribute type 4 has an invalid length. [ 1023.305759][T24410] bond1: (slave bond0): making interface the new active one [ 1023.320167][T24402] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5347'. [ 1023.332961][T24410] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1023.354042][T24402] .`: renamed from bond0 (while UP) [ 1023.444794][T24418] syzkaller0: entered promiscuous mode [ 1023.473803][T24418] syzkaller0: entered allmulticast mode [ 1023.498773][T24424] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 1023.611300][T24429] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5356'. [ 1023.731645][T24429] veth5: entered promiscuous mode [ 1023.754588][T24429] team0: Port device veth5 added [ 1023.897718][T24444] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 1023.914383][T24446] xt_hashlimit: size too large, truncated to 1048576 [ 1024.145661][T24456] syzkaller0: entered promiscuous mode [ 1024.154066][T24456] syzkaller0: entered allmulticast mode [ 1024.318827][T24462] veth0: entered promiscuous mode [ 1024.354022][T24462] macvtap0: entered promiscuous mode [ 1024.366487][T24462] macvtap0: entered allmulticast mode [ 1024.385015][T24462] veth1_vlan: entered allmulticast mode [ 1024.418183][T24465] macvtap1: entered promiscuous mode [ 1024.444621][T24465] macvtap1: entered allmulticast mode [ 1024.546916][T24471] syzkaller0: left promiscuous mode [ 1024.558210][T24471] syzkaller0: left allmulticast mode [ 1024.565748][T24461] veth0: left promiscuous mode [ 1024.752898][T24481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.792661][T24481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.930641][T24491] fuse: Invalid gid '0x0000000000000003' [ 1024.978872][T24493] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1025.057661][T20765] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1025.143788][T24505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.156641][T24505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.166708][T24505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.180642][T24501] kvm: pic: single mode not supported [ 1025.180886][T24501] kvm: pic: single mode not supported [ 1025.187166][T24505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.201443][T24501] kvm: pic: single mode not supported [ 1025.201461][T24501] kvm: pic: level sensitive irq not supported [ 1025.202513][T24505] batman_adv: batadv0: Removing interface: macsec0 [ 1025.208041][T24501] kvm: pic: level sensitive irq not supported [ 1025.235917][T24501] kvm: pic: level sensitive irq not supported [ 1025.249080][T20765] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1025.253339][T24501] kvm: pic: single mode not supported [ 1025.260858][T20765] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1025.265061][T24501] kvm: pic: level sensitive irq not supported [ 1025.276528][T20765] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1025.313127][T24501] kvm: pic: single mode not supported [ 1025.313148][T24501] kvm: pic: level sensitive irq not supported [ 1025.315278][T20765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.326183][T24501] kvm: pic: single mode not supported [ 1025.334161][T24501] kvm: pic: level sensitive irq not supported [ 1025.349509][T20765] usb 2-1: Product: syz [ 1025.368815][T24501] kvm: pic: single mode not supported [ 1025.369840][T24501] kvm: pic: level sensitive irq not supported [ 1025.380555][T20765] usb 2-1: Manufacturer: syz [ 1025.392108][T20765] usb 2-1: SerialNumber: syz [ 1025.403858][T24501] kvm: pic: single mode not supported [ 1025.403879][T24501] kvm: pic: level sensitive irq not supported [ 1025.421546][T24501] kvm: pic: single mode not supported [ 1025.428169][T24501] kvm: pic: level sensitive irq not supported [ 1025.449567][T20765] usb 2-1: config 0 descriptor?? [ 1025.455738][T24501] kvm: pic: single mode not supported [ 1025.455753][T24501] kvm: pic: level sensitive irq not supported [ 1025.474013][T24485] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1025.490169][T24485] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1025.508026][T24510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.535652][T24510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.705502][T24485] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1025.715421][T24485] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1026.020572][T24530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.033585][T24530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.095449][T24532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.129569][T24532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.130624][T20765] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1026.357024][T24542] syz_tun: entered allmulticast mode [ 1026.364951][T24541] syz_tun: left allmulticast mode [ 1026.614268][T24555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.632912][T24555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.732088][T24558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.741824][T24558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.953836][T20765] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1026.971802][T20765] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 42:ae:c0:d0:2f:a3 [ 1026.989129][T20765] usb 2-1: USB disconnect, device number 4 [ 1026.998117][T20765] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 1027.323060][T24565] random: crng reseeded on system resumption [ 1027.623841][ T5633] Bluetooth: hci3: unexpected event for opcode 0x0004 [ 1028.417617][ T5714] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1028.590555][T24628] kvm: user requested TSC rate below hardware speed [ 1028.628863][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1028.653938][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 63, changing to 9 [ 1028.655891][T24630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.676904][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 58754, setting to 1024 [ 1028.676939][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1028.676988][ T5714] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1028.739442][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.750750][ T5714] usb 2-1: config 0 descriptor?? [ 1028.756594][T24598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1028.773582][T24630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.175208][ T5714] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1029.197198][ T5714] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1029.204691][ T5714] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1029.212730][ T5714] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1029.220592][ T5714] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1029.229463][ T5714] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1029.236908][ T5714] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1029.244856][ T5714] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1029.254244][ T5714] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1029.263523][ T5714] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 1029.281082][ T5714] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1029.717800][T24634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1029.730527][T24634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1029.747910][T24634] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1029.758244][T24634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1030.329492][T24663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.340139][T24663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.471928][T24672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5451'. [ 1030.545461][T24675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.556519][T24675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.599303][T24677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.610653][T24677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.907396][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 1031.018711][T24685] syzkaller0: entered promiscuous mode [ 1031.024489][T24685] syzkaller0: entered allmulticast mode [ 1031.110273][T24690] netlink: 'syz.2.5459': attribute type 29 has an invalid length. [ 1031.157544][T24690] netlink: 'syz.2.5459': attribute type 29 has an invalid length. [ 1031.629298][T16015] usb 2-1: USB disconnect, device number 5 [ 1031.787686][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 1031.788792][T23532] Bluetooth: hci4: command 0x0c1a tx timeout [ 1031.798861][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 1031.811412][T24724] pim6reg: entered allmulticast mode [ 1031.832923][T24723] pim6reg: left allmulticast mode [ 1032.297421][T24747] netlink: 'syz.0.5481': attribute type 1 has an invalid length. [ 1032.435395][T24747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1032.512607][T24754] bond1: (slave ): Enslaving as a backup interface with an up link [ 1032.570598][T24721] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1032.626605][T24767] =v: renamed from veth0_to_bond (while UP) [ 1032.727511][T24617] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1033.033435][T24787] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=327700 (655400 ns) > initial count (2 ns). Using initial count to start timer. [ 1033.075266][T24791] syzkaller0: entered promiscuous mode [ 1033.081606][T24791] syzkaller0: entered allmulticast mode [ 1033.666609][T24818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5508'. [ 1034.286838][T24858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5526'. [ 1034.296266][T24858] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1034.661247][T24880] netlink: 'syz.0.5535': attribute type 1 has an invalid length. [ 1034.674466][T24880] netlink: 'syz.0.5535': attribute type 1 has an invalid length. [ 1034.968921][T24887] syzkaller0: entered promiscuous mode [ 1034.981595][T24887] syzkaller0: entered allmulticast mode [ 1035.204615][T24899] syzkaller1: entered promiscuous mode [ 1035.216949][T24899] syzkaller1: entered allmulticast mode [ 1035.470275][T24911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5549'. [ 1035.511522][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5550'. [ 1035.633738][T24919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1036.036246][T24947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5565'. [ 1036.238945][T24955] syzkaller0: entered promiscuous mode [ 1036.245430][T24955] syzkaller0: entered allmulticast mode [ 1037.358001][T24719] bond1: (slave ): link status up again after 0 ms [ 1037.437231][T24719] bond1: (slave ): link status up again after 0 ms [ 1037.487515][T24719] bond1: (slave ): link status up again after 0 ms [ 1037.537229][T24603] bond1: (slave ): link status up again after 0 ms [ 1037.566740][T25005] tipc: Resetting bearer [ 1037.585240][T24603] bond1: (slave ): link status up again after 0 ms [ 1037.627543][T24603] bond1: (slave ): link status up again after 0 ms [ 1037.657217][T24603] bond1: (slave ): link status up again after 0 ms [ 1037.699848][T24603] bond1: (slave ): link status up again after 0 ms [ 1037.737890][T24603] bond1: (slave ): link status up again after 0 ms [ 1037.789631][T24603] bond1: (slave ): link status up again after 0 ms [ 1037.828616][T24614] bond1: (slave ): link status up again after 0 ms [ 1037.888023][T24614] bond1: (slave ): link status up again after 0 ms [ 1037.940325][T24617] bond1: (slave ): link status up again after 0 ms [ 1037.994570][T24609] bond1: (slave ): link status up again after 0 ms [ 1038.338582][T25008] geneve1: left allmulticast mode [ 1038.388563][T25016] syzkaller0: entered promiscuous mode [ 1038.417787][T25016] syzkaller0: entered allmulticast mode [ 1038.436287][T24614] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.458432][T24614] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.482249][T24614] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.512645][T24614] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.655462][T25030] tipc: Enabled bearer , priority 0 [ 1038.683339][T25030] syzkaller0: entered promiscuous mode [ 1038.703937][T25030] syzkaller0: entered allmulticast mode [ 1038.843598][T25036] tipc: Resetting bearer [ 1038.854007][T25029] tipc: Resetting bearer [ 1038.918955][T25029] tipc: Disabling bearer [ 1039.947516][T25072] netlink: 'syz.2.5610': attribute type 25 has an invalid length. [ 1039.958072][T25072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5610'. [ 1040.065688][T25072] netlink: 'syz.2.5610': attribute type 25 has an invalid length. [ 1040.068065][T24609] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.086216][T25072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5610'. [ 1040.114545][T24609] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.158864][T24609] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.188504][T24609] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.363858][T25084] bond1: (slave dummy0): Releasing active interface [ 1040.375344][T25084] dummy0: left promiscuous mode [ 1040.382403][T25084] dummy0: left allmulticast mode [ 1040.393543][T25084] bridge_slave_1: left allmulticast mode [ 1040.406378][T25084] bridge_slave_1: left promiscuous mode [ 1040.413754][T25084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.438462][T25084] bond0: (slave bond_slave_0): Releasing backup interface [ 1040.462745][T25084] bond0: (slave bond_slave_1): Releasing backup interface [ 1040.484510][T25084] bond0: (slave netdevsim1): Releasing backup interface [ 1040.524043][T25087] vlan0: entered promiscuous mode [ 1040.540531][T25090] tipc: Enabling of bearer rejected, failed to enable media [ 1041.224460][T25114] syzkaller1: entered promiscuous mode [ 1041.230652][T25114] syzkaller1: entered allmulticast mode [ 1041.569232][T25125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5631'. [ 1041.769884][T25129] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1041.808042][T25129] batman_adv: batadv0: Adding interface: gretap1 [ 1041.824714][T25129] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.874424][T25129] batman_adv: batadv0: Interface activated: gretap1 [ 1042.677317][T24614] net_ratelimit: 46 callbacks suppressed [ 1042.677338][T24614] bond1: (slave ): failed to get link speed/duplex [ 1042.835003][T24719] bond1: (slave ): failed to get link speed/duplex [ 1042.967274][T24721] bond1: (slave ): failed to get link speed/duplex [ 1043.147689][T24721] bond1: (slave ): failed to get link speed/duplex [ 1043.278464][T24719] bond1: (slave ): failed to get link speed/duplex [ 1043.427502][T24614] bond1: (slave ): failed to get link speed/duplex [ 1043.511770][T25211] syzkaller0: entered promiscuous mode [ 1043.517781][T25211] syzkaller0: entered allmulticast mode [ 1043.532497][T25211] tipc: Started in network mode [ 1043.547407][T25211] tipc: Node identity 36eb74252984, cluster identity 4711 [ 1043.559590][T25211] tipc: Enabled bearer , priority 0 [ 1043.581684][T25210] tipc: Resetting bearer [ 1043.620466][T25210] tipc: Disabling bearer [ 1043.647302][T24609] bond1: (slave ): failed to get link speed/duplex [ 1043.767451][T24609] bond1: (slave ): failed to get link speed/duplex [ 1043.869758][T25224] syzkaller0: entered promiscuous mode [ 1043.875917][T25224] syzkaller0: entered allmulticast mode [ 1043.887960][T24609] bond1: (slave ): failed to get link speed/duplex [ 1043.896383][T25224] tipc: Enabled bearer , priority 0 [ 1043.918645][T25223] tipc: Resetting bearer [ 1043.978888][T25223] tipc: Disabling bearer [ 1044.017524][T24721] bond1: (slave ): failed to get link speed/duplex [ 1045.563946][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5705'. [ 1045.580776][T25291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5705'. [ 1045.737572][T25302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5710'. [ 1045.761563][T25302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5710'. [ 1045.890800][T25302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5710'. [ 1045.915033][T25302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5710'. [ 1046.962111][T25353] tipc: Enabling of bearer rejected, failed to enable media [ 1047.615725][T25379] tipc: Enabling of bearer rejected, already enabled [ 1047.629025][T25378] tipc: Enabling of bearer rejected, failed to enable media [ 1047.687560][T24609] net_ratelimit: 32 callbacks suppressed [ 1047.687580][T24609] bond1: (slave ): failed to get link speed/duplex [ 1047.700426][T25384] fuse: Bad value for 'fd' [ 1047.828533][T24609] bond1: (slave ): failed to get link speed/duplex [ 1047.948817][T24719] bond1: (slave ): failed to get link speed/duplex [ 1048.099811][T24614] bond1: (slave ): failed to get link speed/duplex [ 1048.112951][T25408] tipc: Enabling of bearer rejected, already enabled [ 1048.229939][T24609] bond1: (slave ): failed to get link speed/duplex [ 1048.352586][T24609] bond1: (slave ): failed to get link speed/duplex [ 1048.477687][T24614] bond1: (slave ): failed to get link speed/duplex [ 1048.591487][T25434] syzkaller0: entered promiscuous mode [ 1048.607220][T25434] syzkaller0: entered allmulticast mode [ 1048.697170][T24609] bond1: (slave ): failed to get link speed/duplex [ 1048.783809][T25446] syzkaller0: entered promiscuous mode [ 1048.797334][T25446] syzkaller0: entered allmulticast mode [ 1048.897203][T24719] bond1: (slave ): failed to get link speed/duplex [ 1049.039285][T24609] bond1: (slave ): failed to get link speed/duplex [ 1049.301003][T25469] syzkaller0: entered promiscuous mode [ 1049.306710][T25469] syzkaller0: entered allmulticast mode [ 1049.855615][T25490] trusted_key: encrypted_key: key trusted:syz not found [ 1050.093263][T25495] syzkaller0: entered promiscuous mode [ 1050.130040][T25495] syzkaller0: entered allmulticast mode [ 1050.152426][T25495] syzkaller0: tun_net_xmit 1280 [ 1054.349593][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.356851][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.499411][T25503] syzkaller0: entered promiscuous mode [ 1054.504926][T25503] syzkaller0: entered allmulticast mode [ 1054.567807][T24614] net_ratelimit: 7 callbacks suppressed [ 1054.567826][T24614] bond1: (slave ): failed to get link speed/duplex [ 1054.630281][T25519] netlink: 'syz.0.5804': attribute type 1 has an invalid length. [ 1054.795494][T25532] syzkaller0: entered promiscuous mode [ 1054.807256][T25532] syzkaller0: entered allmulticast mode [ 1054.967721][T24607] bond1: (slave ): failed to get link speed/duplex [ 1055.004666][T25546] kvm: user requested TSC rate below hardware speed [ 1055.087955][T24607] bond1: (slave ): failed to get link speed/duplex [ 1055.363440][T25558] syzkaller0: entered promiscuous mode [ 1055.386135][T25558] syzkaller0: entered allmulticast mode [ 1055.473062][T25558] tipc: Enabled bearer , priority 0 [ 1055.491862][T25557] tipc: Resetting bearer [ 1055.522735][T25557] tipc: Disabling bearer [ 1055.539867][T25561] syzkaller0: entered promiscuous mode [ 1055.545575][T25561] syzkaller0: entered allmulticast mode [ 1055.646064][T24614] bond1: (slave ): failed to get link speed/duplex [ 1055.797509][T24607] bond1: (slave ): failed to get link speed/duplex [ 1055.816663][T25567] syzkaller0: entered promiscuous mode [ 1055.834084][T25567] syzkaller0: entered allmulticast mode [ 1055.930953][T25573] syzkaller0: entered promiscuous mode [ 1055.956910][T25575] kvm: user requested TSC rate below hardware speed [ 1055.966994][T25573] syzkaller0: entered allmulticast mode [ 1056.207392][T24719] bond1: (slave ): failed to get link speed/duplex [ 1056.304244][T25589] syzkaller0: entered promiscuous mode [ 1056.327485][T25589] syzkaller0: entered allmulticast mode [ 1056.468087][T24607] bond1: (slave ): failed to get link speed/duplex [ 1056.598656][T24603] bond1: (slave ): failed to get link speed/duplex [ 1056.676710][ C1] [ 1056.679094][ C1] ======================================================== [ 1056.686296][ C1] WARNING: possible irq lock inversion dependency detected [ 1056.693511][ C1] syzkaller #0 Tainted: G L [ 1056.699500][ C1] -------------------------------------------------------- [ 1056.706707][ C1] syz.4.5843/25612 just changed the state of lock: [ 1056.713222][ C1] ffff88802b942230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 1056.722931][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 1056.730923][ C1] (tasklist_lock){.+.+}-{3:3} [ 1056.730961][ C1] [ 1056.730961][ C1] [ 1056.730961][ C1] and interrupts could create inverse lock ordering between them. [ 1056.730961][ C1] [ 1056.750037][ C1] [ 1056.750037][ C1] other info that might help us debug this: [ 1056.758146][ C1] Chain exists of: [ 1056.758146][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1056.758146][ C1] [ 1056.771741][ C1] Possible interrupt unsafe locking scenario: [ 1056.771741][ C1] [ 1056.780071][ C1] CPU0 CPU1 [ 1056.785462][ C1] ---- ---- [ 1056.790812][ C1] lock(tasklist_lock); [ 1056.795047][ C1] local_irq_disable(); [ 1056.801811][ C1] lock(&dev->event_lock#2); [ 1056.809002][ C1] lock(&client->buffer_lock); [ 1056.816365][ C1] [ 1056.819807][ C1] lock(&dev->event_lock#2); [ 1056.824657][ C1] [ 1056.824657][ C1] *** DEADLOCK *** [ 1056.824657][ C1] [ 1056.832787][ C1] 2 locks held by syz.4.5843/25612: [ 1056.837988][ C1] #0: ffff8880287fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1056.847755][ C1] #1: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210 [ 1056.857340][ C1] [ 1056.857340][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 1056.866709][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 1056.872176][ C1] HARDIRQ-ON-R at: [ 1056.876493][ C1] lock_acquire+0x106/0x350 [ 1056.883536][ C1] _raw_read_lock+0x36/0x50 [ 1056.890378][ C1] __do_wait+0xde/0x740 [ 1056.896875][ C1] do_wait+0x1e7/0x510 [ 1056.903309][ C1] kernel_wait+0xd6/0x1c0 [ 1056.909979][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1056.918223][ C1] process_scheduled_works+0xb5d/0x1860 [ 1056.926110][ C1] worker_thread+0xa53/0xfc0 [ 1056.933043][ C1] kthread+0x389/0x470 [ 1056.939455][ C1] ret_from_fork+0x514/0xb70 [ 1056.946379][ C1] ret_from_fork_asm+0x1a/0x30 [ 1056.953479][ C1] SOFTIRQ-ON-R at: [ 1056.957824][ C1] lock_acquire+0x106/0x350 [ 1056.964682][ C1] _raw_read_lock+0x36/0x50 [ 1056.971529][ C1] __do_wait+0xde/0x740 [ 1056.978026][ C1] do_wait+0x1e7/0x510 [ 1056.984435][ C1] kernel_wait+0xd6/0x1c0 [ 1056.991105][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1056.999341][ C1] process_scheduled_works+0xb5d/0x1860 [ 1057.007221][ C1] worker_thread+0xa53/0xfc0 [ 1057.014149][ C1] kthread+0x389/0x470 [ 1057.020557][ C1] ret_from_fork+0x514/0xb70 [ 1057.027486][ C1] ret_from_fork_asm+0x1a/0x30 [ 1057.034589][ C1] INITIAL USE at: [ 1057.038820][ C1] lock_acquire+0x106/0x350 [ 1057.045567][ C1] _raw_write_lock_irq+0x3d/0x50 [ 1057.052747][ C1] copy_process+0x2b4c/0x4440 [ 1057.059672][ C1] kernel_clone+0x2d7/0x940 [ 1057.066427][ C1] user_mode_thread+0x110/0x180 [ 1057.073529][ C1] rest_init+0x23/0x300 [ 1057.079940][ C1] start_kernel+0x38a/0x3e0 [ 1057.086696][ C1] x86_64_start_reservations+0x24/0x30 [ 1057.094498][ C1] x86_64_start_kernel+0x143/0x1c0 [ 1057.101863][ C1] common_startup_64+0x13e/0x147 [ 1057.109051][ C1] INITIAL READ USE at: [ 1057.113730][ C1] lock_acquire+0x106/0x350 [ 1057.120916][ C1] _raw_read_lock+0x36/0x50 [ 1057.128110][ C1] __do_wait+0xde/0x740 [ 1057.134952][ C1] do_wait+0x1e7/0x510 [ 1057.141726][ C1] kernel_wait+0xd6/0x1c0 [ 1057.148743][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1057.157326][ C1] process_scheduled_works+0xb5d/0x1860 [ 1057.165555][ C1] worker_thread+0xa53/0xfc0 [ 1057.172826][ C1] kthread+0x389/0x470 [ 1057.179586][ C1] ret_from_fork+0x514/0xb70 [ 1057.186946][ C1] ret_from_fork_asm+0x1a/0x30 [ 1057.194395][ C1] } [ 1057.197230][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 1057.205316][ C1] ... acquired at: [ 1057.209453][ C1] _raw_read_lock+0x36/0x50 [ 1057.214127][ C1] send_sigurg+0x12b/0x420 [ 1057.218714][ C1] sk_send_sigurg+0x6c/0x2e0 [ 1057.223469][ C1] queue_oob+0x42c/0x4f0 [ 1057.227878][ C1] unix_stream_sendmsg+0xcb1/0xe80 [ 1057.233154][ C1] ____sys_sendmsg+0x972/0x9f0 [ 1057.238078][ C1] ___sys_sendmsg+0x2a5/0x360 [ 1057.242915][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1057.248012][ C1] do_syscall_64+0x174/0x580 [ 1057.252766][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.258817][ C1] [ 1057.261127][ C1] -> (&f_owner->lock){....}-{3:3} { [ 1057.266590][ C1] INITIAL USE at: [ 1057.270733][ C1] lock_acquire+0x106/0x350 [ 1057.277315][ C1] _raw_write_lock_irq+0x3d/0x50 [ 1057.284330][ C1] __f_setown+0x67/0x370 [ 1057.290649][ C1] fcntl_dirnotify+0x3f9/0x6a0 [ 1057.297487][ C1] do_fcntl+0x77e/0x1a20 [ 1057.303809][ C1] __se_sys_fcntl+0xc8/0x150 [ 1057.310590][ C1] do_syscall_64+0x174/0x580 [ 1057.317257][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.325241][ C1] INITIAL READ USE at: [ 1057.329817][ C1] lock_acquire+0x106/0x350 [ 1057.336862][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 1057.344574][ C1] send_sigio+0x38/0x370 [ 1057.351328][ C1] dnotify_handle_event+0x169/0x440 [ 1057.359031][ C1] fsnotify+0x168e/0x1ae0 [ 1057.365874][ C1] __fsnotify_parent+0x50d/0x620 [ 1057.373321][ C1] vfs_read+0x854/0xa70 [ 1057.379990][ C1] __x64_sys_pread64+0x199/0x230 [ 1057.387438][ C1] do_syscall_64+0x174/0x580 [ 1057.394536][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.402935][ C1] } [ 1057.405681][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1057.414794][ C1] ... acquired at: [ 1057.418852][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 1057.424224][ C1] send_sigio+0x38/0x370 [ 1057.428634][ C1] kill_fasync+0x24d/0x4d0 [ 1057.433215][ C1] n_tty_receive_buf_common+0x98a/0x12e0 [ 1057.439007][ C1] tty_port_default_receive_buf+0x6e/0xa0 [ 1057.444927][ C1] flush_to_ldisc+0x24a/0x6e0 [ 1057.449769][ C1] process_scheduled_works+0xb5d/0x1860 [ 1057.455476][ C1] worker_thread+0xa53/0xfc0 [ 1057.460227][ C1] kthread+0x389/0x470 [ 1057.464461][ C1] ret_from_fork+0x514/0xb70 [ 1057.469214][ C1] ret_from_fork_asm+0x1a/0x30 [ 1057.474145][ C1] [ 1057.476458][ C1] -> (&new->fa_lock){....}-{3:3} { [ 1057.481744][ C1] INITIAL USE at: [ 1057.485801][ C1] lock_acquire+0x106/0x350 [ 1057.492205][ C1] _raw_write_lock_irq+0x3d/0x50 [ 1057.499045][ C1] fasync_remove_entry+0xf1/0x1c0 [ 1057.505975][ C1] __fput+0x890/0xa60 [ 1057.511861][ C1] task_work_run+0x1d9/0x270 [ 1057.518357][ C1] exit_to_user_mode_loop+0x193/0x680 [ 1057.525658][ C1] do_syscall_64+0x353/0x580 [ 1057.532149][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.539943][ C1] INITIAL READ USE at: [ 1057.544439][ C1] lock_acquire+0x106/0x350 [ 1057.551277][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 1057.558814][ C1] kill_fasync+0x199/0x4d0 [ 1057.565596][ C1] n_tty_receive_buf_common+0x98a/0x12e0 [ 1057.573567][ C1] tty_port_default_receive_buf+0x6e/0xa0 [ 1057.581645][ C1] flush_to_ldisc+0x24a/0x6e0 [ 1057.588660][ C1] process_scheduled_works+0xb5d/0x1860 [ 1057.596540][ C1] worker_thread+0xa53/0xfc0 [ 1057.603463][ C1] kthread+0x389/0x470 [ 1057.609878][ C1] ret_from_fork+0x514/0xb70 [ 1057.616826][ C1] ret_from_fork_asm+0x1a/0x30 [ 1057.623941][ C1] } [ 1057.626602][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1057.635450][ C1] ... acquired at: [ 1057.639421][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 1057.644789][ C1] kill_fasync+0x199/0x4d0 [ 1057.649372][ C1] evdev_pass_values+0x627/0xbd0 [ 1057.654472][ C1] evdev_events+0x1e6/0x340 [ 1057.659140][ C1] input_pass_values+0x288/0x890 [ 1057.664239][ C1] input_event_dispose+0x330/0x6b0 [ 1057.669519][ C1] input_inject_event+0x1dc/0x330 [ 1057.674758][ C1] evdev_write+0x325/0x4c0 [ 1057.679374][ C1] vfs_write+0x29a/0xb90 [ 1057.683805][ C1] ksys_write+0x150/0x270 [ 1057.688315][ C1] do_syscall_64+0x174/0x580 [ 1057.693082][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.699145][ C1] [ 1057.701455][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 1057.707264][ C1] INITIAL USE at: [ 1057.711234][ C1] lock_acquire+0x106/0x350 [ 1057.717465][ C1] _raw_spin_lock+0x2e/0x40 [ 1057.723710][ C1] evdev_pass_values+0xb9/0xbd0 [ 1057.730293][ C1] evdev_events+0x1e6/0x340 [ 1057.736527][ C1] input_pass_values+0x288/0x890 [ 1057.743203][ C1] input_event_dispose+0x330/0x6b0 [ 1057.750053][ C1] input_inject_event+0x1dc/0x330 [ 1057.756818][ C1] evdev_write+0x325/0x4c0 [ 1057.762963][ C1] vfs_write+0x29a/0xb90 [ 1057.768941][ C1] ksys_write+0x150/0x270 [ 1057.775016][ C1] do_syscall_64+0x174/0x580 [ 1057.781340][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.788959][ C1] } [ 1057.791529][ C1] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1057.799769][ C1] ... acquired at: [ 1057.803645][ C1] _raw_spin_lock+0x2e/0x40 [ 1057.808316][ C1] evdev_pass_values+0xb9/0xbd0 [ 1057.813328][ C1] evdev_events+0x1e6/0x340 [ 1057.817996][ C1] input_pass_values+0x288/0x890 [ 1057.823103][ C1] input_event_dispose+0x330/0x6b0 [ 1057.828380][ C1] input_inject_event+0x1dc/0x330 [ 1057.833569][ C1] evdev_write+0x325/0x4c0 [ 1057.838149][ C1] vfs_write+0x29a/0xb90 [ 1057.842564][ C1] ksys_write+0x150/0x270 [ 1057.847059][ C1] do_syscall_64+0x174/0x580 [ 1057.851834][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.857904][ C1] [ 1057.860216][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1057.865784][ C1] IN-SOFTIRQ-W at: [ 1057.869764][ C1] lock_acquire+0x106/0x350 [ 1057.875920][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1057.882769][ C1] input_inject_event+0xa4/0x330 [ 1057.889383][ C1] led_trigger_event+0x138/0x210 [ 1057.895965][ C1] kbd_bh+0x1c6/0x2e0 [ 1057.901586][ C1] tasklet_action_common+0x2da/0x4b0 [ 1057.908507][ C1] handle_softirqs+0x22a/0x840 [ 1057.914913][ C1] __irq_exit_rcu+0xca/0x220 [ 1057.921143][ C1] irq_exit_rcu+0x9/0x30 [ 1057.927025][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1057.934298][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1057.941917][ C1] _raw_spin_unlock_irq+0x29/0x50 [ 1057.948589][ C1] n_tty_ioctl_helper+0x38a/0x4d0 [ 1057.955262][ C1] tty_ioctl+0x9c5/0xde0 [ 1057.961157][ C1] __se_sys_ioctl+0xfc/0x170 [ 1057.967418][ C1] do_syscall_64+0x174/0x580 [ 1057.973651][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.981186][ C1] INITIAL USE at: [ 1057.985073][ C1] lock_acquire+0x106/0x350 [ 1057.991132][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1057.997920][ C1] input_inject_event+0xa4/0x330 [ 1058.004418][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 1058.011434][ C1] led_trigger_set+0x535/0x960 [ 1058.017760][ C1] led_trigger_set_default+0x260/0x2a0 [ 1058.024808][ C1] led_classdev_register_ext+0x787/0x9c0 [ 1058.032000][ C1] input_leds_connect+0x517/0x790 [ 1058.038586][ C1] input_register_device+0xce0/0x1140 [ 1058.045521][ C1] atkbd_connect+0x71e/0xa10 [ 1058.051669][ C1] serio_driver_probe+0x82/0xb0 [ 1058.058072][ C1] really_probe+0x267/0xaf0 [ 1058.064139][ C1] __driver_probe_device+0x1ef/0x380 [ 1058.070980][ C1] driver_probe_device+0x4f/0x240 [ 1058.077564][ C1] __driver_attach+0x34c/0x640 [ 1058.083885][ C1] bus_for_each_dev+0x23b/0x2c0 [ 1058.090319][ C1] serio_handle_event+0x1af/0xf80 [ 1058.096898][ C1] process_scheduled_works+0xb5d/0x1860 [ 1058.103995][ C1] worker_thread+0xa53/0xfc0 [ 1058.110140][ C1] kthread+0x389/0x470 [ 1058.115767][ C1] ret_from_fork+0x514/0xb70 [ 1058.121912][ C1] ret_from_fork_asm+0x1a/0x30 [ 1058.128236][ C1] } [ 1058.130720][ C1] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1058.139739][ C1] ... acquired at: [ 1058.143527][ C1] mark_lock+0x115/0x190 [ 1058.147933][ C1] __lock_acquire+0x689/0x2cf0 [ 1058.152859][ C1] lock_acquire+0x106/0x350 [ 1058.157523][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1058.162892][ C1] input_inject_event+0xa4/0x330 [ 1058.168001][ C1] led_trigger_event+0x138/0x210 [ 1058.173107][ C1] kbd_bh+0x1c6/0x2e0 [ 1058.177252][ C1] tasklet_action_common+0x2da/0x4b0 [ 1058.182708][ C1] handle_softirqs+0x22a/0x840 [ 1058.187635][ C1] __irq_exit_rcu+0xca/0x220 [ 1058.192386][ C1] irq_exit_rcu+0x9/0x30 [ 1058.196790][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1058.202587][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1058.208735][ C1] _raw_spin_unlock_irq+0x29/0x50 [ 1058.213934][ C1] n_tty_ioctl_helper+0x38a/0x4d0 [ 1058.219181][ C1] tty_ioctl+0x9c5/0xde0 [ 1058.223627][ C1] __se_sys_ioctl+0xfc/0x170 [ 1058.228400][ C1] do_syscall_64+0x174/0x580 [ 1058.233155][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.239214][ C1] [ 1058.241524][ C1] [ 1058.241524][ C1] stack backtrace: [ 1058.247404][ C1] CPU: 1 UID: 0 PID: 25612 Comm: syz.4.5843 Tainted: G L syzkaller #0 PREEMPT(full) [ 1058.247427][ C1] Tainted: [L]=SOFTLOCKUP [ 1058.247433][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1058.247442][ C1] Call Trace: [ 1058.247451][ C1] [ 1058.247459][ C1] dump_stack_lvl+0xe8/0x150 [ 1058.247477][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 1058.247496][ C1] mark_lock_irq+0x3d2/0x420 [ 1058.247514][ C1] mark_lock+0x115/0x190 [ 1058.247530][ C1] __lock_acquire+0x689/0x2cf0 [ 1058.247547][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1058.247564][ C1] ? input_inject_event+0xa4/0x330 [ 1058.247583][ C1] lock_acquire+0x106/0x350 [ 1058.247597][ C1] ? input_inject_event+0xa4/0x330 [ 1058.247623][ C1] ? rcu_is_watching+0x15/0xb0 [ 1058.247640][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1058.247662][ C1] ? input_inject_event+0xa4/0x330 [ 1058.247680][ C1] input_inject_event+0xa4/0x330 [ 1058.247699][ C1] ? led_trigger_event+0x4b/0x210 [ 1058.247720][ C1] led_trigger_event+0x138/0x210 [ 1058.247740][ C1] kbd_bh+0x1c6/0x2e0 [ 1058.247754][ C1] tasklet_action_common+0x2da/0x4b0 [ 1058.247773][ C1] handle_softirqs+0x22a/0x840 [ 1058.247787][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1058.247803][ C1] __irq_exit_rcu+0xca/0x220 [ 1058.247817][ C1] irq_exit_rcu+0x9/0x30 [ 1058.247829][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1058.247844][ C1] [ 1058.247849][ C1] [ 1058.247854][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1058.247870][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1058.247893][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 1a b3 f7 f5 48 89 df e8 22 28 f8 f5 e8 2d c2 23 f6 fb bf 01 00 00 00 52 a7 e9 f5 65 8b 05 1b dd 8d 07 85 c0 74 07 5b e9 01 48 00 00 [ 1058.247906][ C1] RSP: 0018:ffffc9000cb87e30 EFLAGS: 00000202 [ 1058.247920][ C1] RAX: 000000000000015b RBX: ffff8880287fe428 RCX: 0000000000000001 [ 1058.247930][ C1] RDX: 0000000000000007 RSI: ffffffff8dfa4dc8 RDI: 0000000000000001 [ 1058.247940][ C1] RBP: 0000000000000000 R08: ffffffff903036f7 R09: 1ffffffff20606de [ 1058.247950][ C1] R10: dffffc0000000000 R11: fffffbfff20606df R12: dffffc0000000000 [ 1058.247960][ C1] R13: 1ffff110050ffc8d R14: ffff8880287fe428 R15: ffff8880287fe469 [ 1058.247976][ C1] n_tty_ioctl_helper+0x38a/0x4d0 [ 1058.247995][ C1] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1058.248008][ C1] tty_ioctl+0x9c5/0xde0 [ 1058.248025][ C1] ? __pfx_tty_ioctl+0x10/0x10 [ 1058.248043][ C1] __se_sys_ioctl+0xfc/0x170 [ 1058.248064][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.248078][ C1] do_syscall_64+0x174/0x580 [ 1058.248093][ C1] ? trace_irq_disable+0x3b/0x140 [ 1058.248113][ C1] ? clear_bhb_loop+0x40/0x90 [ 1058.248129][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.248143][ C1] RIP: 0033:0x7f5c4079ce59 [ 1058.248156][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.248169][ C1] RSP: 002b:00007f5c41678028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.248183][ C1] RAX: ffffffffffffffda RBX: 00007f5c40a15fa0 RCX: 00007f5c4079ce59 [ 1058.248193][ C1] RDX: 0000000000000000 RSI: 000000000000540a RDI: 0000000000000004 [ 1058.248203][ C1] RBP: 00007f5c40832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1058.248212][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.248220][ C1] R13: 00007f5c40a16038 R14: 00007f5c40a15fa0 R15: 00007f5c40b3fa48 [ 1058.248235][ C1] [ 1058.606877][T24607] bond1: (slave ): failed to get link speed/duplex [ 1058.737254][T24614] bond1: (slave ): failed to get link speed/duplex [ 1059.627489][T24719] net_ratelimit: 7 callbacks suppressed [ 1059.627509][T24719] bond1: (slave ): failed to get link speed/duplex [ 1059.747362][T24607] bond1: (slave ): failed to get link speed/duplex [ 1059.857217][T24719] bond1: (slave ): failed to get link speed/duplex [ 1059.967205][T24607] bond1: (slave ): failed to get link speed/duplex [ 1060.077194][T24719] bond1: (slave ): failed to get link speed/duplex [ 1060.197171][T24607] bond1: (slave ): failed to get link speed/duplex [ 1060.307363][T24607] bond1: (slave ): failed to get link speed/duplex [ 1060.417206][T24607] bond1: (slave ): failed to get link speed/duplex [ 1060.527187][T24719] bond1: (slave ): failed to get link speed/duplex [ 1060.637212][T24607] bond1: (slave ): failed to get link speed/duplex [ 1064.687168][T24719] net_ratelimit: 35 callbacks suppressed [ 1064.687184][T24719] bond1: (slave ): failed to get link speed/duplex [ 1064.807249][T24719] bond1: (slave ): failed to get link speed/duplex [ 1064.917188][T24603] bond1: (slave ): failed to get link speed/duplex [ 1065.027224][T24603] bond1: (slave ): failed to get link speed/duplex [ 1065.137250][T24603] bond1: (slave ): failed to get link speed/duplex [ 1065.257214][T24607] bond1: (slave ): failed to get link speed/duplex [ 1065.377362][T24607] bond1: (slave ): failed to get link speed/duplex [ 1065.487219][T24607] bond1: (slave ): failed to get link speed/duplex [ 1065.607238][T24607] bond1: (slave ): failed to get link speed/duplex [ 1065.717210][T24603] bond1: (slave ): failed to get link speed/duplex