last executing test programs: 11.425282414s ago: executing program 3 (id=188): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 10.181664055s ago: executing program 3 (id=194): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x88, 0x1403, 0x5, 0x70bd21, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0x88}}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x3, 0xa1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401410101020000072401010101000b2402010202100180bb00090501090002"], 0x0) close(r4) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) 8.853568078s ago: executing program 2 (id=200): unshare(0x40400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000800)="b5", 0x1}], 0x1, 0x7fffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000001200)={0x14, 0x9a, &(0x7f0000000200)="8db8be87e707e40b73c58e8ee379d273eb346dbda8d5d1b8aa9ad72390709f16683b8bfa2da4c6cfeacffec1b836f7365c5e57581fff2c123b63e8c3d273a26cde320345891e230ff40657c9bc4f149a51ade0e61ffa0332f13bc8674a1bbe44152b7aab0d6378e9e16e2c1743ac50e16410bdaf69a5115898126aa764be6cb5fd0e4d2ee6179a6ca515cd16eba7ed1b086dce3ac25a8de2c4fa"}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x180, 0x7ffc, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@loopback, @local, 0x0}, &(0x7f0000000100)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x101, 0x8, 0x0, 0x4538, 0xffffffffffffffff, 0x1340000, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.463874913s ago: executing program 4 (id=206): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 6.985719825s ago: executing program 3 (id=208): socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000001c0)='./sys\x00'}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) socket$pptp(0x18, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='ffffffff ffffffff <}', 0x14) socket$xdp(0x2c, 0x3, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000480)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012140100000000060000000008004f000000000008004b0013000f0008000300010000000800150002000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x4000881}, 0x8090) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 6.202884985s ago: executing program 0 (id=209): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202ff"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/95) 6.152384696s ago: executing program 1 (id=210): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(0x0, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000070}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r4, &(0x7f0000000e00), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) 5.916242722s ago: executing program 2 (id=211): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) 5.080232293s ago: executing program 3 (id=212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.025245955s ago: executing program 1 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d01, &(0x7f0000000a00)) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) 4.936046767s ago: executing program 2 (id=214): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 4.654129164s ago: executing program 0 (id=215): syz_emit_ethernet(0xa1, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x6b, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "00000000040026"}]}}}}}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 4.39761638s ago: executing program 1 (id=216): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0x5678\n', 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r3, &(0x7f00000004c0), 0x0) 4.248164834s ago: executing program 0 (id=217): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, 0x0, 0x0, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='123', 0x3, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='12', 0x2, 0x1e8030) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) 4.064508489s ago: executing program 0 (id=218): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x88, 0x1403, 0x5, 0x70bd21, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0x88}}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x3, 0xa1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401410101020000072401010101000b2402010202100180bb00090501090002"], 0x0) close(r4) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) 4.03243283s ago: executing program 1 (id=219): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x84383, 0x0) 3.627978369s ago: executing program 2 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) 3.463254213s ago: executing program 4 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.296716078s ago: executing program 0 (id=222): socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000001c0)='./sys\x00'}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r0 = syz_usb_connect$uac2(0x3, 0x9c, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x11, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) socket$pptp(0x18, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='ffffffff ffffffff <}', 0x14) socket$xdp(0x2c, 0x3, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000480)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012140100000000060000000008004f000000000008004b0013000f0008000300010000000800150002000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x4000881}, 0x8090) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 3.295297808s ago: executing program 3 (id=223): openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(0x0, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000070}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r4, &(0x7f0000000e00), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) 3.172142101s ago: executing program 4 (id=224): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x568, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x81}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x400000, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x8000000, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x2, 0x4, 0x1000, 0x0, 0x9, 0x4, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0xb, 0x8, 0x0, 0xc0800000, 0x100, 0x0, 0x9d8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xb, 0x9, 0x0, 0x40000000], [0x0, 0x7f, 0x0, 0x8, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffa, 0x0, 0x0, 0x68, 0xffff, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x8, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0xf1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0xffffeffc, 0x4, 0xf88, 0xfffffffe, 0x4], [0xfffffffe, 0x5, 0x6, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xffffffff, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.289806963s ago: executing program 3 (id=225): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) fchdir(r0) close(r0) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x8}, 0x20) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_read(r1, 0x2, 0x1f, &(0x7f0000000080)=""/31) 2.224204035s ago: executing program 4 (id=226): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) keyctl$join(0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) 2.076137359s ago: executing program 2 (id=227): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1, 0x3, 0x255, 0x0, r0}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed83, 0x1000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf913, 0x0, 0x3, 0x401f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xd) 1.913585232s ago: executing program 4 (id=228): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100), 0x0, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='123', 0x3, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='12', 0x2, 0x1e8030) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) 1.688661808s ago: executing program 2 (id=229): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='0x5678\n', 0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r3, &(0x7f00000004c0), 0x0) 1.646937549s ago: executing program 4 (id=230): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 1.426178235s ago: executing program 0 (id=231): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 1.327404527s ago: executing program 1 (id=232): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x80003, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1200000006"], 0x50) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) 0s ago: executing program 1 (id=233): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x88, 0x1403, 0x5, 0x70bd21, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0x88}}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x3, 0xa1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401410101020000072401010101000b2402010202100180bb00090501090002"], 0x0) close(r4) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.12' (ED25519) to the list of known hosts. [ 65.334347][ T4262] cgroup: Unknown subsys name 'net' [ 65.457115][ T4262] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.715399][ T4262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.165231][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.173183][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.183972][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.185048][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.191542][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.198990][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.206152][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.214044][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.226855][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.227757][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.235214][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.241431][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.248785][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.256768][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.263298][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.270433][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.276389][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.283419][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.296823][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.298326][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.304097][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.311535][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.318422][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.325754][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.332284][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.339070][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.349079][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.354575][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.366788][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.387567][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.742864][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 68.797934][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 68.880566][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 68.930471][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 68.958273][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 68.982051][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.989184][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.997749][ T4280] device bridge_slave_0 entered promiscuous mode [ 69.010568][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.017915][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.026454][ T4284] device bridge_slave_0 entered promiscuous mode [ 69.057497][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.065310][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.073643][ T4280] device bridge_slave_1 entered promiscuous mode [ 69.080930][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.088268][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.096411][ T4284] device bridge_slave_1 entered promiscuous mode [ 69.132144][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.161126][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.170510][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.178423][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.186898][ T4275] device bridge_slave_0 entered promiscuous mode [ 69.200929][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.208132][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.217328][ T4275] device bridge_slave_1 entered promiscuous mode [ 69.243368][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.284882][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.302249][ T4284] team0: Port device team_slave_0 added [ 69.309741][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.340047][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.350514][ T4284] team0: Port device team_slave_1 added [ 69.358338][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.365529][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.373591][ T4276] device bridge_slave_0 entered promiscuous mode [ 69.380808][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.389348][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.398834][ T4285] device bridge_slave_0 entered promiscuous mode [ 69.425317][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.432829][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.440884][ T4276] device bridge_slave_1 entered promiscuous mode [ 69.448115][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.456536][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.466061][ T4285] device bridge_slave_1 entered promiscuous mode [ 69.477307][ T4280] team0: Port device team_slave_0 added [ 69.489514][ T4280] team0: Port device team_slave_1 added [ 69.526176][ T4275] team0: Port device team_slave_0 added [ 69.534425][ T4275] team0: Port device team_slave_1 added [ 69.552078][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.559054][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.585277][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.598483][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.617273][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.629711][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.639683][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.646706][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.673205][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.684669][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.692983][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.719072][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.731545][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.766294][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.773469][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.799705][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.824916][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.832106][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.858454][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.898868][ T4276] team0: Port device team_slave_0 added [ 69.913525][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.920512][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.946975][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.960391][ T4285] team0: Port device team_slave_0 added [ 69.987197][ T4284] device hsr_slave_0 entered promiscuous mode [ 69.993913][ T4284] device hsr_slave_1 entered promiscuous mode [ 70.001438][ T4276] team0: Port device team_slave_1 added [ 70.012983][ T4285] team0: Port device team_slave_1 added [ 70.021432][ T4280] device hsr_slave_0 entered promiscuous mode [ 70.028244][ T4280] device hsr_slave_1 entered promiscuous mode [ 70.035158][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.043045][ T4280] Cannot create hsr debugfs directory [ 70.104695][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.111893][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.140869][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.152803][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.159765][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.185811][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.200508][ T4275] device hsr_slave_0 entered promiscuous mode [ 70.207987][ T4275] device hsr_slave_1 entered promiscuous mode [ 70.214871][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.222715][ T4275] Cannot create hsr debugfs directory [ 70.243069][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.250040][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.278763][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.290498][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.297609][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.323588][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.438145][ T4276] device hsr_slave_0 entered promiscuous mode [ 70.445241][ T4276] device hsr_slave_1 entered promiscuous mode [ 70.451709][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.459276][ T4276] Cannot create hsr debugfs directory [ 70.462811][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 70.464911][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 70.470774][ T4292] Bluetooth: hci4: command 0x0409 tx timeout [ 70.476774][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 70.482959][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 70.548967][ T4285] device hsr_slave_0 entered promiscuous mode [ 70.555638][ T4285] device hsr_slave_1 entered promiscuous mode [ 70.562437][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.570009][ T4285] Cannot create hsr debugfs directory [ 70.796408][ T4280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.810146][ T4280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.825583][ T4280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.837515][ T4280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.864263][ T4284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.884081][ T4284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.894686][ T4284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.909172][ T4284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.968588][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.994411][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.003925][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.027273][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.067110][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.084799][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.096983][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.108966][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.124232][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.145277][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.166501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.177413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.187157][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.193968][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.222460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.231120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.240801][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.248367][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.258691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.267724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.280495][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.287588][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.295522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.304314][ T4285] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.315367][ T4285] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.325177][ T4285] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.351393][ T4285] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.361253][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.410062][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.419100][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.428029][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.449887][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.479465][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.490660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.501484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.531424][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.543880][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.555212][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.567860][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.586778][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.595176][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.619835][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.632500][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.640372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.651437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.660607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.672860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.681127][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.688203][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.696423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.705710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.723757][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.736977][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.768976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.778128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.792523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.800859][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.807970][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.816734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.826331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.837086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.853260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.866889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.875643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.884700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.915236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.924900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.939063][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.946230][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.961189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.975666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.992344][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.999463][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.007168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.016712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.029242][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.051536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.060154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.068621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.079949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.090876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.100400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.109225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.118783][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.128919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.139708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.152560][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.174041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.182464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.190931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.200451][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.207576][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.215758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.225644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.234300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.244250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.253013][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.260073][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.268909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.277378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.300205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.308753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.323025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.330889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.342653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.351048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.373551][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.396153][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.419880][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.443968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.451486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.481392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.496560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.511185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.526524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.541925][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 72.542327][ T4292] Bluetooth: hci4: command 0x041b tx timeout [ 72.547933][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 72.554323][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 72.560515][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 72.588159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.620972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.653925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.673242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.693136][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.700253][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.738449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.747401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.756476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.782176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.814223][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.826486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.844006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.853918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.863300][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.870403][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.878968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.887835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.896613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.905594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.918870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.928507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.937460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.948026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.956653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.996776][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.009418][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.043841][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.077400][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.088438][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.116596][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.195158][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.204654][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.250359][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.272503][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.304292][ T4284] device veth0_vlan entered promiscuous mode [ 73.323472][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.338152][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.348451][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.363922][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.415130][ T4284] device veth1_vlan entered promiscuous mode [ 73.425812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.435523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.444533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.460042][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.491340][ T4280] device veth0_vlan entered promiscuous mode [ 73.506566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.523289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.542848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.567109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.576150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.606375][ T4284] device veth0_macvtap entered promiscuous mode [ 73.623594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.636846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.648239][ T4284] device veth1_macvtap entered promiscuous mode [ 73.669097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.677187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.685427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.694086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.701478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.710643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.723325][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.740574][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.749560][ T4280] device veth1_vlan entered promiscuous mode [ 73.767529][ T4275] device veth0_vlan entered promiscuous mode [ 73.778301][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.787030][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.795731][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.804564][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.813327][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.821604][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.830121][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.841616][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.859398][ T4275] device veth1_vlan entered promiscuous mode [ 73.872237][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.880424][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.888924][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.897996][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.906913][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.914564][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.925152][ T4284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.934429][ T4284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.943655][ T4284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.952803][ T4284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.968871][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.027982][ T4280] device veth0_macvtap entered promiscuous mode [ 74.044218][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.053650][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.068622][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.077266][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.086061][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.094995][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.112943][ T4280] device veth1_macvtap entered promiscuous mode [ 74.146244][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.154963][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.163490][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.171649][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.189564][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.200759][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.216554][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.247829][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.258579][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.270274][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.286423][ T4276] device veth0_vlan entered promiscuous mode [ 74.302593][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.311320][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.320502][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.329774][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.338802][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.348926][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.365029][ T4280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.374787][ T4280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.384879][ T4280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.393643][ T4280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.416933][ T4276] device veth1_vlan entered promiscuous mode [ 74.426434][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.439109][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.447737][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.457291][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.466417][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.476341][ T4275] device veth0_macvtap entered promiscuous mode [ 74.496973][ T4285] device veth0_vlan entered promiscuous mode [ 74.512429][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.523131][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.531114][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.539263][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.573376][ T4275] device veth1_macvtap entered promiscuous mode [ 74.587480][ T4285] device veth1_vlan entered promiscuous mode [ 74.601611][ T4276] device veth0_macvtap entered promiscuous mode [ 74.611018][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.622030][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 74.628056][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 74.631497][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 74.639746][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 74.640126][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 74.657770][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.660353][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.676082][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.685957][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.696667][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.708785][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.723658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.732496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.740524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.749941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.758825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.767677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.776337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.786779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.800884][ T4276] device veth1_macvtap entered promiscuous mode [ 74.812680][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.823690][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.833733][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.844728][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.856584][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.893690][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.903351][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.911227][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.920247][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.948609][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.964688][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.971959][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.980268][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.995476][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.006541][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.016672][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.027487][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.040381][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.054435][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.064096][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.074268][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.082973][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.091441][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.111294][ T4285] device veth0_macvtap entered promiscuous mode [ 75.139215][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.148463][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.158522][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.167603][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.224236][ T4285] device veth1_macvtap entered promiscuous mode [ 75.246996][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.260996][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.279342][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.291086][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.303230][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.313212][ T4358] kAFS: No cell specified [ 75.314496][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.328149][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.338864][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.373456][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.392285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.401212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.410532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.419104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.429415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.474807][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.489863][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.498991][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.548957][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.571184][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.589962][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.601183][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.614147][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.624717][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.640543][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.651358][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.670184][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.691463][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.707620][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.717359][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.737636][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.761383][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.788445][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.803202][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.821209][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.839219][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.850307][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.865814][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.877667][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.894940][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.910345][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.926725][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.012510][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.034505][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.053923][ T4285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.074622][ T4285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.089259][ T4285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.107613][ T4285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.204571][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.231871][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.313818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.322742][ T4367] trusted_key: encrypted_key: insufficient parameters specified [ 76.706816][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 76.722296][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 76.730414][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 76.739360][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 76.747041][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 77.052684][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.053577][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.086798][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.089330][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.191716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 77.201716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 77.931719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 77.941713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 77.951711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 77.961720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 77.971708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 77.981711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 77.991708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 78.001709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 79.361688][ C0] sched: RT throttling activated [ 79.450872][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.472276][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.565138][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.592056][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.633031][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.667337][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.686493][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.715359][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.751500][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.773818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.817969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.249526][ T4387] loop0: detected capacity change from 0 to 4096 [ 80.486431][ T4387] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 80.507417][ T4391] trusted_key: encrypted_key: insufficient parameters specified [ 81.088557][ T4387] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 81.199504][ T4387] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 81.206264][ T4387] loop0: [ 81.623160][ T4403] kAFS: No cell specified [ 82.302320][ T4324] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.592978][ T4324] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 85.036421][ T4324] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 85.048208][ T4324] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 85.061018][ T4324] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 85.081961][ T4324] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 85.091031][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.203148][ T4324] usb 4-1: can't set config #1, error -71 [ 85.291342][ T4324] usb 4-1: USB disconnect, device number 2 [ 86.576258][ T14] cfg80211: failed to load regulatory.db [ 86.884638][ T4437] input: syz0 as /devices/virtual/input/input5 [ 87.454195][ T4448] kAFS: No cell specified [ 87.481035][ T4447] trusted_key: encrypted_key: insufficient parameters specified [ 91.858029][ T4489] trusted_key: encrypted_key: insufficient parameters specified [ 92.551426][ T4500] using random self ethernet address [ 92.608576][ T4500] using random host ethernet address [ 92.619301][ T4496] Config c/1 of g1 needs at least one function. [ 92.628318][ T4496] udc dummy_udc.0: failed to start g1: -22 [ 92.872904][ T4496] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 92.890965][ T4496] UDC core: g1: couldn't find an available UDC or it's busy [ 93.007036][ T4505] size and base must be multiples of 4 kiB [ 93.012932][ T4505] CPU: 1 PID: 4505 Comm: syz.0.37 Not tainted syzkaller #0 [ 93.020141][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.030207][ T4505] Call Trace: [ 93.033485][ T4505] [ 93.036414][ T4505] dump_stack_lvl+0x188/0x24e [ 93.041135][ T4505] ? __might_fault+0xa6/0x120 [ 93.045817][ T4505] ? show_regs_print_info+0x12/0x12 [ 93.051018][ T4505] ? load_image+0x410/0x410 [ 93.055521][ T4505] ? tomoyo_path_number_perm+0x5a4/0x650 [ 93.061156][ T4505] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 93.066615][ T4505] ? __might_fault+0xa6/0x120 [ 93.071297][ T4505] ? __might_fault+0xc2/0x120 [ 93.075976][ T4505] ? __might_fault+0xa6/0x120 [ 93.080651][ T4505] mtrr_add+0x8e/0xc0 [ 93.084634][ T4505] mtrr_ioctl+0x9bf/0x1140 [ 93.089055][ T4505] ? mtrr_close+0x1f0/0x1f0 [ 93.093565][ T4505] ? __fget_files+0x28/0x460 [ 93.098169][ T4505] ? mtrr_close+0x1f0/0x1f0 [ 93.102672][ T4505] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 93.108136][ T4505] ? proc_reg_poll+0x280/0x280 [ 93.112906][ T4505] __se_sys_ioctl+0xfa/0x170 [ 93.117502][ T4505] do_syscall_64+0x4c/0xa0 [ 93.121924][ T4505] ? clear_bhb_loop+0x60/0xb0 [ 93.126602][ T4505] ? clear_bhb_loop+0x60/0xb0 [ 93.131280][ T4505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.137173][ T4505] RIP: 0033:0x7f94d899e159 [ 93.141598][ T4505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.161204][ T4505] RSP: 002b:00007f94d981c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.169624][ T4505] RAX: ffffffffffffffda RBX: 00007f94d8c26180 RCX: 00007f94d899e159 [ 93.177594][ T4505] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 93.185562][ T4505] RBP: 00007f94d8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 93.193526][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.201492][ T4505] R13: 00007f94d8c26218 R14: 00007f94d8c26180 R15: 00007ffdb2b72cf8 [ 93.209472][ T4505] [ 93.413955][ T4505] netlink: 'syz.0.37': attribute type 4 has an invalid length. [ 94.163741][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.400660][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 94.748318][ T27] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 94.759719][ T27] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 94.769916][ T27] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 94.780062][ T27] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 94.803001][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.876303][ T4508] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.112632][ T4508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.122584][ T4508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.157650][ T27] ims_pcu 4-1:1.0: Failed to set line coding, error: -71 [ 95.179914][ T27] ims_pcu: probe of 4-1:1.0 failed with error -71 [ 95.227560][ T27] usb 4-1: USB disconnect, device number 3 [ 95.588701][ T4534] loop0: detected capacity change from 0 to 4096 [ 95.765005][ T4534] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 95.802527][ T4534] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 95.814037][ T4538] trusted_key: encrypted_key: insufficient parameters specified [ 96.364715][ T4534] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 96.442845][ T4534] loop0: [ 97.340271][ T4548] size and base must be multiples of 4 kiB [ 97.346224][ T4548] CPU: 0 PID: 4548 Comm: syz.2.51 Not tainted syzkaller #0 [ 97.353441][ T4548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.363508][ T4548] Call Trace: [ 97.366792][ T4548] [ 97.369733][ T4548] dump_stack_lvl+0x188/0x24e [ 97.374439][ T4548] ? __might_fault+0xa6/0x120 [ 97.379129][ T4548] ? show_regs_print_info+0x12/0x12 [ 97.384348][ T4548] ? load_image+0x410/0x410 [ 97.388865][ T4548] ? tomoyo_path_number_perm+0x5a4/0x650 [ 97.394526][ T4548] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 97.400009][ T4548] ? __might_fault+0xa6/0x120 [ 97.404709][ T4548] ? __might_fault+0xc2/0x120 [ 97.409406][ T4548] ? __might_fault+0xa6/0x120 [ 97.414107][ T4548] mtrr_add+0x8e/0xc0 [ 97.418121][ T4548] mtrr_ioctl+0x9bf/0x1140 [ 97.422578][ T4548] ? mtrr_close+0x1f0/0x1f0 [ 97.427117][ T4548] ? __fget_files+0x28/0x460 [ 97.431739][ T4548] ? mtrr_close+0x1f0/0x1f0 [ 97.433559][ T4549] netlink: 'syz.2.51': attribute type 4 has an invalid length. [ 97.436242][ T4548] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 97.449253][ T4548] ? proc_reg_poll+0x280/0x280 [ 97.454048][ T4548] __se_sys_ioctl+0xfa/0x170 [ 97.458667][ T4548] do_syscall_64+0x4c/0xa0 [ 97.463111][ T4548] ? clear_bhb_loop+0x60/0xb0 [ 97.467813][ T4548] ? clear_bhb_loop+0x60/0xb0 [ 97.472524][ T4548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.478440][ T4548] RIP: 0033:0x7f76d479e159 [ 97.482871][ T4548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.491046][ T4552] usb0: HOST MAC ee:42:14:34:6c:0b [ 97.502478][ T4548] RSP: 002b:00007f76d56da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.502504][ T4548] RAX: ffffffffffffffda RBX: 00007f76d4a26090 RCX: 00007f76d479e159 [ 97.502519][ T4548] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 97.502532][ T4548] RBP: 00007f76d4835024 R08: 0000000000000000 R09: 0000000000000000 [ 97.502545][ T4548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.502557][ T4548] R13: 00007f76d4a26128 R14: 00007f76d4a26090 R15: 00007ffe036d0518 [ 97.502584][ T4548] [ 97.502641][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.559181][ T4552] usb0: MAC 1e:6e:63:43:4c:f1 [ 97.565051][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.928398][ T4566] loop0: detected capacity change from 0 to 3904 [ 97.941866][ T955] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.064256][ T4566] loop0: [ 98.748294][ T955] usb 1-1: Dual-Role OTG device on HNP port [ 98.770520][ T955] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 99.331815][ T4323] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.535751][ T4323] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 99.553016][ T4323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.600670][ T4323] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 99.641758][ T955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.648702][ T4323] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 99.700381][ T4323] usb 5-1: Manufacturer: syz [ 99.741600][ T4323] usb 5-1: config 0 descriptor?? [ 99.794279][ T3639] loop0: [ 99.898601][ T955] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, ee:42:14:34:6c:0b [ 99.966625][ T4582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.002016][ T4582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.040379][ T4582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.100306][ T4582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.152017][ T4323] rc_core: IR keymap rc-hauppauge not found [ 100.157964][ T4323] Registered IR keymap rc-empty [ 100.195314][ T4323] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 100.238104][ T4323] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 100.370441][ T4323] usb 5-1: USB disconnect, device number 2 [ 101.480101][ T4618] netlink: 'syz.2.65': attribute type 4 has an invalid length. [ 101.819170][ T26] audit: type=1326 audit(1788285175.467:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4630 comm="syz.4.70" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f963519e159 code=0x0 [ 102.205519][ T4639] loop0: detected capacity change from 0 to 3904 [ 102.274942][ T4639] loop0: [ 102.991698][ T4647] loop0: detected capacity change from 0 to 4096 [ 103.071525][ T4647] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 103.112076][ T4647] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 103.165794][ T4647] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 103.215493][ T4647] loop0: [ 103.695422][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.734753][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.770035][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.836045][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.952946][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.995625][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.279455][ T4676] FAULT_INJECTION: forcing a failure. [ 105.279455][ T4676] name failslab, interval 1, probability 0, space 0, times 1 [ 105.321770][ T4676] CPU: 0 PID: 4676 Comm: syz.1.82 Not tainted syzkaller #0 [ 105.329029][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.339097][ T4676] Call Trace: [ 105.342373][ T4676] [ 105.345302][ T4676] dump_stack_lvl+0x188/0x24e [ 105.349986][ T4676] ? show_regs_print_info+0x12/0x12 [ 105.355197][ T4676] ? load_image+0x410/0x410 [ 105.359700][ T4676] ? __might_sleep+0xd0/0xd0 [ 105.364284][ T4676] ? __lock_acquire+0x7c40/0x7c40 [ 105.369319][ T4676] should_fail_ex+0x390/0x4c0 [ 105.374001][ T4676] should_failslab+0x5/0x20 [ 105.378503][ T4676] slab_pre_alloc_hook+0x59/0x300 [ 105.383525][ T4676] ? vfs_write+0x777/0x9a0 [ 105.388031][ T4676] kmem_cache_alloc+0x56/0x2f0 [ 105.392788][ T4676] ? getname_flags+0xb7/0x500 [ 105.397463][ T4676] getname_flags+0xb7/0x500 [ 105.401962][ T4676] do_sys_openat2+0xdd/0x4f0 [ 105.406552][ T4676] ? do_sys_open+0xe0/0xe0 [ 105.410964][ T4676] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 105.416947][ T4676] ? lock_chain_count+0x20/0x20 [ 105.421800][ T4676] __x64_sys_openat+0x135/0x160 [ 105.426653][ T4676] do_syscall_64+0x4c/0xa0 [ 105.431069][ T4676] ? clear_bhb_loop+0x60/0xb0 [ 105.435746][ T4676] ? clear_bhb_loop+0x60/0xb0 [ 105.440424][ T4676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.446316][ T4676] RIP: 0033:0x7eff3a19e159 [ 105.450726][ T4676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.470326][ T4676] RSP: 002b:00007eff3b08e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.478737][ T4676] RAX: ffffffffffffffda RBX: 00007eff3a425fa0 RCX: 00007eff3a19e159 [ 105.486703][ T4676] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 105.494666][ T4676] RBP: 00007eff3a235024 R08: 0000000000000000 R09: 0000000000000000 [ 105.502628][ T4676] R10: 000000000000016f R11: 0000000000000246 R12: 0000000000000000 [ 105.510589][ T4676] R13: 00007eff3a426038 R14: 00007eff3a425fa0 R15: 00007ffe2f1c9bb8 [ 105.518564][ T4676] [ 105.521640][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.608432][ T4677] process 'syz.1.82' launched './file0' with NULL argv: empty string added [ 105.668366][ T4680] Bluetooth: MGMT ver 1.22 [ 105.690289][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.83'. [ 105.715642][ T4680] netlink: 88 bytes leftover after parsing attributes in process `syz.4.83'. [ 105.731864][ T4680] netlink: 48 bytes leftover after parsing attributes in process `syz.4.83'. [ 106.102734][ T26] audit: type=1326 audit(1788285179.757:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4679 comm="syz.2.84" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76d479e159 code=0x0 [ 106.422210][ T4701] loop0: detected capacity change from 0 to 4096 [ 106.635046][ T4701] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 106.644771][ T4701] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 106.655097][ T4701] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 106.667699][ T4701] loop0: [ 107.185600][ T4717] trusted_key: encrypted_key: insufficient parameters specified [ 109.631770][ T4321] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.633807][ T4740] FAULT_INJECTION: forcing a failure. [ 109.633807][ T4740] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 109.740372][ T4740] CPU: 0 PID: 4740 Comm: syz.1.97 Not tainted syzkaller #0 [ 109.747650][ T4740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.757727][ T4740] Call Trace: [ 109.761022][ T4740] [ 109.763964][ T4740] dump_stack_lvl+0x188/0x24e [ 109.768678][ T4740] ? show_regs_print_info+0x12/0x12 [ 109.773907][ T4740] ? load_image+0x410/0x410 [ 109.778443][ T4740] ? __lock_acquire+0x7c40/0x7c40 [ 109.783509][ T4740] should_fail_ex+0x390/0x4c0 [ 109.788222][ T4740] prepare_alloc_pages+0x1e1/0x5b0 [ 109.793370][ T4740] __alloc_pages+0x130/0x4f0 [ 109.797990][ T4740] ? zone_statistics+0x170/0x170 [ 109.802960][ T4740] ? __lock_acquire+0x7c40/0x7c40 [ 109.808020][ T4740] __folio_alloc+0xe/0x30 [ 109.812376][ T4740] vma_alloc_folio+0x499/0x900 [ 109.817170][ T4740] handle_mm_fault+0x1fe3/0x3d40 [ 109.822139][ T4740] ? numa_migrate_prep+0x250/0x250 [ 109.827278][ T4740] ? vma_is_secretmem+0x9/0x40 [ 109.832066][ T4740] ? check_vma_flags+0x340/0x4c0 [ 109.837031][ T4740] __get_user_pages+0x40d/0xec0 [ 109.841914][ T4740] ? populate_vma_page_range+0x2b0/0x2b0 [ 109.843451][ T4321] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 109.847558][ T4740] ? __might_sleep+0xd0/0xd0 [ 109.847584][ T4740] ? read_lock_is_recursive+0x10/0x10 [ 109.847615][ T4740] __get_user_pages_remote+0x1c2/0x730 [ 109.867986][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.871316][ T4740] ? get_user_pages_remote+0x55/0xa0 [ 109.886327][ T4740] get_arg_page+0x1ca/0x410 [ 109.890853][ T4740] ? copy_string_kernel+0x220/0x220 [ 109.896074][ T4740] ? up_write+0x1b6/0x410 [ 109.900424][ T4740] ? alloc_bprm+0x37a/0x710 [ 109.904963][ T4740] copy_string_kernel+0x161/0x220 [ 109.910015][ T4740] do_execveat_common+0x35d/0x6b0 [ 109.915068][ T4740] __x64_sys_execve+0x8e/0xa0 [ 109.919777][ T4740] do_syscall_64+0x4c/0xa0 [ 109.922672][ T4321] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 109.924205][ T4740] ? clear_bhb_loop+0x60/0xb0 [ 109.924238][ T4740] ? clear_bhb_loop+0x60/0xb0 [ 109.942598][ T4740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.948516][ T4740] RIP: 0033:0x7eff3a19e159 [ 109.952943][ T4740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.961785][ T4321] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 109.972546][ T4740] RSP: 002b:00007eff3b08e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 109.972571][ T4740] RAX: ffffffffffffffda RBX: 00007eff3a425fa0 RCX: 00007eff3a19e159 [ 109.972586][ T4740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 109.972598][ T4740] RBP: 00007eff3a235024 R08: 0000000000000000 R09: 0000000000000000 [ 109.972609][ T4740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.972621][ T4740] R13: 00007eff3a426038 R14: 00007eff3a425fa0 R15: 00007ffe2f1c9bb8 [ 109.972649][ T4740] [ 110.004474][ T4321] usb 3-1: Manufacturer: syz [ 110.047030][ T4321] usb 3-1: config 0 descriptor?? [ 110.274913][ T4735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.310906][ T4735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.357305][ T4321] rc_core: IR keymap rc-hauppauge not found [ 110.363307][ T4321] Registered IR keymap rc-empty [ 110.372102][ T4321] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 110.375279][ T4735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.384259][ T4321] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 110.432032][ T4735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.567303][ T14] usb 3-1: USB disconnect, device number 2 [ 111.222157][ T4761] netlink: 64 bytes leftover after parsing attributes in process `syz.2.99'. [ 111.424174][ T4771] loop0: detected capacity change from 0 to 4096 [ 112.601979][ T4771] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 112.611493][ T4771] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 112.622306][ T4771] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 112.628960][ T4771] loop0: [ 112.904983][ T4779] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.043894][ T4780] trusted_key: encrypted_key: insufficient parameters specified [ 114.584353][ T4792] FAULT_INJECTION: forcing a failure. [ 114.584353][ T4792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 114.605108][ T4792] CPU: 1 PID: 4792 Comm: syz.4.108 Not tainted syzkaller #0 [ 114.612449][ T4792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.622523][ T4792] Call Trace: [ 114.625814][ T4792] [ 114.628751][ T4792] dump_stack_lvl+0x188/0x24e [ 114.633463][ T4792] ? show_regs_print_info+0x12/0x12 [ 114.638784][ T4792] ? load_image+0x410/0x410 [ 114.643315][ T4792] ? __lock_acquire+0x7c40/0x7c40 [ 114.648369][ T4792] should_fail_ex+0x390/0x4c0 [ 114.653058][ T4792] prepare_alloc_pages+0x1e1/0x5b0 [ 114.658180][ T4792] __alloc_pages+0x130/0x4f0 [ 114.662813][ T4792] ? zone_statistics+0x170/0x170 [ 114.667757][ T4792] ? __lock_acquire+0x7c40/0x7c40 [ 114.672791][ T4792] __folio_alloc+0xe/0x30 [ 114.677127][ T4792] vma_alloc_folio+0x499/0x900 [ 114.681900][ T4792] handle_mm_fault+0x1fe3/0x3d40 [ 114.686848][ T4792] ? numa_migrate_prep+0x250/0x250 [ 114.692026][ T4792] ? vma_is_secretmem+0x9/0x40 [ 114.696808][ T4792] ? check_vma_flags+0x340/0x4c0 [ 114.701753][ T4792] __get_user_pages+0x40d/0xec0 [ 114.706623][ T4792] ? populate_vma_page_range+0x2b0/0x2b0 [ 114.712263][ T4792] ? __might_sleep+0xd0/0xd0 [ 114.716848][ T4792] ? read_lock_is_recursive+0x10/0x10 [ 114.722231][ T4792] __get_user_pages_remote+0x1c2/0x730 [ 114.727703][ T4792] ? get_user_pages_remote+0x55/0xa0 [ 114.732990][ T4792] get_arg_page+0x1ca/0x410 [ 114.737498][ T4792] ? copy_string_kernel+0x220/0x220 [ 114.742694][ T4792] ? up_write+0x1b6/0x410 [ 114.747023][ T4792] ? alloc_bprm+0x37a/0x710 [ 114.751529][ T4792] copy_string_kernel+0x161/0x220 [ 114.756564][ T4792] do_execveat_common+0x35d/0x6b0 [ 114.761600][ T4792] __x64_sys_execve+0x8e/0xa0 [ 114.766283][ T4792] do_syscall_64+0x4c/0xa0 [ 114.770703][ T4792] ? clear_bhb_loop+0x60/0xb0 [ 114.775379][ T4792] ? clear_bhb_loop+0x60/0xb0 [ 114.780148][ T4792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.786055][ T4792] RIP: 0033:0x7f963519e159 [ 114.790473][ T4792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.810082][ T4792] RSP: 002b:00007f9636019028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 114.818506][ T4792] RAX: ffffffffffffffda RBX: 00007f9635425fa0 RCX: 00007f963519e159 [ 114.826485][ T4792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 114.834462][ T4792] RBP: 00007f9635235024 R08: 0000000000000000 R09: 0000000000000000 [ 114.842432][ T4792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.850411][ T4792] R13: 00007f9635426038 R14: 00007f9635425fa0 R15: 00007ffd652c2158 [ 114.858394][ T4792] [ 115.351993][ T3599] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.524214][ T3599] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 116.571849][ T3599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.603708][ T3599] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 116.631928][ T3599] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 116.660388][ T3599] usb 4-1: Manufacturer: syz [ 116.672793][ T3599] usb 4-1: config 0 descriptor?? [ 116.892928][ T4797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.921860][ T3599] rc_core: IR keymap rc-hauppauge not found [ 116.927810][ T3599] Registered IR keymap rc-empty [ 116.934649][ T4797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.964031][ T3599] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 116.995415][ T4797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.016666][ T3599] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 117.039233][ T4797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.063996][ T3599] usb 4-1: USB disconnect, device number 4 [ 117.385886][ T26] audit: type=1800 audit(1788285190.997:4): pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.113" name="memory_backed" dev="configfs" ino=87558 res=0 errno=0 [ 117.782016][ T26] audit: type=1800 audit(1788285191.007:5): pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.113" name="power" dev="configfs" ino=87559 res=0 errno=0 [ 119.267226][ T4834] loop0: detected capacity change from 0 to 4096 [ 120.483920][ T4840] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 120.534387][ T4840] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 120.585314][ T4840] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 120.621887][ T4840] loop0: [ 120.956449][ T4845] FAULT_INJECTION: forcing a failure. [ 120.956449][ T4845] name failslab, interval 1, probability 0, space 0, times 0 [ 120.999850][ T4845] CPU: 0 PID: 4845 Comm: syz.2.120 Not tainted syzkaller #0 [ 121.007198][ T4845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.017282][ T4845] Call Trace: [ 121.020578][ T4845] [ 121.023521][ T4845] dump_stack_lvl+0x188/0x24e [ 121.028243][ T4845] ? show_regs_print_info+0x12/0x12 [ 121.033478][ T4845] ? load_image+0x410/0x410 [ 121.038011][ T4845] ? __might_sleep+0xd0/0xd0 [ 121.042629][ T4845] ? __lock_acquire+0x7c40/0x7c40 [ 121.047688][ T4845] should_fail_ex+0x390/0x4c0 [ 121.052402][ T4845] should_failslab+0x5/0x20 [ 121.056925][ T4845] slab_pre_alloc_hook+0x59/0x300 [ 121.061978][ T4845] ? vfs_write+0x777/0x9a0 [ 121.066425][ T4845] kmem_cache_alloc+0x56/0x2f0 [ 121.071211][ T4845] ? getname_flags+0xb7/0x500 [ 121.075910][ T4845] getname_flags+0xb7/0x500 [ 121.080438][ T4845] do_sys_openat2+0xdd/0x4f0 [ 121.085059][ T4845] ? do_sys_open+0xe0/0xe0 [ 121.089499][ T4845] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.095512][ T4845] ? lock_chain_count+0x20/0x20 [ 121.100396][ T4845] __x64_sys_openat+0x135/0x160 [ 121.105279][ T4845] do_syscall_64+0x4c/0xa0 [ 121.109715][ T4845] ? clear_bhb_loop+0x60/0xb0 [ 121.114413][ T4845] ? clear_bhb_loop+0x60/0xb0 [ 121.119111][ T4845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.125024][ T4845] RIP: 0033:0x7f76d479e159 [ 121.129457][ T4845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.149085][ T4845] RSP: 002b:00007f76d56fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.157520][ T4845] RAX: ffffffffffffffda RBX: 00007f76d4a25fa0 RCX: 00007f76d479e159 [ 121.165514][ T4845] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 121.173499][ T4845] RBP: 00007f76d4835024 R08: 0000000000000000 R09: 0000000000000000 [ 121.181482][ T4845] R10: 000000000000016f R11: 0000000000000246 R12: 0000000000000000 [ 121.189467][ T4845] R13: 00007f76d4a26038 R14: 00007f76d4a25fa0 R15: 00007ffe036d0518 [ 121.197475][ T4845] [ 124.226234][ T4323] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.453233][ T4323] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.496828][ T4323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.522737][ T4323] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.563175][ T4323] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.571217][ T4323] usb 3-1: Manufacturer: syz [ 124.618511][ T4323] usb 3-1: config 0 descriptor?? [ 124.868561][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.912907][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.117245][ T4867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.212592][ T4867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.511824][ T4323] rc_core: IR keymap rc-hauppauge not found [ 125.531736][ T4323] Registered IR keymap rc-empty [ 125.562359][ T4323] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 125.620981][ T4323] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 125.803895][ T4900] trusted_key: encrypted_key: insufficient parameters specified [ 126.088566][ T4323] usb 3-1: USB disconnect, device number 3 [ 127.773832][ T4913] loop0: detected capacity change from 0 to 4096 [ 127.897155][ T4913] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 127.982542][ T4913] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 128.024849][ T4913] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 128.065950][ T4913] loop0: [ 128.906615][ T26] audit: type=1800 audit(1788285201.987:6): pid=4922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.126" name="memory_backed" dev="configfs" ino=87731 res=0 errno=0 [ 129.776695][ T26] audit: type=1800 audit(1788285201.987:7): pid=4922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.126" name="power" dev="configfs" ino=87732 res=0 errno=0 [ 130.946120][ T4950] trusted_key: encrypted_key: insufficient parameters specified [ 131.151880][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.519967][ T7] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 131.651790][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.708729][ T7] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 131.735571][ T7] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 132.862088][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.868433][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.890427][ T7] usb 5-1: Manufacturer: syz [ 132.976327][ T7] usb 5-1: config 0 descriptor?? [ 133.200215][ T4949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.012119][ T4949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.171846][ T7] rc_core: IR keymap rc-hauppauge not found [ 135.177807][ T7] Registered IR keymap rc-empty [ 135.206376][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 135.406527][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 135.468077][ T4978] trusted_key: encrypted_key: insufficient parameters specified [ 136.045606][ T7] usb 5-1: USB disconnect, device number 3 [ 136.481842][ T4321] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.693608][ T4321] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.713404][ T4321] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 136.972308][ T4321] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 136.981457][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.004756][ T4321] usb 4-1: Product: syz [ 137.009235][ T5002] trusted_key: encrypted_key: insufficient parameters specified [ 137.702094][ T4321] usb 4-1: Manufacturer: syz [ 137.706792][ T4321] usb 4-1: SerialNumber: syz [ 137.957428][ T4321] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 138.031927][ T26] audit: type=1800 audit(1788285211.557:8): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.154" name="memory_backed" dev="configfs" ino=88312 res=0 errno=0 [ 138.053273][ T26] audit: type=1800 audit(1788285211.557:9): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.154" name="power" dev="configfs" ino=88313 res=0 errno=0 [ 138.395472][ T14] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 138.409983][ T5012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.414505][ T14] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 139.563618][ T14] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 139.571413][ T14] i801_smbus 0000:00:01.3: PCI INT A: no GSI [ 139.581802][ T14] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS [ 139.612451][ T5012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.695632][ T14] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 139.701143][ T14] i801_smbus 0000:00:05.0: SMBus base address uninitialized, upgrade BIOS [ 139.843081][ T4321] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 139.992136][ T4321] usb 4-1: USB disconnect, device number 5 [ 140.591943][ T4321] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.886897][ T4321] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 140.955774][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.102435][ T4321] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 141.111534][ T4321] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 141.131699][ T4321] usb 4-1: Manufacturer: syz [ 141.138719][ T4321] usb 4-1: config 0 descriptor?? [ 141.445684][ T5029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.470149][ T5029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.479887][ T4321] rc_core: IR keymap rc-hauppauge not found [ 141.502397][ T4321] Registered IR keymap rc-empty [ 141.518468][ T4321] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 141.538318][ T4321] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 141.852253][ T5029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.936819][ T4354] udevd[4354]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.012397][ T5029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.163810][ T7] usb 4-1: USB disconnect, device number 6 [ 142.218104][ T5052] size and base must be multiples of 4 kiB [ 142.226451][ T5052] CPU: 0 PID: 5052 Comm: syz.2.162 Not tainted syzkaller #0 [ 142.233768][ T5052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.243828][ T5052] Call Trace: [ 142.247115][ T5052] [ 142.250042][ T5052] dump_stack_lvl+0x188/0x24e [ 142.254730][ T5052] ? __might_fault+0xa6/0x120 [ 142.259412][ T5052] ? show_regs_print_info+0x12/0x12 [ 142.264621][ T5052] ? load_image+0x410/0x410 [ 142.269126][ T5052] ? tomoyo_path_number_perm+0x5a4/0x650 [ 142.274778][ T5052] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 142.280239][ T5052] ? __might_fault+0xa6/0x120 [ 142.284913][ T5052] ? __might_fault+0xc2/0x120 [ 142.289589][ T5052] ? __might_fault+0xa6/0x120 [ 142.294265][ T5052] mtrr_add+0x8e/0xc0 [ 142.298251][ T5052] mtrr_ioctl+0x9bf/0x1140 [ 142.302676][ T5052] ? mtrr_close+0x1f0/0x1f0 [ 142.307188][ T5052] ? __fget_files+0x28/0x460 [ 142.311789][ T5052] ? mtrr_close+0x1f0/0x1f0 [ 142.316294][ T5052] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 142.321766][ T5052] ? proc_reg_poll+0x280/0x280 [ 142.326534][ T5052] __se_sys_ioctl+0xfa/0x170 [ 142.331128][ T5052] do_syscall_64+0x4c/0xa0 [ 142.335550][ T5052] ? clear_bhb_loop+0x60/0xb0 [ 142.340247][ T5052] ? clear_bhb_loop+0x60/0xb0 [ 142.344942][ T5052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.350882][ T5052] RIP: 0033:0x7f76d479e159 [ 142.355305][ T5052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.374916][ T5052] RSP: 002b:00007f76d56b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.383337][ T5052] RAX: ffffffffffffffda RBX: 00007f76d4a26180 RCX: 00007f76d479e159 [ 142.391311][ T5052] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 142.399310][ T5052] RBP: 00007f76d4835024 R08: 0000000000000000 R09: 0000000000000000 [ 142.407278][ T5052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.415271][ T5052] R13: 00007f76d4a26218 R14: 00007f76d4a26180 R15: 00007ffe036d0518 [ 142.423256][ T5052] [ 142.433075][ T5052] netlink: 'syz.2.162': attribute type 4 has an invalid length. [ 145.071841][ T26] audit: type=1800 audit(1788285218.697:10): pid=5070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.166" name="memory_backed" dev="configfs" ino=89134 res=0 errno=0 [ 147.779946][ T26] audit: type=1800 audit(1788285218.697:11): pid=5070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.166" name="power" dev="configfs" ino=89135 res=0 errno=0 [ 148.545779][ T5088] Zero length message leads to an empty skb [ 148.937669][ T5094] size and base must be multiples of 4 kiB [ 148.943861][ T5094] CPU: 1 PID: 5094 Comm: syz.2.175 Not tainted syzkaller #0 [ 148.951154][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.961211][ T5094] Call Trace: [ 148.964486][ T5094] [ 148.967411][ T5094] dump_stack_lvl+0x188/0x24e [ 148.972103][ T5094] ? __might_fault+0xa6/0x120 [ 148.976779][ T5094] ? show_regs_print_info+0x12/0x12 [ 148.982010][ T5094] ? load_image+0x410/0x410 [ 148.986511][ T5094] ? tomoyo_path_number_perm+0x5a4/0x650 [ 148.992146][ T5094] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 148.997605][ T5094] ? __might_fault+0xa6/0x120 [ 149.002280][ T5094] ? __might_fault+0xc2/0x120 [ 149.006955][ T5094] ? __might_fault+0xa6/0x120 [ 149.011630][ T5094] mtrr_add+0x8e/0xc0 [ 149.015623][ T5094] mtrr_ioctl+0x9bf/0x1140 [ 149.020055][ T5094] ? mtrr_close+0x1f0/0x1f0 [ 149.024571][ T5094] ? __fget_files+0x28/0x460 [ 149.029172][ T5094] ? mtrr_close+0x1f0/0x1f0 [ 149.033677][ T5094] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 149.039146][ T5094] ? proc_reg_poll+0x280/0x280 [ 149.043914][ T5094] __se_sys_ioctl+0xfa/0x170 [ 149.048519][ T5094] do_syscall_64+0x4c/0xa0 [ 149.052945][ T5094] ? clear_bhb_loop+0x60/0xb0 [ 149.057626][ T5094] ? clear_bhb_loop+0x60/0xb0 [ 149.062323][ T5094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.068324][ T5094] RIP: 0033:0x7f76d479e159 [ 149.072775][ T5094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.092393][ T5094] RSP: 002b:00007f76d56b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.100990][ T5094] RAX: ffffffffffffffda RBX: 00007f76d4a26180 RCX: 00007f76d479e159 [ 149.108963][ T5094] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 149.116932][ T5094] RBP: 00007f76d4835024 R08: 0000000000000000 R09: 0000000000000000 [ 149.124915][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.132891][ T5094] R13: 00007f76d4a26218 R14: 00007f76d4a26180 R15: 00007ffe036d0518 [ 149.140885][ T5094] [ 149.150996][ T5094] netlink: 'syz.2.175': attribute type 4 has an invalid length. [ 150.061774][ T128] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.088549][ T5105] wg0 speed is unknown, defaulting to 1000 [ 150.096734][ T5105] wg0 speed is unknown, defaulting to 1000 [ 150.103724][ T5105] wg0 speed is unknown, defaulting to 1000 [ 150.141967][ T5106] netlink: 92 bytes leftover after parsing attributes in process `syz.3.170'. [ 150.167927][ T5105] infiniband syz2: set active [ 150.172803][ T5105] infiniband syz2: added wg0 [ 150.181981][ T27] wg0 speed is unknown, defaulting to 1000 [ 150.213388][ T5107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.239240][ T5105] RDS/IB: syz2: added [ 150.244007][ T5105] smc: adding ib device syz2 with port count 1 [ 150.250255][ T5105] smc: ib device syz2 port 1 has pnetid [ 150.259078][ T5105] wg0 speed is unknown, defaulting to 1000 [ 150.317432][ T5105] wg0 speed is unknown, defaulting to 1000 [ 150.371209][ T5105] wg0 speed is unknown, defaulting to 1000 [ 150.425109][ T5105] wg0 speed is unknown, defaulting to 1000 [ 150.478488][ T5105] wg0 speed is unknown, defaulting to 1000 [ 150.533849][ T27] wg0 speed is unknown, defaulting to 1000 [ 150.563631][ T128] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 150.572356][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.584850][ T128] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 150.594951][ T5107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.631784][ T128] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 150.642027][ T128] usb 3-1: Manufacturer: syz [ 150.664678][ T128] usb 3-1: config 0 descriptor?? [ 150.821777][ T128] rc_core: IR keymap rc-hauppauge not found [ 150.827803][ T128] Registered IR keymap rc-empty [ 150.837779][ T128] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 150.856678][ T128] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 150.880079][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.902920][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 150.911941][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.931748][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.943211][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.973171][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.014936][ T4353] usb 3-1: USB disconnect, device number 4 [ 151.093978][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.104200][ T14] usb 4-1: config 1 interface 1 altsetting 65 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 151.115438][ T14] usb 4-1: config 1 interface 1 has no altsetting 1 [ 151.127132][ T14] usb 4-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 151.136421][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.144706][ T14] usb 4-1: Product: syz [ 151.146785][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 151.148865][ T14] usb 4-1: Manufacturer: syz [ 151.148883][ T14] usb 4-1: SerialNumber: syz [ 151.209850][ T27] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 151.230673][ T27] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 151.239886][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.247990][ T27] usb 2-1: Product: syz [ 151.252318][ T27] usb 2-1: Manufacturer: syz [ 151.256972][ T27] usb 2-1: SerialNumber: syz [ 151.264294][ T27] usb 2-1: config 0 descriptor?? [ 151.270016][ T5112] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 151.277769][ T5112] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 151.286433][ T27] usb 2-1: ucan: probing device on interface #0 [ 151.293817][ T27] usb 2-1: ucan: invalid EP count (1) [ 151.299260][ T27] usb 2-1: ucan: probe failed; try to update the device firmware [ 152.421336][ T4321] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.501551][ T4353] usb 2-1: USB disconnect, device number 2 [ 152.513842][ T14] usb 4-1: 1:65 : no or invalid class specific endpoint descriptor [ 152.581333][ T14] usb 4-1: USB disconnect, device number 7 [ 152.671766][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 152.681369][ T4321] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 152.711146][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.720560][ T5123] loop0: detected capacity change from 0 to 3904 [ 152.732948][ T4321] usb 5-1: Product: syz [ 152.746783][ T4321] usb 5-1: Manufacturer: syz [ 152.751510][ T4321] usb 5-1: SerialNumber: syz [ 152.760767][ T4321] usb 5-1: config 0 descriptor?? [ 152.780031][ T4321] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 152.801148][ T5123] loop0: [ 153.254695][ T26] audit: type=1800 audit(1788285226.907:12): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.182" name="memory_backed" dev="configfs" ino=89226 res=0 errno=0 [ 153.981823][ T26] audit: type=1800 audit(1788285227.497:13): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.182" name="power" dev="configfs" ino=88430 res=0 errno=0 [ 154.044274][ T5116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.072093][ T5116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.080974][ T5134] FAULT_INJECTION: forcing a failure. [ 154.080974][ T5134] name failslab, interval 1, probability 0, space 0, times 0 [ 154.118666][ T5134] CPU: 0 PID: 5134 Comm: syz.0.180 Not tainted syzkaller #0 [ 154.126014][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.136090][ T5134] Call Trace: [ 154.139385][ T5134] [ 154.142336][ T5134] dump_stack_lvl+0x188/0x24e [ 154.147052][ T5134] ? show_regs_print_info+0x12/0x12 [ 154.152284][ T5134] ? load_image+0x410/0x410 [ 154.156814][ T5134] ? __might_sleep+0xd0/0xd0 [ 154.161430][ T5134] ? __lock_acquire+0x7c40/0x7c40 [ 154.166492][ T5134] should_fail_ex+0x390/0x4c0 [ 154.171201][ T5134] should_failslab+0x5/0x20 [ 154.175724][ T5134] slab_pre_alloc_hook+0x59/0x300 [ 154.180773][ T5134] ? vfs_write+0x777/0x9a0 [ 154.185216][ T5134] kmem_cache_alloc+0x56/0x2f0 [ 154.189999][ T5134] ? getname_flags+0xb7/0x500 [ 154.194697][ T5134] getname_flags+0xb7/0x500 [ 154.199220][ T5134] do_sys_openat2+0xdd/0x4f0 [ 154.203837][ T5134] ? do_sys_open+0xe0/0xe0 [ 154.208278][ T5134] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 154.214283][ T5134] ? lock_chain_count+0x20/0x20 [ 154.219149][ T5134] __x64_sys_openat+0x135/0x160 [ 154.224010][ T5134] do_syscall_64+0x4c/0xa0 [ 154.228432][ T5134] ? clear_bhb_loop+0x60/0xb0 [ 154.233115][ T5134] ? clear_bhb_loop+0x60/0xb0 [ 154.237794][ T5134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.243686][ T5134] RIP: 0033:0x7f94d899e159 [ 154.248095][ T5134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.269797][ T5134] RSP: 002b:00007f94d985e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.278216][ T5134] RAX: ffffffffffffffda RBX: 00007f94d8c25fa0 RCX: 00007f94d899e159 [ 154.286187][ T5134] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 154.294160][ T5134] RBP: 00007f94d8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 154.302128][ T5134] R10: 000000000000016f R11: 0000000000000246 R12: 0000000000000000 [ 154.310096][ T5134] R13: 00007f94d8c26038 R14: 00007f94d8c25fa0 R15: 00007ffdb2b72cf8 [ 154.318102][ T5134] [ 154.436844][ T5116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.470306][ T5116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.478785][ T3599] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.722074][ T5145] trusted_key: encrypted_key: insufficient parameters specified [ 155.271798][ T3599] usb 3-1: Using ep0 maxpacket: 32 [ 155.281206][ T3599] usb 3-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 155.293415][ T5153] size and base must be multiples of 4 kiB [ 155.299289][ T5153] CPU: 1 PID: 5153 Comm: syz.0.187 Not tainted syzkaller #0 [ 155.306586][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.316638][ T5153] Call Trace: [ 155.319915][ T5153] [ 155.322843][ T5153] dump_stack_lvl+0x188/0x24e [ 155.327530][ T5153] ? __might_fault+0xa6/0x120 [ 155.332202][ T5153] ? show_regs_print_info+0x12/0x12 [ 155.337399][ T5153] ? load_image+0x410/0x410 [ 155.341896][ T5153] ? tomoyo_path_number_perm+0x5a4/0x650 [ 155.347529][ T5153] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 155.352988][ T5153] ? __might_fault+0xa6/0x120 [ 155.357663][ T5153] ? __might_fault+0xc2/0x120 [ 155.362331][ T5153] ? __might_fault+0xa6/0x120 [ 155.367006][ T5153] mtrr_add+0x8e/0xc0 [ 155.370988][ T5153] mtrr_ioctl+0x9bf/0x1140 [ 155.375408][ T5153] ? mtrr_close+0x1f0/0x1f0 [ 155.379923][ T5153] ? __fget_files+0x28/0x460 [ 155.384519][ T5153] ? mtrr_close+0x1f0/0x1f0 [ 155.389025][ T5153] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 155.394493][ T5153] ? proc_reg_poll+0x280/0x280 [ 155.399257][ T5153] __se_sys_ioctl+0xfa/0x170 [ 155.403850][ T5153] do_syscall_64+0x4c/0xa0 [ 155.408272][ T5153] ? clear_bhb_loop+0x60/0xb0 [ 155.412950][ T5153] ? clear_bhb_loop+0x60/0xb0 [ 155.417629][ T5153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.423527][ T5153] RIP: 0033:0x7f94d899e159 [ 155.427935][ T5153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.447536][ T5153] RSP: 002b:00007f94d983d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.455949][ T5153] RAX: ffffffffffffffda RBX: 00007f94d8c26090 RCX: 00007f94d899e159 [ 155.463916][ T5153] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 155.471882][ T5153] RBP: 00007f94d8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 155.479845][ T5153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.487809][ T5153] R13: 00007f94d8c26128 R14: 00007f94d8c26090 R15: 00007ffdb2b72cf8 [ 155.495786][ T5153] [ 155.506242][ T5153] netlink: 'syz.0.187': attribute type 4 has an invalid length. [ 155.599525][ T4321] gspca_topro: reg_r err -71 [ 155.604393][ T4321] gspca_topro: Sensor soi763a [ 155.611780][ T3599] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.642234][ T4321] usb 5-1: USB disconnect, device number 4 [ 155.651871][ T3599] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 155.660931][ T3599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.669381][ T3599] usb 3-1: Product: syz [ 155.676110][ T3599] usb 3-1: Manufacturer: syz [ 155.691753][ T3599] usb 3-1: SerialNumber: syz [ 155.702631][ T3599] usb 3-1: config 0 descriptor?? [ 155.709836][ T3599] qmi_wwan 3-1:0.0: bogus CDC Union: master=177, slave=10 [ 155.719056][ T3599] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 155.922138][ T4321] usb 3-1: USB disconnect, device number 5 [ 156.101799][ T3599] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 156.281748][ T3599] usb 2-1: Using ep0 maxpacket: 32 [ 156.288877][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 156.298774][ T3599] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 156.312978][ T3599] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 156.322343][ T3599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.330429][ T3599] usb 2-1: Product: syz [ 156.335289][ T3599] usb 2-1: Manufacturer: syz [ 156.340036][ T3599] usb 2-1: SerialNumber: syz [ 156.353337][ T3599] usb 2-1: config 0 descriptor?? [ 156.364903][ T3599] hub 2-1:0.0: bad descriptor, ignoring hub [ 156.371047][ T3599] hub: probe of 2-1:0.0 failed with error -5 [ 156.401160][ T3599] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 156.410632][ T4321] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.435677][ T3599] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 156.464124][ T3599] usbtouchscreen: probe of 2-1:0.0 failed with error -90 [ 156.620855][ T4321] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 156.644700][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.657399][ T4321] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 156.666889][ T4321] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 156.675388][ T4321] usb 5-1: Manufacturer: syz [ 156.736400][ T4321] usb 5-1: config 0 descriptor?? [ 156.762090][ T4353] usb 2-1: USB disconnect, device number 3 [ 156.878462][ T5171] loop0: detected capacity change from 0 to 3904 [ 156.945559][ T5162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.980591][ T5175] rdma_rxe: already configured on wg0 [ 156.988071][ T5175] netlink: 92 bytes leftover after parsing attributes in process `syz.3.194'. [ 157.021777][ T5162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.050709][ T5162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.059269][ T4321] rc_core: IR keymap rc-hauppauge not found [ 157.081767][ T4321] Registered IR keymap rc-empty [ 157.092884][ T4321] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 157.122086][ T5162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.133882][ T4321] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 157.295486][ T4321] usb 5-1: USB disconnect, device number 5 [ 157.429259][ T26] audit: type=1800 audit(1788285231.077:14): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.195" name="memory_backed" dev="configfs" ino=88498 res=0 errno=0 [ 157.900918][ T26] audit: type=1800 audit(1788285231.077:15): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.195" name="power" dev="configfs" ino=88499 res=0 errno=0 [ 157.939019][ T5185] FAULT_INJECTION: forcing a failure. [ 157.939019][ T5185] name failslab, interval 1, probability 0, space 0, times 0 [ 158.018167][ T5185] CPU: 1 PID: 5185 Comm: syz.0.197 Not tainted syzkaller #0 [ 158.025520][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.035600][ T5185] Call Trace: [ 158.038889][ T5185] [ 158.041836][ T5185] dump_stack_lvl+0x188/0x24e [ 158.046541][ T5185] ? show_regs_print_info+0x12/0x12 [ 158.049271][ T4353] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 158.051749][ T5185] ? load_image+0x410/0x410 [ 158.051780][ T5185] ? __might_sleep+0xd0/0xd0 [ 158.068363][ T5185] ? __lock_acquire+0x7c40/0x7c40 [ 158.073426][ T5185] should_fail_ex+0x390/0x4c0 [ 158.078139][ T5185] should_failslab+0x5/0x20 [ 158.082665][ T5185] slab_pre_alloc_hook+0x59/0x300 [ 158.087712][ T5185] ? vfs_write+0x777/0x9a0 [ 158.092166][ T5185] kmem_cache_alloc+0x56/0x2f0 [ 158.096944][ T5185] ? getname_flags+0xb7/0x500 [ 158.101635][ T5185] getname_flags+0xb7/0x500 [ 158.106163][ T5185] do_sys_openat2+0xdd/0x4f0 [ 158.110779][ T5185] ? do_sys_open+0xe0/0xe0 [ 158.115221][ T5185] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 158.121231][ T5185] ? lock_chain_count+0x20/0x20 [ 158.126118][ T5185] __x64_sys_openat+0x135/0x160 [ 158.131004][ T5185] do_syscall_64+0x4c/0xa0 [ 158.135448][ T5185] ? clear_bhb_loop+0x60/0xb0 [ 158.140159][ T5185] ? clear_bhb_loop+0x60/0xb0 [ 158.144859][ T5185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.150777][ T5185] RIP: 0033:0x7f94d899e159 [ 158.155208][ T5185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.174838][ T5185] RSP: 002b:00007f94d985e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.183276][ T5185] RAX: ffffffffffffffda RBX: 00007f94d8c25fa0 RCX: 00007f94d899e159 [ 158.191278][ T5185] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 158.199277][ T5185] RBP: 00007f94d8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 158.207273][ T5185] R10: 000000000000016f R11: 0000000000000246 R12: 0000000000000000 [ 158.215273][ T5185] R13: 00007f94d8c26038 R14: 00007f94d8c25fa0 R15: 00007ffdb2b72cf8 [ 158.223291][ T5185] [ 158.338092][ T5196] size and base must be multiples of 4 kiB [ 158.343752][ T4353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.343962][ T5196] CPU: 1 PID: 5196 Comm: syz.4.201 Not tainted syzkaller #0 [ 158.361281][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.371333][ T5196] Call Trace: [ 158.374608][ T5196] [ 158.377532][ T5196] dump_stack_lvl+0x188/0x24e [ 158.382220][ T5196] ? __might_fault+0xa6/0x120 [ 158.386892][ T5196] ? show_regs_print_info+0x12/0x12 [ 158.392093][ T5196] ? load_image+0x410/0x410 [ 158.396592][ T5196] ? tomoyo_path_number_perm+0x5a4/0x650 [ 158.402227][ T5196] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 158.407686][ T5196] ? __might_fault+0xa6/0x120 [ 158.412355][ T5196] ? __might_fault+0xc2/0x120 [ 158.417027][ T5196] ? __might_fault+0xa6/0x120 [ 158.421702][ T5196] mtrr_add+0x8e/0xc0 [ 158.425688][ T5196] mtrr_ioctl+0x9bf/0x1140 [ 158.430106][ T5196] ? mtrr_close+0x1f0/0x1f0 [ 158.434610][ T5196] ? __fget_files+0x28/0x460 [ 158.439204][ T5196] ? mtrr_close+0x1f0/0x1f0 [ 158.443713][ T5196] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 158.449172][ T5196] ? proc_reg_poll+0x280/0x280 [ 158.453937][ T5196] __se_sys_ioctl+0xfa/0x170 [ 158.458538][ T5196] do_syscall_64+0x4c/0xa0 [ 158.462957][ T5196] ? clear_bhb_loop+0x60/0xb0 [ 158.467632][ T5196] ? clear_bhb_loop+0x60/0xb0 [ 158.472313][ T5196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.478208][ T5196] RIP: 0033:0x7f963519e159 [ 158.482616][ T5196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.502214][ T5196] RSP: 002b:00007f9635ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.510623][ T5196] RAX: ffffffffffffffda RBX: 00007f9635426090 RCX: 00007f963519e159 [ 158.518591][ T5196] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 158.526553][ T5196] RBP: 00007f9635235024 R08: 0000000000000000 R09: 0000000000000000 [ 158.534515][ T5196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.542479][ T5196] R13: 00007f9635426128 R14: 00007f9635426090 R15: 00007ffd652c2158 [ 158.550459][ T5196] [ 158.569396][ T5197] netlink: 'syz.4.201': attribute type 4 has an invalid length. [ 158.810261][ T4353] usb 4-1: config 1 interface 1 altsetting 65 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 158.967545][ T4353] usb 4-1: config 1 interface 1 has no altsetting 1 [ 159.053053][ T4353] usb 4-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 159.065213][ T4353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.073614][ T4353] usb 4-1: Product: syz [ 159.079309][ T4353] usb 4-1: Manufacturer: syz [ 159.084265][ T4353] usb 4-1: SerialNumber: syz [ 159.299141][ T4353] usb 4-1: 1:65 : no or invalid class specific endpoint descriptor [ 159.331706][ T4321] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 159.384053][ T4353] usb 4-1: USB disconnect, device number 8 [ 159.386766][ T5210] loop0: detected capacity change from 0 to 3904 [ 159.533677][ T4321] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 159.568882][ T4321] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.630805][ T4321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.675464][ T4321] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 159.704654][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.734728][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.789302][ T4321] usb 3-1: config 0 descriptor?? [ 159.821008][ T5200] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.564053][ T4353] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 160.752750][ T4353] usb 4-1: Using ep0 maxpacket: 32 [ 160.759669][ T4353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 160.802014][ T4353] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 160.823555][ T4353] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 160.846064][ T4353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.877094][ T4353] usb 4-1: Product: syz [ 160.881335][ T4353] usb 4-1: Manufacturer: syz [ 160.904473][ T4353] usb 4-1: SerialNumber: syz [ 160.931151][ T4353] usb 4-1: config 0 descriptor?? [ 160.964671][ T5236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.974011][ T4353] hub 4-1:0.0: bad descriptor, ignoring hub [ 160.979943][ T4353] hub: probe of 4-1:0.0 failed with error -5 [ 160.989706][ T4321] usbhid 3-1:0.0: can't add hid device: -71 [ 161.005255][ T5236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.006105][ T4321] usbhid: probe of 3-1:0.0 failed with error -71 [ 161.053894][ T4353] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 161.081731][ T5236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.094396][ T4353] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 161.157171][ T5236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.206660][ T4353] usbtouchscreen: probe of 4-1:0.0 failed with error -90 [ 161.237475][ T4321] usb 3-1: USB disconnect, device number 6 [ 161.326155][ T4353] usb 4-1: USB disconnect, device number 9 [ 161.359046][ T26] audit: type=1800 audit(1788285235.007:16): pid=5243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.210" name="memory_backed" dev="configfs" ino=89400 res=0 errno=0 [ 161.639394][ T26] audit: type=1800 audit(1788285235.007:17): pid=5243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.210" name="power" dev="configfs" ino=89401 res=0 errno=0 [ 162.117261][ T5247] size and base must be multiples of 4 kiB [ 162.123352][ T5247] CPU: 0 PID: 5247 Comm: syz.1.213 Not tainted syzkaller #0 [ 162.130662][ T5247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.140733][ T5247] Call Trace: [ 162.144025][ T5247] [ 162.146977][ T5247] dump_stack_lvl+0x188/0x24e [ 162.151682][ T5247] ? __might_fault+0xa6/0x120 [ 162.156374][ T5247] ? show_regs_print_info+0x12/0x12 [ 162.161602][ T5247] ? load_image+0x410/0x410 [ 162.166127][ T5247] ? tomoyo_path_number_perm+0x5a4/0x650 [ 162.170150][ T5255] netlink: 'syz.1.213': attribute type 4 has an invalid length. [ 162.171761][ T5247] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 162.171790][ T5247] ? __might_fault+0xa6/0x120 [ 162.171810][ T5247] ? __might_fault+0xc2/0x120 [ 162.194247][ T5247] ? __might_fault+0xa6/0x120 [ 162.198955][ T5247] mtrr_add+0x8e/0xc0 [ 162.202969][ T5247] mtrr_ioctl+0x9bf/0x1140 [ 162.207434][ T5247] ? mtrr_close+0x1f0/0x1f0 [ 162.211992][ T5247] ? __fget_files+0x28/0x460 [ 162.216613][ T5247] ? mtrr_close+0x1f0/0x1f0 [ 162.221145][ T5247] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 162.226636][ T5247] ? proc_reg_poll+0x280/0x280 [ 162.231433][ T5247] __se_sys_ioctl+0xfa/0x170 [ 162.236054][ T5247] do_syscall_64+0x4c/0xa0 [ 162.240502][ T5247] ? clear_bhb_loop+0x60/0xb0 [ 162.245205][ T5247] ? clear_bhb_loop+0x60/0xb0 [ 162.249920][ T5247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.255853][ T5247] RIP: 0033:0x7eff3a19e159 [ 162.260290][ T5247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.279919][ T5247] RSP: 002b:00007eff3b08e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.288364][ T5247] RAX: ffffffffffffffda RBX: 00007eff3a425fa0 RCX: 00007eff3a19e159 [ 162.296358][ T5247] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 162.304345][ T5247] RBP: 00007eff3a235024 R08: 0000000000000000 R09: 0000000000000000 [ 162.312332][ T5247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.320317][ T5247] R13: 00007eff3a426038 R14: 00007eff3a425fa0 R15: 00007ffe2f1c9bb8 [ 162.328322][ T5247] [ 162.330110][ T5259] FAULT_INJECTION: forcing a failure. [ 162.330110][ T5259] name failslab, interval 1, probability 0, space 0, times 0 [ 162.352786][ T5259] CPU: 0 PID: 5259 Comm: syz.2.214 Not tainted syzkaller #0 [ 162.360125][ T5259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.370194][ T5259] Call Trace: [ 162.373481][ T5259] [ 162.376433][ T5259] dump_stack_lvl+0x188/0x24e [ 162.381136][ T5259] ? show_regs_print_info+0x12/0x12 [ 162.386358][ T5259] ? load_image+0x410/0x410 [ 162.390884][ T5259] ? __might_sleep+0xd0/0xd0 [ 162.395501][ T5259] ? __lock_acquire+0x7c40/0x7c40 [ 162.400563][ T5259] should_fail_ex+0x390/0x4c0 [ 162.405276][ T5259] should_failslab+0x5/0x20 [ 162.409795][ T5259] slab_pre_alloc_hook+0x59/0x300 [ 162.414828][ T5259] ? vfs_write+0x777/0x9a0 [ 162.419255][ T5259] kmem_cache_alloc+0x56/0x2f0 [ 162.424015][ T5259] ? getname_flags+0xb7/0x500 [ 162.428690][ T5259] getname_flags+0xb7/0x500 [ 162.433188][ T5259] do_sys_openat2+0xdd/0x4f0 [ 162.437781][ T5259] ? do_sys_open+0xe0/0xe0 [ 162.442197][ T5259] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.448177][ T5259] ? lock_chain_count+0x20/0x20 [ 162.453031][ T5259] __x64_sys_openat+0x135/0x160 [ 162.457892][ T5259] do_syscall_64+0x4c/0xa0 [ 162.462314][ T5259] ? clear_bhb_loop+0x60/0xb0 [ 162.467079][ T5259] ? clear_bhb_loop+0x60/0xb0 [ 162.471754][ T5259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.477644][ T5259] RIP: 0033:0x7f76d479e159 [ 162.482054][ T5259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.501658][ T5259] RSP: 002b:00007f76d56da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.510067][ T5259] RAX: ffffffffffffffda RBX: 00007f76d4a26090 RCX: 00007f76d479e159 [ 162.518034][ T5259] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 162.525997][ T5259] RBP: 00007f76d4835024 R08: 0000000000000000 R09: 0000000000000000 [ 162.533962][ T5259] R10: 000000000000016f R11: 0000000000000246 R12: 0000000000000000 [ 162.541934][ T5259] R13: 00007f76d4a26128 R14: 00007f76d4a26090 R15: 00007ffe036d0518 [ 162.549909][ T5259] [ 162.804428][ T5269] loop0: detected capacity change from 0 to 3904 [ 163.077470][ T5276] rdma_rxe: rxe_register_device failed with error -23 [ 163.084553][ T5276] rdma_rxe: failed to add wg0 [ 163.091144][ T5276] netlink: 92 bytes leftover after parsing attributes in process `syz.0.218'. [ 163.105311][ T5276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.113986][ T5276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.878456][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.951903][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.985302][ T5291] input: syz0 as /devices/virtual/input/input16 [ 164.112062][ T26] audit: type=1800 audit(1788285237.727:18): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.223" name="memory_backed" dev="configfs" ino=88680 res=0 errno=0 [ 164.607219][ T26] audit: type=1800 audit(1788285237.737:19): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.223" name="power" dev="configfs" ino=88681 res=0 errno=0 [ 164.866245][ T5288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.912507][ T5288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.150637][ T5311] loop0: detected capacity change from 0 to 3904 [ 165.201930][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 165.416385][ T27] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 165.442207][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.501394][ T27] usb 4-1: Product: syz [ 165.531571][ T27] usb 4-1: Manufacturer: syz [ 165.561598][ T27] usb 4-1: SerialNumber: syz [ 165.590989][ T27] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 165.649408][ T27] scsi host1: usb-storage 4-1:1.0 [ 166.967760][ T128] ------------[ cut here ]------------ [ 166.973499][ T128] URB ffff88807d1fbd00 submitted while active [ 167.032556][ T128] WARNING: CPU: 1 PID: 128 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfb8/0x18d0 [ 167.042313][ T128] Modules linked in: [ 167.046277][ T128] CPU: 1 PID: 128 Comm: kworker/1:2 Not tainted syzkaller #0 [ 167.053770][ T128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.063917][ T128] Workqueue: events_freezable usb_stor_scan_dwork [ 167.070395][ T128] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 167.075987][ T128] Code: 2e 8b 44 89 ea e8 59 65 fe 03 e9 bb fb ff ff e8 5e ce 56 fb c6 05 c9 4a e1 07 01 48 c7 c7 20 f0 2e 8b 48 89 de e8 98 55 22 fb <0f> 0b e9 be f0 ff ff e8 3c ce 56 fb eb 1f e8 35 ce 56 fb 44 8b 64 [ 167.095653][ T128] RSP: 0018:ffffc90002de79d8 EFLAGS: 00010246 [ 167.101886][ T128] RAX: 23ef175ab1fbbb00 RBX: ffff88807d1fbd00 RCX: ffff888019f63c00 [ 167.109902][ T128] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 167.117926][ T128] RBP: ffffc90002de7b98 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 167.126029][ T128] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: 0000000000000c00 [ 167.134134][ T128] R13: ffff88807a080ee0 R14: ffff88807d1fbd08 R15: dffffc0000000000 [ 167.142196][ T128] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 167.151175][ T128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.157823][ T128] CR2: 00007f76d47eb840 CR3: 000000002e81b000 CR4: 00000000003506e0 [ 167.165927][ T128] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.173964][ T128] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 167.182019][ T128] Call Trace: [ 167.185315][ T128] [ 167.188263][ T128] ? __init_swait_queue_head+0xa4/0x140 [ 167.193872][ T128] usb_stor_msg_common+0x29f/0x500 [ 167.199011][ T128] ? trace_contention_end+0x5f/0x170 [ 167.204355][ T128] ? usb_stor_blocking_completion+0x40/0x40 [ 167.210274][ T128] ? mutex_lock_nested+0x10/0x10 [ 167.215248][ T128] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 167.221251][ T128] usb_stor_Bulk_max_lun+0x2f9/0x5b0 [ 167.226633][ T128] usb_stor_scan_dwork+0xf0/0x260 [ 167.231728][ T128] ? process_one_work+0x7b4/0x1160 [ 167.236878][ T128] process_one_work+0x8ab/0x1160 [ 167.241904][ T128] ? worker_detach_from_pool+0x240/0x240 [ 167.247582][ T128] ? _raw_spin_lock_irq+0xb7/0xf0 [ 167.252754][ T128] ? _raw_spin_lock_irqsave+0x100/0x100 [ 167.258346][ T128] ? wq_worker_running+0x97/0x190 [ 167.263451][ T128] worker_thread+0xaf5/0x12a0 [ 167.268171][ T128] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 167.274140][ T128] kthread+0x29d/0x330 [ 167.278240][ T128] ? worker_clr_flags+0x1a0/0x1a0 [ 167.283371][ T128] ? kthread_blkcg+0xd0/0xd0 [ 167.287993][ T128] ret_from_fork+0x1f/0x30 [ 167.292484][ T128] [ 167.295542][ T128] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 167.302806][ T128] CPU: 1 PID: 128 Comm: kworker/1:2 Not tainted syzkaller #0 [ 167.310157][ T128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.320197][ T128] Workqueue: events_freezable usb_stor_scan_dwork [ 167.326604][ T128] Call Trace: [ 167.329866][ T128] [ 167.332783][ T128] dump_stack_lvl+0x188/0x24e [ 167.337453][ T128] ? memcpy+0x3c/0x60 [ 167.341419][ T128] ? show_regs_print_info+0x12/0x12 [ 167.346610][ T128] ? load_image+0x410/0x410 [ 167.351106][ T128] panic+0x2d3/0x710 [ 167.354992][ T128] ? bpf_jit_dump+0xd0/0xd0 [ 167.359502][ T128] ? ret_from_fork+0x1f/0x30 [ 167.364103][ T128] __warn+0x2f8/0x4f0 [ 167.368068][ T128] ? usb_submit_urb+0xfb8/0x18d0 [ 167.372989][ T128] ? usb_submit_urb+0xfb8/0x18d0 [ 167.377907][ T128] report_bug+0x2ba/0x4f0 [ 167.382226][ T128] ? usb_submit_urb+0xfb8/0x18d0 [ 167.387180][ T128] handle_bug+0x3a/0x70 [ 167.391344][ T128] exc_invalid_op+0x16/0x40 [ 167.395837][ T128] asm_exc_invalid_op+0x16/0x20 [ 167.400676][ T128] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 167.406239][ T128] Code: 2e 8b 44 89 ea e8 59 65 fe 03 e9 bb fb ff ff e8 5e ce 56 fb c6 05 c9 4a e1 07 01 48 c7 c7 20 f0 2e 8b 48 89 de e8 98 55 22 fb <0f> 0b e9 be f0 ff ff e8 3c ce 56 fb eb 1f e8 35 ce 56 fb 44 8b 64 [ 167.425834][ T128] RSP: 0018:ffffc90002de79d8 EFLAGS: 00010246 [ 167.431891][ T128] RAX: 23ef175ab1fbbb00 RBX: ffff88807d1fbd00 RCX: ffff888019f63c00 [ 167.439851][ T128] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 167.447822][ T128] RBP: ffffc90002de7b98 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 167.455779][ T128] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: 0000000000000c00 [ 167.463735][ T128] R13: ffff88807a080ee0 R14: ffff88807d1fbd08 R15: dffffc0000000000 [ 167.471700][ T128] ? usb_submit_urb+0xfb8/0x18d0 [ 167.476625][ T128] ? __init_swait_queue_head+0xa4/0x140 [ 167.482161][ T128] usb_stor_msg_common+0x29f/0x500 [ 167.487278][ T128] ? trace_contention_end+0x5f/0x170 [ 167.492557][ T128] ? usb_stor_blocking_completion+0x40/0x40 [ 167.498443][ T128] ? mutex_lock_nested+0x10/0x10 [ 167.503366][ T128] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 167.509335][ T128] usb_stor_Bulk_max_lun+0x2f9/0x5b0 [ 167.514606][ T128] usb_stor_scan_dwork+0xf0/0x260 [ 167.519613][ T128] ? process_one_work+0x7b4/0x1160 [ 167.524706][ T128] process_one_work+0x8ab/0x1160 [ 167.529633][ T128] ? worker_detach_from_pool+0x240/0x240 [ 167.535249][ T128] ? _raw_spin_lock_irq+0xb7/0xf0 [ 167.540254][ T128] ? _raw_spin_lock_irqsave+0x100/0x100 [ 167.545801][ T128] ? wq_worker_running+0x97/0x190 [ 167.550811][ T128] worker_thread+0xaf5/0x12a0 [ 167.555478][ T128] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 167.561363][ T128] kthread+0x29d/0x330 [ 167.565412][ T128] ? worker_clr_flags+0x1a0/0x1a0 [ 167.570416][ T128] ? kthread_blkcg+0xd0/0xd0 [ 167.574996][ T128] ret_from_fork+0x1f/0x30 [ 167.579405][ T128] [ 167.582647][ T128] Kernel Offset: disabled [ 167.586991][ T128] Rebooting in 86400 seconds..