last executing test programs: 13.014832135s ago: executing program 1 (id=634): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 10.657195568s ago: executing program 4 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000003c0)={{r3, &(0x7f00000000c0)='\r,+/\x00', 0x101000, 0x0, 0xb8d, &(0x7f0000000240), &(0x7f0000000280)=0x80000001}, {[0x5, 0x5d0, 0x5, 0x81]}, 0x6, 0xc2, &(0x7f00000002c0)=""/194}) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000500), 0x4) 9.591420475s ago: executing program 4 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x26, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb7020000050000ffb7030000000000008500000073000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, 0xffffffffffffffff, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000280)="b9edee1e282617219d69110e4594d0b1ff0316863e5039ed7a547cea8d11a274be9b7eb5d479759f6216b1767bc6cc7637f54f2881b95de0fc75ba9f0d3098", 0x3f, 0x80000000, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x8000, r2, &(0x7f0000000380)="1a1c09b31701211e4ec01e04fe6d6e6387e878081bd332579bd2f478e4767c90d1fabe23ae715f9e671b2f0129befeb026e99bca8c2b2c9de4bb80f48381e6790ecadde5eb59c48eba07adfa4bf70e942f5d759d90b80f80a50fc7c7b32716bd0b039f7914c8353ac54bd0f392c98257c43183665bc51a41923894030d7f2481cb4d13558f97a0f67259a8f9de3b7122", 0x90, 0x7168, 0x0, 0x3, r5}]) 9.386938238s ago: executing program 3 (id=649): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='udf\x00', 0x820, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101, 0x20) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 7.442917594s ago: executing program 1 (id=651): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000a40)={0x6, 0x2, {0x8000000000000001, @struct={0x8, 0x4}, 0x0, 0xbe, 0xc, 0x331, 0xe, 0x7f, 0x7b, @usage=0x9, 0x8000, 0x8, [0x6, 0x8, 0x7b, 0x30000000000, 0x2, 0x343]}, {0xe, @usage=0x8, 0x0, 0xe2, 0x2, 0x34, 0x55, 0x7f, 0x20, @struct={0x4, 0xc46}, 0x3, 0x6, [0x0, 0x9, 0x9, 0x4, 0x5, 0x4]}, {0x2010, @usage=0xffffffff80000001, 0x0, 0x8000000000000000, 0x200, 0x6, 0xffff, 0x80, 0x2, @usage=0xffffffff, 0x6, 0x8, [0x2, 0x9, 0xf45f, 0x5, 0x7, 0x4]}, {0x7f, 0x1, 0x101}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000e40)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000440)={0x1, 0x3, 0x6b1b, 0x2, {0x4, 0x2, 0x5, 0x3, 0x7fff}, [0x401, 0x9, 0x1]}}, @devid=r3}) 7.259409802s ago: executing program 1 (id=653): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) 6.207715435s ago: executing program 1 (id=654): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x4, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0xffff8881f5c0a000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x7cb7}], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd7) pipe2$9p(0x0, 0x80000) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000a40)={0x6, 0x2, {0x8000000000000001, @struct={0x8, 0x4}, 0x0, 0xbe, 0xc, 0x331, 0xe, 0x7f, 0x7b, @usage=0x9, 0x8000, 0x8, [0x6, 0x8, 0x7b, 0x30000000000, 0x2, 0x343]}, {0xe, @usage=0x8, 0x0, 0xe2, 0x2, 0x34, 0x55, 0x7f, 0x20, @struct={0x4, 0xc46}, 0x3, 0x6, [0x0, 0x9, 0x9, 0x4, 0x5, 0x4]}, {0x2010, @usage=0xffffffff80000001, 0x0, 0x8000000000000000, 0x200, 0x6, 0xffff, 0x80, 0x2, @usage=0xffffffff, 0x6, 0x8, [0x2, 0x9, 0xf45f, 0x5, 0x7, 0x4]}, {0x7f, 0x1, 0x101}}) 5.250002074s ago: executing program 3 (id=655): openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) 4.939078435s ago: executing program 4 (id=656): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) 4.928108048s ago: executing program 3 (id=657): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') getdents(r6, 0x0, 0x0) getdents64(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) 4.819991136s ago: executing program 2 (id=658): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x29}) 3.863178685s ago: executing program 4 (id=659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="0f01f3f041835705000f01c966baf80cb828b6d181ef66bafc0ced460f07c7442400c6000000c744240295cc42aaff1c24c462e13abb370000002e26f3440fbc68e848b821820000000000000f23d80f21f835c00000000f23f865660f3a4084a27300000000", 0x66}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000440)="269d0f01df2e2e260f01cbbaf80c66b80e6adf8066efbafc0cedf0115800baf80c66b8f71b308166efbafc0cb0abee7500baf80c66b8710faa8066efbafc0cb0e6eedcb4442836de4780", 0x4a}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.454640481s ago: executing program 3 (id=661): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) setreuid(0xee01, 0x0) setresuid(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) lsetxattr$security_evm(0x0, 0x0, &(0x7f00000001c0)=@sha1={0x1, "343be0066659cc3cbb166b95443c1a77354dce85"}, 0x15, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000540), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 2.393119368s ago: executing program 0 (id=662): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = dup2(r0, r0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={'\x00', 0x3f, 0x4a, 0x400404, 0x40000000, 0xfffffffffffeff01}) 2.347610449s ago: executing program 2 (id=663): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000a40)={0x6, 0x2, {0x8000000000000001, @struct={0x8, 0x4}, 0x0, 0xbe, 0xc, 0x331, 0xe, 0x7f, 0x7b, @usage=0x9, 0x8000, 0x8, [0x6, 0x8, 0x7b, 0x30000000000, 0x2, 0x343]}, {0xe, @usage=0x8, 0x0, 0xe2, 0x2, 0x34, 0x55, 0x7f, 0x20, @struct={0x4, 0xc46}, 0x3, 0x6, [0x0, 0x9, 0x9, 0x4, 0x5, 0x4]}, {0x2010, @usage=0xffffffff80000001, 0x0, 0x8000000000000000, 0x200, 0x6, 0xffff, 0x80, 0x2, @usage=0xffffffff, 0x6, 0x8, [0x2, 0x9, 0xf45f, 0x5, 0x7, 0x4]}, {0x7f, 0x1, 0x101}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000e40)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000440)={0x1, 0x3, 0x6b1b, 0x2, {0x4, 0x2, 0x5, 0x3, 0x7fff}, [0x401, 0x6, 0x1]}}, @devid=r3}) 2.3470888s ago: executing program 1 (id=664): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001280)) r0 = socket$packet(0x11, 0x3, 0x300) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x400c010) sendmsg$nl_route(r1, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81, 0x7ffffff}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66}]}, 0x10) 2.104260183s ago: executing program 2 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.34601509s ago: executing program 2 (id=666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x26, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb7020000050000ffb7030000000000008500000073000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) io_submit(0x0, 0x3, &(0x7f0000000480)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, 0xffffffffffffffff, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000280)="b9edee1e282617219d69110e4594d0b1ff0316863e5039ed7a547cea8d11a274be9b7eb5d479759f6216b1767bc6cc7637f54f2881b95de0fc75ba9f0d3098", 0x3f, 0x80000000, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x8000, r2, &(0x7f0000000380)="1a1c09b31701211e4ec01e04fe6d6e6387e878081bd332579bd2f478e4767c90d1fabe23ae715f9e671b2f0129befeb026e99bca8c2b2c9de4bb80f48381e6790ecadde5eb59c48eba07adfa4bf70e942f5d759d90b80f80a50fc7c7b32716bd0b039f7914c8353ac54bd0f392c98257c43183665bc51a41923894030d7f2481cb4d13558f97a0f67259a8f9de3b7122", 0x90, 0x7168, 0x0, 0x3, r5}]) 1.259904112s ago: executing program 0 (id=667): openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) 1.235279169s ago: executing program 0 (id=668): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e24, 0x7fff, @mcast1, 0x8}, 0x1c) 1.201989167s ago: executing program 1 (id=669): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x445, &(0x7f0000000900)="$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") pipe(0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000001100)=""/4099, &(0x7f00000010c0)=0x1003) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x8000000000000000, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0xcc78, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = gettid() tkill(r3, 0x12) 1.035838641s ago: executing program 0 (id=670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r1, 0x1, 0x70bd27, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) 930.050358ms ago: executing program 0 (id=671): sendmsg$key(0xffffffffffffffff, 0x0, 0x40400c0) syz_open_procfs(0x0, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000804) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) shutdown(r1, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x18}, 0xa) 665.534027ms ago: executing program 0 (id=672): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a100df00008032080b00020903000009040000000e0100000d240100092700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001800090324bd7000fbdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x40050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 582.140389ms ago: executing program 2 (id=673): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x31, r0, 0x1000000) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 425.00433ms ago: executing program 2 (id=674): r0 = io_uring_setup(0x3249, &(0x7f0000000200)={0x0, 0x2c3f, 0x400, 0x2, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000040)='./file0\x00', 0x200c000, &(0x7f0000000000)=ANY=[], 0xde, 0x1251, &(0x7f0000001240)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x100000008, 0x0, 0x1, 0x1000000006, 0xffffffffffffffff, 0x3, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 361.506036ms ago: executing program 4 (id=675): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000a40)={0x6, 0x2, {0x8000000000000001, @struct={0x8, 0x4}, 0x0, 0xbe, 0xc, 0x331, 0xe, 0x7f, 0x7b, @usage=0x9, 0x8000, 0x8, [0x6, 0x8, 0x7b, 0x30000000000, 0x2, 0x343]}, {0xe, @usage=0x8, 0x0, 0xe2, 0x2, 0x34, 0x55, 0x7f, 0x20, @struct={0x4, 0xc46}, 0x3, 0x6, [0x0, 0x9, 0x9, 0x4, 0x5, 0x4]}, {0x2010, @usage=0xffffffff80000001, 0x0, 0x8000000000000000, 0x200, 0x6, 0xffff, 0x80, 0x2, @usage=0xffffffff, 0x6, 0x8, [0x2, 0x9, 0xf45f, 0x5, 0x7, 0x4]}, {0x7f, 0x1, 0x101}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000e40)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000440)={0x1, 0x3, 0x6b1b, 0x2, {0x4, 0x2, 0x5, 0x3, 0x7fff}, [0x401, 0x6, 0x1]}}, @devid=r3}) 341.807201ms ago: executing program 3 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) socketpair$tipc(0x1e, 0x44d28e74b5c8ca2a, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4040400) 130.775656ms ago: executing program 4 (id=677): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x28, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 0s ago: executing program 3 (id=678): openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 62.415103][ T4174] cgroup: Unknown subsys name 'net' [ 62.558865][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.982828][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.537048][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.569770][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.615479][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.663593][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.742770][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.780004][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.787853][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.796597][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.805401][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.812643][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.820815][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.857427][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.864704][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.872613][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.880956][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.888124][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.896057][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.924001][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.931087][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.939749][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.948447][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.955746][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.964171][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.991967][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.001359][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.009310][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.018065][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.025790][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.033092][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.041303][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.060609][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.105738][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.118438][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.133871][ T4188] team0: Port device team_slave_0 added [ 66.141710][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.158960][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.191372][ T4188] team0: Port device team_slave_1 added [ 66.205515][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.217301][ T4187] team0: Port device team_slave_0 added [ 66.243926][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.254390][ T4187] team0: Port device team_slave_1 added [ 66.260355][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.267738][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.279399][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.295195][ T4189] team0: Port device team_slave_0 added [ 66.301706][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.308924][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.335236][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.367930][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.376156][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.384622][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.392876][ T4189] team0: Port device team_slave_1 added [ 66.399146][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.406529][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.433146][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.447076][ T4186] team0: Port device team_slave_0 added [ 66.477603][ T4186] team0: Port device team_slave_1 added [ 66.484515][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.491490][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.517452][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.544267][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.551352][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.577574][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.606392][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.613518][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.639796][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.655315][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.665703][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.672931][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.699371][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.727588][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.753927][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.760925][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.768358][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.775724][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.802677][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.815563][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.822831][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.849126][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.902175][ T4190] team0: Port device team_slave_0 added [ 66.936301][ T4190] team0: Port device team_slave_1 added [ 66.951755][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.959815][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.966578][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.974556][ T4187] Cannot create hsr debugfs directory [ 66.987509][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.994963][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.001769][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.009536][ T4189] Cannot create hsr debugfs directory [ 67.068511][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.075617][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.102066][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.120350][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.128463][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.155094][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.174307][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.181516][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.188659][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.196966][ T4186] Cannot create hsr debugfs directory [ 67.213450][ T4197] Bluetooth: hci4: command 0x0409 tx timeout [ 67.220180][ T4197] Bluetooth: hci1: command 0x0409 tx timeout [ 67.226926][ T4197] Bluetooth: hci3: command 0x0409 tx timeout [ 67.233701][ T4197] Bluetooth: hci2: command 0x0409 tx timeout [ 67.292665][ T4197] Bluetooth: hci0: command 0x0409 tx timeout [ 67.350170][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.357429][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.365387][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.373984][ T4190] Cannot create hsr debugfs directory [ 67.555430][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.568208][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.581713][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.600826][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.647882][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.665297][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.683227][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.711872][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.768972][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.779154][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.814837][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.821728][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.848631][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.863807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.876224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.897789][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.935088][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.945808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.955508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.965358][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.972684][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.982889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.991985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.001313][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.008554][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.016805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.026706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.036585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.046242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.055333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.064731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.089926][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.100662][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.119744][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.130210][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.149632][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.157391][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.175789][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.184428][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.215737][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.228232][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.245910][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.255723][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.265587][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.284701][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.298675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.306809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.316350][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.327302][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.354273][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.368853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.378811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.387912][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.395062][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.406236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.416448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.430636][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.438145][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.472684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.481129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.518289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.529623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.539946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.558634][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.574329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.604554][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.614367][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.624033][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.632695][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.641338][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.650900][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.666422][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.674795][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.684567][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.699640][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.708457][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.737138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.746668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.756112][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.763272][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.774179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.795243][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.806365][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.816999][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.825809][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.832947][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.843470][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.881932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.900552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.911756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.921991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.946227][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.962329][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.972117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.981872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.996747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.008709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.019459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.028109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.036983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.045597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.055575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.078964][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.110456][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.130526][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.139172][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.148021][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.163964][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.179502][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.187555][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.202182][ T4188] device veth0_vlan entered promiscuous mode [ 69.232178][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.248978][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.260232][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.269878][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.279029][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.287770][ T1335] Bluetooth: hci3: command 0x041b tx timeout [ 69.293178][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 69.295709][ T1335] Bluetooth: hci1: command 0x041b tx timeout [ 69.306831][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.313978][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.326803][ T1335] Bluetooth: hci4: command 0x041b tx timeout [ 69.334593][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.344081][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.352926][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.360039][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.368048][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 69.376244][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.386074][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.395259][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.420026][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.428511][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.437412][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.450190][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.462940][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.471893][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.491910][ T4188] device veth1_vlan entered promiscuous mode [ 69.507308][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.523165][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.532153][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.542379][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.551511][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.563170][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.570370][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.579368][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.588086][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.597391][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.607525][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.616455][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.623592][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.637100][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.653491][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.666683][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.680468][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.691648][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.707321][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.763285][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.770818][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.780980][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.791612][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.801664][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.812234][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.821182][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.830316][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.839692][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.849984][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.869488][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.886495][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.922387][ T4188] device veth0_macvtap entered promiscuous mode [ 69.946130][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.958818][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.968513][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.978037][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.987480][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.996888][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.006022][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.015904][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.025064][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.034956][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.059029][ T4186] device veth0_vlan entered promiscuous mode [ 70.073975][ T4188] device veth1_macvtap entered promiscuous mode [ 70.108108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.116640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.127081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.137356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.147275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.156687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.165005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.177977][ T4186] device veth1_vlan entered promiscuous mode [ 70.207917][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.218081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.227215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.235738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.246418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.255355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.265426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.283242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.311323][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.324259][ T4187] device veth0_vlan entered promiscuous mode [ 70.361601][ T4186] device veth0_macvtap entered promiscuous mode [ 70.370082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.384895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.394404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.404592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.415462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.427525][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.439697][ T4187] device veth1_vlan entered promiscuous mode [ 70.450082][ T4186] device veth1_macvtap entered promiscuous mode [ 70.459748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.470113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.479007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.488171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.497423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.514392][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.524726][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.535729][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.544805][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.571897][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.584987][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.604728][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.629746][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.645311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.654593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.664359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.673714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.681245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.700964][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.715330][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.741631][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.762134][ T4187] device veth0_macvtap entered promiscuous mode [ 70.777719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.790802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.805872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.814696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.827629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.839445][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.848402][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.857717][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.867608][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.895541][ T4187] device veth1_macvtap entered promiscuous mode [ 70.912386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.921490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.970421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.989937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.010863][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.025685][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.035851][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.048660][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.061736][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.092056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.103053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.111940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.121556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.130732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.140995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.150699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.159364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.168955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.177640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.188027][ T4190] device veth0_vlan entered promiscuous mode [ 71.200963][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.213604][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.224419][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.235280][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.248047][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.267960][ T4189] device veth0_vlan entered promiscuous mode [ 71.283657][ T4190] device veth1_vlan entered promiscuous mode [ 71.291624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.301494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.310894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.324305][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.333789][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.343717][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.352516][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.365620][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.372178][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.379536][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 71.388343][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 71.394512][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 71.400623][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 71.413801][ T4189] device veth1_vlan entered promiscuous mode [ 71.443663][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 71.455596][ T417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.467764][ T417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.513375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.521628][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.521757][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.541243][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.551642][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.560297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.568668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.609524][ T4190] device veth0_macvtap entered promiscuous mode [ 71.620507][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.630149][ T4189] device veth0_macvtap entered promiscuous mode [ 71.636793][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.647349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.656143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.664992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.674079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.685669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.695437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.704039][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.721380][ T4189] device veth1_macvtap entered promiscuous mode [ 71.733291][ T4190] device veth1_macvtap entered promiscuous mode [ 71.778765][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.791345][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.802251][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.813620][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.823522][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.834008][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.849767][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.863642][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.871520][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.893131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.901827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.918145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.931673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.941236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.959276][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.970666][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.983265][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.994385][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.005756][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.016665][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.029280][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.058787][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.093714][ T3062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.101599][ T3062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.109454][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.136834][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.148511][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.160646][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.172368][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.183280][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.194135][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.206848][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.221121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.230419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.247928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.260991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.276609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.291496][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.307739][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.317227][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.337187][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.501447][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.631399][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.819774][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.937624][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.058105][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.072681][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.091001][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.103503][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.311315][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.382900][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.404045][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.426347][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.445092][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 73.474130][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.476897][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 73.500932][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.512293][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 73.515262][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.520943][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 73.544923][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 73.584112][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.597082][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.619397][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.759641][ T4273] Zero length message leads to an empty skb [ 73.867231][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.900551][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.035612][ T3062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.085431][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.097533][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.134446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.208676][ T3062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.237437][ T3062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.293331][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.364592][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.391164][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.536268][ T4300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.546737][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.062462][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 75.592454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 75.652470][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 75.662452][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 75.672447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 75.682450][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 75.692447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 75.702451][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 75.712449][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 75.722456][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 76.570551][ T4229] Bluetooth: hci1: command 0x0405 tx timeout [ 78.895860][ T4317] FAULT_INJECTION: forcing a failure. [ 78.895860][ T4317] name failslab, interval 1, probability 0, space 0, times 1 [ 78.909314][ T4317] CPU: 1 PID: 4317 Comm: syz.2.3 Not tainted syzkaller #0 [ 78.916507][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.926655][ T4317] Call Trace: [ 78.929980][ T4317] [ 78.932951][ T4317] dump_stack_lvl+0x188/0x250 [ 78.937717][ T4317] ? show_regs_print_info+0x20/0x20 [ 78.943040][ T4317] ? load_image+0x410/0x410 [ 78.947603][ T4317] should_fail+0x383/0x4b0 [ 78.952068][ T4317] should_failslab+0x5/0x20 [ 78.956656][ T4317] slab_pre_alloc_hook+0x51/0xc0 [ 78.961640][ T4317] ? xas_create+0x1047/0x15a0 [ 78.966360][ T4317] kmem_cache_alloc+0x3d/0x280 [ 78.971169][ T4317] ? xas_descend+0x210/0x3b0 [ 78.975809][ T4317] xas_create+0x1047/0x15a0 [ 78.980358][ T4317] ? __kasan_kmalloc+0xaf/0xe0 [ 78.985425][ T4317] xas_store+0x9f/0x1a00 [ 78.989843][ T4317] __xa_store+0xe6/0x210 [ 78.994142][ T4317] xa_store+0x2f/0x50 [ 78.998162][ T4317] __io_uring_add_tctx_node+0x1ce/0x500 [ 79.003793][ T4317] ? __io_cqring_overflow_flush+0xa30/0xa30 [ 79.009745][ T4317] ? _raw_spin_unlock+0x24/0x40 [ 79.014736][ T4317] ? alloc_fd+0x59e/0x650 [ 79.019112][ T4317] io_uring_install_fd+0xc0/0xf0 [ 79.024100][ T4317] __se_sys_io_uring_setup+0x2303/0x2900 [ 79.029881][ T4317] ? __x64_sys_io_uring_setup+0x60/0x60 [ 79.035489][ T4317] ? lockdep_hardirqs_on+0x94/0x140 [ 79.040813][ T4317] do_syscall_64+0x4c/0xa0 [ 79.045366][ T4317] ? clear_bhb_loop+0x30/0x80 [ 79.050092][ T4317] ? clear_bhb_loop+0x30/0x80 [ 79.054828][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.060779][ T4317] RIP: 0033:0x7f07292e1159 [ 79.065241][ T4317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.085232][ T4317] RSP: 002b:00007f0727539028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 79.093811][ T4317] RAX: ffffffffffffffda RBX: 00007f0729568fa0 RCX: 00007f07292e1159 [ 79.101948][ T4317] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000003450 [ 79.109977][ T4317] RBP: 00007f072937806b R08: 0000000000000000 R09: 0000000000000000 [ 79.118001][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.126027][ T4317] R13: 00007f0729569038 R14: 00007f0729568fa0 R15: 00007ffdf9fc7a38 [ 79.134094][ T4317] [ 79.459641][ T4325] jffs2: notice: (4325) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.593956][ T4233] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 80.043174][ T4233] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 80.090892][ T4233] usb 5-1: config 0 has no interface number 0 [ 80.502625][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.539093][ T4233] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 80.578924][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.582740][ T4229] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.602018][ T4233] usb 5-1: Product: syz [ 80.628470][ T4233] usb 5-1: Manufacturer: syz [ 80.646297][ T4233] usb 5-1: SerialNumber: syz [ 80.733122][ T4233] usb 5-1: config 0 descriptor?? [ 80.772700][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 80.903631][ T4234] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 80.917347][ T4234] usb 2-1: config 0 has no interface number 0 [ 80.938057][ T4234] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.967127][ T4229] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 80.989740][ T4229] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.019439][ T4234] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 81.044932][ T4229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 81.052017][ T4229] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 81.067137][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.120649][ T4229] usb 3-1: config 0 descriptor?? [ 81.163170][ T4234] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 81.172297][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 81.197302][ T4340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20'. [ 81.206871][ T4234] usb 2-1: Product: syz [ 81.211111][ T4234] usb 2-1: SerialNumber: syz [ 81.220260][ T4234] usb 2-1: config 0 descriptor?? [ 81.238447][ T4340] process 'syz.3.20' launched '/dev/fd/-1' with NULL argv: empty string added [ 81.266684][ T4234] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 81.288708][ T4234] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5 [ 81.315653][ T4342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21'. [ 81.388274][ T4327] udc-core: couldn't find an available UDC or it's busy [ 81.402831][ T4327] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.582573][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.722721][ T4233] asix 5-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 197 [ 81.800332][ T4229] sony 0003:1430:474C.0001: ignoring exceeding usage max [ 81.852734][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 82.161596][ T4229] sony 0003:1430:474C.0001: No inputs registered, leaving [ 82.260928][ T4229] sony 0003:1430:474C.0001: hidraw0: USB HID v0.10 Joystick [HID 1430:474c] on usb-dummy_hcd.2-1/input0 [ 82.308591][ T4229] sony 0003:1430:474C.0001: failed to claim input [ 82.452137][ T4229] usb 3-1: USB disconnect, device number 2 [ 82.462752][ T4233] usb 5-1: USB disconnect, device number 2 [ 82.555837][ T4350] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.568062][ T4234] usb 2-1: USB disconnect, device number 2 [ 82.652557][ T4234] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 82.782642][ T4231] usb 1-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 82.839554][ T4348] fido_id[4348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 86.354506][ T4231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.392560][ T4231] usb 1-1: string descriptor 0 read error: -71 [ 86.398877][ T4231] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.418520][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 86.439266][ T4231] usb 1-1: config 0 descriptor?? [ 86.462172][ T4330] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 86.463437][ T4231] usb 1-1: can't set config #0, error -71 [ 86.502021][ T4231] usb 1-1: USB disconnect, device number 2 [ 86.828077][ T7] cfg80211: failed to load regulatory.db [ 88.052520][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.172398][ C0] sched: RT throttling activated [ 88.292621][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 88.422689][ T23] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 88.446413][ T23] usb 4-1: config 0 has no interface number 0 [ 88.455050][ T23] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.468813][ T23] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.479912][ T23] usb 4-1: config 0 interface 85 has no altsetting 0 [ 88.487246][ T4394] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.643784][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 88.653064][ T4231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.661957][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.670981][ T23] usb 4-1: Product: syz [ 88.675660][ T23] usb 4-1: Manufacturer: syz [ 88.680423][ T23] usb 4-1: SerialNumber: syz [ 88.697129][ T23] usb 4-1: config 0 descriptor?? [ 88.832546][ T4397] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.894624][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 88.988191][ T23] appletouch 4-1:0.85: Failed to read mode from device. [ 88.997436][ T23] appletouch: probe of 4-1:0.85 failed with error -5 [ 89.012588][ T4231] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.032675][ T4231] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.057896][ T4231] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.084499][ T23] usb 4-1: USB disconnect, device number 2 [ 89.113953][ T4231] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.139478][ T4231] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.150524][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.442843][ T4231] usb 2-1: GET_CAPABILITIES returned 0 [ 89.449135][ T4231] usbtmc 2-1:16.0: can't read capabilities [ 89.702582][ T1111] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.710794][ T4231] usb 2-1: USB disconnect, device number 3 [ 92.529586][ T4416] kvm [4415]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 92.541186][ T4416] kvm [4415]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 92.787968][ T4231] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 94.033557][ T4231] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 94.086693][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.153487][ T4231] usb 4-1: config 0 descriptor?? [ 94.304508][ T4231] pwc: Samsung MPC-C10 USB webcam detected. [ 94.489164][ T4231] pwc: send_video_command error -71 [ 94.494588][ T4231] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 94.502273][ T4231] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 94.664087][ T4231] usb 4-1: USB disconnect, device number 3 [ 97.473469][ T4473] loop2: detected capacity change from 0 to 164 [ 99.242507][ T1111] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.766899][ T4495] device syzkaller0 entered promiscuous mode [ 100.832853][ T4495] tipc: Started in network mode [ 100.838223][ T4495] tipc: Node identity 927f0aa2f568, cluster identity 4711 [ 100.970068][ T4495] tipc: Enabled bearer , priority 0 [ 101.177165][ T4493] tipc: Resetting bearer [ 101.351694][ T4493] tipc: Disabling bearer [ 101.376373][ T4503] bond0 speed is unknown, defaulting to 1000 [ 101.391248][ T4503] bond0 speed is unknown, defaulting to 1000 [ 101.449878][ T4503] bond0 speed is unknown, defaulting to 1000 [ 101.640883][ T4503] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.674855][ T4503] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 102.830591][ T4503] bond0 speed is unknown, defaulting to 1000 [ 103.162637][ T4234] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.710106][ T4503] bond0 speed is unknown, defaulting to 1000 [ 103.739171][ T4503] bond0 speed is unknown, defaulting to 1000 [ 103.754834][ T4503] bond0 speed is unknown, defaulting to 1000 [ 103.764905][ T4503] bond0 speed is unknown, defaulting to 1000 [ 103.882626][ T4234] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.905862][ T4234] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 103.962495][ T4234] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 103.985097][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.433026][ T4229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.614018][ T4234] gud 4-1:1.0: Unexpected status OK for failed transfer [ 104.656367][ T4234] gud: probe of 4-1:1.0 failed with error -32 [ 104.842643][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 105.035110][ T4234] usb 4-1: USB disconnect, device number 5 [ 105.042897][ T4229] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.072681][ T4229] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.152958][ T4229] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.209552][ T4229] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.232498][ T4229] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.255793][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.952930][ T4229] usb 1-1: GET_CAPABILITIES returned 0 [ 105.958500][ T4229] usbtmc 1-1:16.0: can't read capabilities [ 106.351213][ T4229] usb 1-1: USB disconnect, device number 3 [ 107.616610][ T4567] loop1: detected capacity change from 0 to 164 [ 111.452525][ T4231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.912765][ T4231] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 111.925668][ T4631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.109'. [ 111.936305][ T4231] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.492032][ T4231] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.552546][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.578621][ T4231] usb 3-1: Product: syz [ 113.592561][ T4231] usb 3-1: Manufacturer: syz [ 113.607441][ T4231] usb 3-1: SerialNumber: syz [ 113.628493][ T4231] usb 3-1: config 0 descriptor?? [ 113.662852][ T4622] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.808574][ T4231] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 114.029841][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.857553][ T1111] usb 3-1: USB disconnect, device number 4 [ 115.293692][ T4234] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 115.302181][ T4654] loop4: detected capacity change from 0 to 164 [ 115.692755][ T4229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.882716][ T4234] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 116.272429][ T4234] usb 4-1: config 0 has no interface number 0 [ 116.409475][ T4660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'. [ 116.488666][ T4234] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 116.502751][ T4229] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 116.535359][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.947552][ T4229] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.961188][ T4234] usb 4-1: Product: syz [ 117.965669][ T4234] usb 4-1: Manufacturer: syz [ 117.970306][ T4234] usb 4-1: SerialNumber: syz [ 117.975346][ T4229] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.982013][ T4229] usb 2-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 118.002289][ T4234] usb 4-1: config 0 descriptor?? [ 118.027755][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.036479][ T4234] usb 4-1: can't set config #0, error -71 [ 118.053635][ T4229] usb 2-1: config 0 descriptor?? [ 118.069040][ T4234] usb 4-1: USB disconnect, device number 6 [ 118.296967][ T4679] device syzkaller0 entered promiscuous mode [ 118.318390][ T4679] tipc: Started in network mode [ 118.404406][ T4679] tipc: Node identity aa4cbd0d5923, cluster identity 4711 [ 118.452934][ T4229] usbhid 2-1:0.0: can't add hid device: -71 [ 118.464941][ T4229] usbhid: probe of 2-1:0.0 failed with error -71 [ 118.498541][ T4679] tipc: Enabled bearer , priority 0 [ 118.676189][ T4229] usb 2-1: USB disconnect, device number 4 [ 118.814623][ T4678] tipc: Resetting bearer [ 119.288859][ T4678] tipc: Disabling bearer [ 119.395878][ T4691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.130'. [ 119.476276][ T4691] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 121.245034][ T4704] jffs2: notice: (4704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.854861][ T4704] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 122.191124][ T4709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.134'. [ 122.622596][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.852801][ T1108] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 123.886107][ T1108] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.058268][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.093765][ T1108] usb 4-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 124.112519][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.144628][ T1108] usb 4-1: config 0 descriptor?? [ 124.432914][ T4715] udc-core: couldn't find an available UDC or it's busy [ 124.478413][ T4715] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 126.246301][ T1108] usbhid 4-1:0.0: can't add hid device: -71 [ 126.252359][ T1108] usbhid: probe of 4-1:0.0 failed with error -71 [ 126.921278][ T1108] usb 4-1: USB disconnect, device number 7 [ 127.312315][ T4756] loop1: detected capacity change from 0 to 164 [ 127.829436][ T4762] kvm [4761]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 131.879962][ T4787] tcpci: probe of 0-0005 failed with error -5 [ 131.889194][ T4787] i2c i2c-0: new_device: Instantiated device tcpci at 0x05 [ 132.816410][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.823066][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.914291][ T4373] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.652590][ T4373] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 134.086943][ T4812] FAULT_INJECTION: forcing a failure. [ 134.086943][ T4812] name failslab, interval 1, probability 0, space 0, times 0 [ 134.177643][ T4373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.186253][ T4373] usb 4-1: Product: syz [ 134.190479][ T4373] usb 4-1: Manufacturer: syz [ 134.197700][ T4373] usb 4-1: SerialNumber: syz [ 134.228383][ T4812] CPU: 1 PID: 4812 Comm: syz.0.167 Not tainted syzkaller #0 [ 134.235745][ T4812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.245810][ T4812] Call Trace: [ 134.249119][ T4812] [ 134.252076][ T4812] dump_stack_lvl+0x188/0x250 [ 134.256792][ T4812] ? show_regs_print_info+0x20/0x20 [ 134.262006][ T4812] ? load_image+0x410/0x410 [ 134.266526][ T4812] ? __might_sleep+0xf0/0xf0 [ 134.271131][ T4812] ? __lock_acquire+0x7b50/0x7b50 [ 134.276170][ T4812] should_fail+0x383/0x4b0 [ 134.280621][ T4812] should_failslab+0x5/0x20 [ 134.285133][ T4812] slab_pre_alloc_hook+0x51/0xc0 [ 134.290082][ T4812] ? __kernfs_new_node+0xe3/0x6b0 [ 134.295118][ T4812] kmem_cache_alloc+0x3d/0x280 [ 134.299894][ T4812] __kernfs_new_node+0xe3/0x6b0 [ 134.304757][ T4812] ? _raw_spin_unlock+0x40/0x40 [ 134.309637][ T4812] ? kernfs_new_node+0x250/0x250 [ 134.314630][ T4812] ? pcpu_alloc+0x11e6/0x16d0 [ 134.319325][ T4812] kernfs_new_node+0x148/0x250 [ 134.324119][ T4812] kernfs_create_dir_ns+0x40/0x120 [ 134.329260][ T4812] cgroup_mkdir+0x4a8/0xeb0 [ 134.333802][ T4812] ? __up_read+0x2b4/0x6b0 [ 134.338263][ T4812] ? css_task_iter_end+0x280/0x280 [ 134.343387][ T4812] ? up_read+0x20/0x20 [ 134.347481][ T4812] ? do_raw_spin_unlock+0x11d/0x230 [ 134.352694][ T4812] ? kernfs_iop_permission+0x22d/0x310 [ 134.358163][ T4812] ? css_task_iter_end+0x280/0x280 [ 134.363304][ T4812] kernfs_iop_mkdir+0x23d/0x3d0 [ 134.368176][ T4812] vfs_mkdir+0x386/0x570 [ 134.372460][ T4812] do_mkdirat+0x1dd/0x5c0 [ 134.376831][ T4812] ? vfs_mkdir+0x570/0x570 [ 134.381260][ T4812] __x64_sys_mkdirat+0x85/0x90 [ 134.386032][ T4812] do_syscall_64+0x4c/0xa0 [ 134.390460][ T4812] ? clear_bhb_loop+0x30/0x80 [ 134.395159][ T4812] ? clear_bhb_loop+0x30/0x80 [ 134.399849][ T4812] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.405773][ T4812] RIP: 0033:0x7fe329709159 [ 134.410209][ T4812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.429872][ T4812] RSP: 002b:00007fe327961028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 134.438322][ T4812] RAX: ffffffffffffffda RBX: 00007fe329990fa0 RCX: 00007fe329709159 [ 134.446308][ T4812] RDX: 0000000000000777 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 134.454306][ T4812] RBP: 00007fe3297a006b R08: 0000000000000000 R09: 0000000000000000 [ 134.462310][ T4812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.470291][ T4812] R13: 00007fe329991038 R14: 00007fe329990fa0 R15: 00007fff5064d178 [ 134.478303][ T4812] [ 136.013463][ T4373] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 136.043076][ T4373] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 136.112166][ T4827] loop3: detected capacity change from 0 to 164 [ 136.132608][ T4373] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 136.175614][ T4373] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 136.210212][ T4373] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 136.260696][ T4373] lan78xx: probe of 4-1:1.0 failed with error -71 [ 136.432499][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.502816][ T4373] usb 4-1: USB disconnect, device number 8 [ 136.812563][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.834840][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.875272][ T1108] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.905485][ T1108] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 136.968756][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.212718][ T1108] rtsx_usb: probe of 3-1:1.0 failed with error -8 [ 137.305654][ T4229] usb 3-1: USB disconnect, device number 5 [ 139.882644][ T4864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.204679][ T4903] FAULT_INJECTION: forcing a failure. [ 145.204679][ T4903] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 145.222564][ T4903] CPU: 0 PID: 4903 Comm: syz.3.194 Not tainted syzkaller #0 [ 145.229952][ T4903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.240180][ T4903] Call Trace: [ 145.243514][ T4903] [ 145.246565][ T4903] dump_stack_lvl+0x188/0x250 [ 145.251295][ T4903] ? show_regs_print_info+0x20/0x20 [ 145.256625][ T4903] ? load_image+0x410/0x410 [ 145.261171][ T4903] ? __lock_acquire+0x7b50/0x7b50 [ 145.266254][ T4903] should_fail+0x383/0x4b0 [ 145.270725][ T4903] prepare_alloc_pages+0x1e3/0x5b0 [ 145.275899][ T4903] __alloc_pages+0x11b/0x480 [ 145.280579][ T4903] ? zone_statistics+0x170/0x170 [ 145.285601][ T4903] ? alloc_pages+0x452/0x560 [ 145.290280][ T4903] pte_alloc_one+0x7b/0x310 [ 145.294828][ T4903] ? rcu_lock_release+0x20/0x20 [ 145.299729][ T4903] ? __rwlock_init+0x140/0x140 [ 145.304530][ T4903] ? count_memcg_event_mm+0x324/0x370 [ 145.309958][ T4903] ? do_raw_spin_unlock+0x11d/0x230 [ 145.315217][ T4903] __pte_alloc+0x21/0x150 [ 145.319597][ T4903] ? __pud_alloc+0x122/0x140 [ 145.324235][ T4903] handle_mm_fault+0x39d9/0x4440 [ 145.329236][ T4903] ? get_page+0xe0/0xe0 [ 145.333445][ T4903] ? follow_page_mask+0x272/0x12b0 [ 145.338609][ T4903] ? vma_is_secretmem+0x9/0x40 [ 145.343417][ T4903] ? check_vma_flags+0x359/0x470 [ 145.348403][ T4903] __get_user_pages+0x952/0x11e0 [ 145.353407][ T4903] ? populate_vma_page_range+0x290/0x290 [ 145.359094][ T4903] ? __might_sleep+0xf0/0xf0 [ 145.363731][ T4903] ? read_lock_is_recursive+0x10/0x10 [ 145.369163][ T4903] __get_user_pages_remote+0x1c2/0x730 [ 145.374714][ T4903] ? get_user_pages_remote+0x55/0xa0 [ 145.380077][ T4903] get_arg_page+0x11b/0x350 [ 145.384639][ T4903] ? copy_string_kernel+0x280/0x280 [ 145.390323][ T4903] ? up_write+0x1b6/0x410 [ 145.394705][ T4903] copy_string_kernel+0x14d/0x280 [ 145.399811][ T4903] do_execveat_common+0x360/0x6b0 [ 145.404929][ T4903] __x64_sys_execveat+0xc0/0xe0 [ 145.409833][ T4903] do_syscall_64+0x4c/0xa0 [ 145.414288][ T4903] ? clear_bhb_loop+0x30/0x80 [ 145.419011][ T4903] ? clear_bhb_loop+0x30/0x80 [ 145.423733][ T4903] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.429667][ T4903] RIP: 0033:0x7f9fb46ee159 [ 145.434129][ T4903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.453780][ T4903] RSP: 002b:00007f9fb2946028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 145.462247][ T4903] RAX: ffffffffffffffda RBX: 00007f9fb4975fa0 RCX: 00007f9fb46ee159 [ 145.470287][ T4903] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 145.478298][ T4903] RBP: 00007f9fb478506b R08: 0000000000001000 R09: 0000000000000000 [ 145.486537][ T4903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.494567][ T4903] R13: 00007f9fb4976038 R14: 00007f9fb4975fa0 R15: 00007ffc5ba8d1b8 [ 145.502604][ T4903] [ 145.582566][ T4229] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.648916][ T4907] loop3: detected capacity change from 0 to 164 [ 146.052672][ T4229] usb 2-1: device not accepting address 5, error -71 [ 148.579072][ T4939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'. [ 148.619833][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 150.696429][ T4959] FAULT_INJECTION: forcing a failure. [ 150.696429][ T4959] name failslab, interval 1, probability 0, space 0, times 0 [ 150.786245][ T4959] CPU: 1 PID: 4959 Comm: syz.2.210 Not tainted syzkaller #0 [ 150.793609][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.803706][ T4959] Call Trace: [ 150.807034][ T4959] [ 150.809999][ T4959] dump_stack_lvl+0x188/0x250 [ 150.814720][ T4959] ? show_regs_print_info+0x20/0x20 [ 150.819956][ T4959] ? load_image+0x410/0x410 [ 150.824530][ T4959] ? __lock_acquire+0x7b50/0x7b50 [ 150.829615][ T4959] should_fail+0x383/0x4b0 [ 150.834232][ T4959] should_failslab+0x5/0x20 [ 150.838821][ T4959] slab_pre_alloc_hook+0x51/0xc0 [ 150.843823][ T4959] __kmalloc+0x6b/0x340 [ 150.848036][ T4959] ? fib_trie_table+0x2f/0x1c0 [ 150.852881][ T4959] fib_trie_table+0x2f/0x1c0 [ 150.857525][ T4959] fib_new_table+0x131/0x2d0 [ 150.862180][ T4959] inet_rtm_newroute+0x12f/0x230 [ 150.867170][ T4959] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 150.872347][ T4959] ? rcu_read_unlock+0x90/0x90 [ 150.877186][ T4959] ? rcu_read_unlock+0x90/0x90 [ 150.882132][ T4959] rtnetlink_rcv_msg+0x7f1/0xf10 [ 150.887180][ T4959] ? lock_chain_count+0x20/0x20 [ 150.892099][ T4959] ? rtnetlink_bind+0x80/0x80 [ 150.896881][ T4959] ? __local_bh_enable_ip+0x136/0x1c0 [ 150.902306][ T4959] ? lockdep_hardirqs_on+0x94/0x140 [ 150.907564][ T4959] ? __local_bh_enable_ip+0x136/0x1c0 [ 150.912999][ T4959] ? _local_bh_enable+0xa0/0xa0 [ 150.918061][ T4959] ? __dev_queue_xmit+0x1b64/0x2e50 [ 150.923635][ T4959] ? dev_queue_xmit+0x20/0x20 [ 150.928382][ T4959] ? memcpy+0x3c/0x60 [ 150.932415][ T4959] ? __copy_skb_header+0x3ba/0x4f0 [ 150.937593][ T4959] netlink_rcv_skb+0x1e9/0x430 [ 150.942414][ T4959] ? rtnetlink_bind+0x80/0x80 [ 150.947145][ T4959] ? netlink_ack+0xb10/0xb10 [ 150.951825][ T4959] netlink_unicast+0x78f/0x940 [ 150.956692][ T4959] netlink_sendmsg+0x8ba/0xbe0 [ 150.961513][ T4959] ? netlink_getsockopt+0x570/0x570 [ 150.966755][ T4959] ? aa_sock_msg_perm+0x94/0x150 [ 150.971872][ T4959] ? apparmor_socket_sendmsg+0x88/0x230 [ 150.977479][ T4959] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 150.982978][ T4959] ? security_socket_sendmsg+0x7c/0xa0 [ 150.988641][ T4959] __sys_sendto+0x46d/0x620 [ 150.993618][ T4959] ? __ia32_sys_getpeername+0x80/0x80 [ 150.999078][ T4959] ? lock_chain_count+0x20/0x20 [ 151.004036][ T4959] __x64_sys_sendto+0xda/0xf0 [ 151.008785][ T4959] do_syscall_64+0x4c/0xa0 [ 151.013255][ T4959] ? clear_bhb_loop+0x30/0x80 [ 151.018215][ T4959] ? clear_bhb_loop+0x30/0x80 [ 151.022954][ T4959] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.028904][ T4959] RIP: 0033:0x7f07292e1159 [ 151.033373][ T4959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.053030][ T4959] RSP: 002b:00007f0727539028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 151.061510][ T4959] RAX: ffffffffffffffda RBX: 00007f0729568fa0 RCX: 00007f07292e1159 [ 151.069528][ T4959] RDX: 0000000000000078 RSI: 0000200000000080 RDI: 0000000000000004 [ 151.077635][ T4959] RBP: 00007f072937806b R08: 0000000000000000 R09: 0000000000000000 [ 151.085664][ T4959] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 151.093822][ T4959] R13: 00007f0729569038 R14: 00007f0729568fa0 R15: 00007ffdf9fc7a38 [ 151.101860][ T4959] [ 151.172457][ T4232] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 151.642928][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.837166][ T4232] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.923441][ T4232] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.985114][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.145542][ T4232] usb 5-1: SerialNumber: syz [ 152.585471][ T4232] usb 5-1: 0:2 : does not exist [ 152.706370][ T4232] usb 5-1: USB disconnect, device number 3 [ 152.993628][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.815701][ T5000] loop1: detected capacity change from 0 to 164 [ 156.133689][ T5028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'. [ 160.702813][ C1] sd 0:0:1:0: tag#2249 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 160.712784][ C1] sd 0:0:1:0: tag#2249 CDB: Write(6) 0a 00 4e 21 00 00 [ 161.072437][ T4232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.100535][ T5070] loop1: detected capacity change from 0 to 164 [ 161.464741][ T5073] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 161.542916][ T4232] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 161.562668][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.827248][ T5066] udc-core: couldn't find an available UDC or it's busy [ 161.851392][ T5066] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 161.909181][ T4232] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 162.187239][ T4232] usb 5-1: USB disconnect, device number 4 [ 165.803979][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.202977][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 167.382609][ T23] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 167.437529][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.484791][ T23] usb 5-1: config 0 has no interface number 0 [ 167.515987][ T23] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.549765][ T23] usb 5-1: config 0 interface 85 has no altsetting 0 [ 167.872571][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 167.886469][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.901851][ T23] usb 5-1: Product: syz [ 167.908388][ T23] usb 5-1: Manufacturer: syz [ 167.916681][ T23] usb 5-1: SerialNumber: syz [ 167.934955][ T23] usb 5-1: config 0 descriptor?? [ 167.984792][ T23] appletouch 5-1:0.85: Could not find int-in endpoint [ 167.993914][ T23] appletouch: probe of 5-1:0.85 failed with error -5 [ 168.006589][ T23] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 168.194650][ T4373] usb 5-1: USB disconnect, device number 5 [ 168.872890][ T5149] loop4: detected capacity change from 0 to 164 [ 170.032605][ T1335] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.388262][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 170.762841][ T1335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.797267][ T1335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.800382][ T5177] capability: warning: `syz.0.275' uses deprecated v2 capabilities in a way that may be insecure [ 170.932715][ T1335] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.981123][ T1335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.022484][ T1335] usb 4-1: SerialNumber: syz [ 171.361039][ T1335] usb 4-1: 0:2 : does not exist [ 171.408182][ T1335] usb 4-1: USB disconnect, device number 9 [ 171.481033][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.804559][ T5190] kvm [5189]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 172.191189][ T5199] kvm [5194]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 172.233651][ T5199] kvm [5194]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 172.261367][ T5199] kvm [5194]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 172.295576][ T5199] kvm [5194]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 172.350576][ T5199] kvm [5194]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 172.844493][ T5199] kvm [5194]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 172.865367][ T5199] kvm [5194]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 172.955347][ T5199] kvm [5194]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 173.282626][ T4373] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.408403][ T1111] bond0 speed is unknown, defaulting to 1000 [ 173.597938][ T4231] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 173.683391][ T4373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.699869][ T4373] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.732771][ T4373] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 173.741885][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.852464][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 174.053755][ T4231] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 174.079101][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 174.181278][ T4231] usb 2-1: SerialNumber: syz [ 174.250141][ T4373] rtsx_usb: probe of 1-1:1.0 failed with error -71 [ 174.260732][ T4231] usb 2-1: config 0 descriptor?? [ 174.328072][ T4373] usb 1-1: USB disconnect, device number 4 [ 174.335364][ T5241] netlink: 'syz.3.295': attribute type 12 has an invalid length. [ 174.355078][ T4231] as10x_usb: device has been detected [ 174.370674][ T4231] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 174.446064][ T4231] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 174.538715][ T4231] as10x_usb: error during firmware upload part1 [ 174.566164][ T4231] Registered device nBox DVB-T Dongle [ 174.596995][ T4231] usb 2-1: USB disconnect, device number 7 [ 174.683855][ T4231] Unregistered device nBox DVB-T Dongle [ 174.691828][ T4231] as10x_usb: device has been disconnected [ 174.762563][ T4373] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.871109][ T5250] kvm [5249]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 175.012558][ T4373] usb 1-1: Using ep0 maxpacket: 32 [ 175.162718][ T4373] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 229, changing to 7 [ 175.374062][ T4373] usb 1-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 175.386683][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.404749][ T4373] usb 1-1: Product: syz [ 175.413811][ T4373] usb 1-1: Manufacturer: syz [ 175.426445][ T4373] usb 1-1: SerialNumber: syz [ 175.891062][ T5282] CIFS: Attempting to mount \\127.0.0.1\share [ 176.696591][ T4373] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 176.733335][ T5282] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 176.782827][ T4373] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 178.213048][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.264088][ T4373] usb 1-1: USB disconnect, device number 5 [ 178.372309][ T5282] CIFS: VFS: error -4 create cifsd thread [ 178.428931][ T5282] CIFS: VFS: cifs_mount failed w/return code = -4 [ 179.528419][ T5323] kvm [5322]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 179.697195][ T5336] netlink: 52 bytes leftover after parsing attributes in process `syz.4.315'. [ 181.022415][ T1111] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 182.243375][ T1335] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 182.938335][ T1111] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 182.946749][ T1111] usb 2-1: config 0 has no interface number 0 [ 182.955385][ T1111] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 182.966538][ T1111] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 182.977731][ T1335] usb 1-1: Using ep0 maxpacket: 8 [ 182.983969][ T1111] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 183.000907][ T1111] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.098113][ T1111] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 183.122687][ T1335] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 183.144250][ T1335] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.188163][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.197263][ T1335] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.238075][ T1111] usb 2-1: config 0 descriptor?? [ 183.250246][ T1335] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.270539][ T1335] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.285321][ T1111] usb 2-1: can't set config #0, error -71 [ 183.325332][ T1111] usb 2-1: USB disconnect, device number 8 [ 183.348109][ T1335] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.387320][ T1335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.642273][ T5394] kvm [5393]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 183.726064][ T5359] udc-core: couldn't find an available UDC or it's busy [ 183.741753][ T5359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 183.752610][ T1335] usb 1-1: usb_control_msg returned -32 [ 183.758818][ T1335] usbtmc 1-1:16.0: can't read capabilities [ 184.528088][ T4197] usb 1-1: USB disconnect, device number 6 [ 185.448166][ T5433] netlink: 'syz.0.340': attribute type 11 has an invalid length. [ 190.064809][ T5494] netlink: 'syz.3.356': attribute type 11 has an invalid length. [ 192.172021][ T5519] loop0: detected capacity change from 0 to 128 [ 192.289583][ T1335] Bluetooth: hci2: command 0x0406 tx timeout [ 192.295746][ T1335] Bluetooth: hci3: command 0x0406 tx timeout [ 192.301812][ T1335] Bluetooth: hci4: command 0x0406 tx timeout [ 192.307979][ T1335] Bluetooth: hci0: command 0x0406 tx timeout [ 192.838859][ T5530] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5530] [ 194.773594][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.780101][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.839356][ T5573] comedi comedi1: Minor 768 is invalid! [ 198.984163][ T1111] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 201.049222][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 201.086327][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.148169][ T1111] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 201.186566][ T1111] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 201.325932][ T1111] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 201.361872][ T1111] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 201.752553][ T1111] usb 5-1: string descriptor 0 read error: -71 [ 201.758978][ T1111] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.899289][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.148887][ T1335] Bluetooth: hci1: command 0x0406 tx timeout [ 202.312726][ T1111] usb 5-1: can't set config #1, error -71 [ 202.544212][ T1111] usb 5-1: USB disconnect, device number 6 [ 202.802566][ T4197] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.092735][ T4197] usb 2-1: Using ep0 maxpacket: 32 [ 203.672664][ T4197] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.711641][ T4197] usb 2-1: config 0 has no interface number 0 [ 203.784162][ T4197] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 203.819742][ T4197] usb 2-1: config 0 interface 1 has no altsetting 0 [ 204.751751][ T4197] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 204.780355][ T4197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.799038][ T4197] usb 2-1: Product: syz [ 204.810004][ T4197] usb 2-1: Manufacturer: syz [ 204.829420][ T4197] usb 2-1: SerialNumber: syz [ 204.854792][ T4197] usb 2-1: config 0 descriptor?? [ 204.933075][ T4197] usb 2-1: can't set config #0, error -71 [ 204.954374][ T4197] usb 2-1: USB disconnect, device number 9 [ 206.159288][ T7] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 206.168155][ T7] Bluetooth: hci4: Injecting HCI hardware error event [ 206.177446][ T4202] Bluetooth: hci4: hardware error 0x00 [ 207.224937][ T5724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 207.242461][ T5724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 207.273146][ T5724] device dummy0 entered promiscuous mode [ 208.532696][ T5740] FAULT_INJECTION: forcing a failure. [ 208.532696][ T5740] name failslab, interval 1, probability 0, space 0, times 0 [ 208.582663][ T5740] CPU: 0 PID: 5740 Comm: syz.4.427 Not tainted syzkaller #0 [ 208.590236][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 208.600339][ T5740] Call Trace: [ 208.603667][ T5740] [ 208.606634][ T5740] dump_stack_lvl+0x188/0x250 [ 208.611389][ T5740] ? show_regs_print_info+0x20/0x20 [ 208.616636][ T5740] ? load_image+0x410/0x410 [ 208.621190][ T5740] ? __lock_acquire+0x7b50/0x7b50 [ 208.626260][ T5740] ? rcu_lock_acquire+0x30/0x30 [ 208.631173][ T5740] should_fail+0x383/0x4b0 [ 208.635650][ T5740] should_failslab+0x5/0x20 [ 208.640198][ T5740] slab_pre_alloc_hook+0x51/0xc0 [ 208.645179][ T5740] ? security_file_alloc+0x30/0x110 [ 208.650447][ T5740] kmem_cache_alloc+0x3d/0x280 [ 208.655344][ T5740] ? rcu_is_watching+0x11/0xa0 [ 208.658352][ T5749] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 208.660163][ T5740] security_file_alloc+0x30/0x110 [ 208.683486][ T5740] __alloc_file+0xc2/0x240 [ 208.687959][ T5740] alloc_empty_file+0x90/0x180 [ 208.692771][ T5740] path_openat+0x11c/0x2fb0 [ 208.697332][ T5740] ? __lock_acquire+0x13dc/0x7b50 [ 208.702434][ T5740] ? stack_trace_snprint+0xe0/0xe0 [ 208.707636][ T5740] ? verify_lock_unused+0x140/0x140 [ 208.712916][ T5740] ? verify_lock_unused+0x140/0x140 [ 208.718166][ T5740] ? __kasan_slab_alloc+0xa9/0xc0 [ 208.723235][ T5740] ? __kasan_slab_alloc+0x92/0xc0 [ 208.728329][ T5740] ? slab_post_alloc_hook+0x4c/0x380 [ 208.733657][ T5740] ? verify_lock_unused+0x140/0x140 [ 208.738944][ T5740] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.745063][ T5740] ? do_filp_open+0x400/0x400 [ 208.749803][ T5740] do_filp_open+0x1df/0x400 [ 208.754349][ T5740] ? vfs_tmpfile+0x300/0x300 [ 208.759043][ T5740] ? _raw_spin_unlock+0x24/0x40 [ 208.763950][ T5740] ? alloc_fd+0x59e/0x650 [ 208.768337][ T5740] do_sys_openat2+0x14b/0x500 [ 208.773062][ T5740] ? __lock_acquire+0x7b50/0x7b50 [ 208.778140][ T5740] ? do_sys_open+0xe0/0xe0 [ 208.782606][ T5740] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 208.788641][ T5740] ? lock_chain_count+0x20/0x20 [ 208.793555][ T5740] __x64_sys_openat+0x135/0x160 [ 208.798480][ T5740] do_syscall_64+0x4c/0xa0 [ 208.802943][ T5740] ? clear_bhb_loop+0x30/0x80 [ 208.807668][ T5740] ? clear_bhb_loop+0x30/0x80 [ 208.812418][ T5740] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.818373][ T5740] RIP: 0033:0x7f390eca398e [ 208.822829][ T5740] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.842472][ T5740] RSP: 002b:00007f390cf38ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.850925][ T5740] RAX: ffffffffffffffda RBX: 00007f390cf3b6c0 RCX: 00007f390eca398e [ 208.858951][ T5740] RDX: 0000000000000002 RSI: 00007f390ed7940a RDI: ffffffffffffff9c [ 208.866962][ T5740] RBP: 00007f390ed7a06b R08: 0000000000000000 R09: 0000000000000000 [ 208.874993][ T5740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 208.883398][ T5740] R13: 0000200000000580 R14: 0000000000000006 R15: 00007ffe23b83868 [ 208.891424][ T5740] [ 212.313201][ T5757] netlink: 'syz.3.435': attribute type 4 has an invalid length. [ 214.274567][ T5788] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 214.907191][ T5796] FAULT_INJECTION: forcing a failure. [ 214.907191][ T5796] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 214.963993][ T5796] CPU: 0 PID: 5796 Comm: syz.2.448 Not tainted syzkaller #0 [ 214.971357][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 214.981451][ T5796] Call Trace: [ 214.984783][ T5796] [ 214.987750][ T5796] dump_stack_lvl+0x188/0x250 [ 214.992471][ T5796] ? show_regs_print_info+0x20/0x20 [ 214.997825][ T5796] ? load_image+0x410/0x410 [ 215.002400][ T5796] ? __lock_acquire+0x7b50/0x7b50 [ 215.007488][ T5796] should_fail+0x383/0x4b0 [ 215.011938][ T5796] _copy_from_user+0x2e/0x170 [ 215.016638][ T5796] map_update_elem+0x3b3/0x760 [ 215.021422][ T5796] __sys_bpf+0x46b/0x6f0 [ 215.025705][ T5796] ? bpf_link_show_fdinfo+0x380/0x380 [ 215.031099][ T5796] __x64_sys_bpf+0x78/0x90 [ 215.035533][ T5796] do_syscall_64+0x4c/0xa0 [ 215.039998][ T5796] ? clear_bhb_loop+0x30/0x80 [ 215.044686][ T5796] ? clear_bhb_loop+0x30/0x80 [ 215.049384][ T5796] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.055283][ T5796] RIP: 0033:0x7f07292e1159 [ 215.059710][ T5796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.079332][ T5796] RSP: 002b:00007f0727539028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.088015][ T5796] RAX: ffffffffffffffda RBX: 00007f0729568fa0 RCX: 00007f07292e1159 [ 215.096008][ T5796] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 215.105281][ T5796] RBP: 00007f072937806b R08: 0000000000000000 R09: 0000000000000000 [ 215.113267][ T5796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.121261][ T5796] R13: 00007f0729569038 R14: 00007f0729568fa0 R15: 00007ffdf9fc7a38 [ 215.129266][ T5796] [ 215.794890][ T5804] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5805] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5804] [ 216.872484][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 217.122831][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 217.181173][ T5811] netlink: 'syz.2.453': attribute type 12 has an invalid length. [ 217.254413][ T7] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 217.282054][ T7] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 217.378536][ T7] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 217.422216][ T7] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 217.475499][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 217.593050][ T7] usb 4-1: config 0 has no interface number 0 [ 217.619577][ T7] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 217.674166][ T7] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 217.727148][ T7] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 217.788459][ T7] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.810080][ T7] usb 4-1: config 0 interface 125 has no altsetting 0 [ 217.817332][ T7] usb 4-1: config 0 interface 125 has no altsetting 2 [ 217.993044][ T7] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 218.011085][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.021103][ T7] usb 4-1: Product: syz [ 218.032293][ T7] usb 4-1: Manufacturer: syz [ 218.037316][ T7] usb 4-1: SerialNumber: syz [ 218.050785][ T7] usb 4-1: config 0 descriptor?? [ 218.105791][ T7] usb 4-1: selecting invalid altsetting 2 [ 218.310818][ T5845] FAULT_INJECTION: forcing a failure. [ 218.310818][ T5845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.362403][ C0] usb 4-1: async_complete: urb error -71 [ 218.362720][ T5845] CPU: 1 PID: 5845 Comm: syz.0.464 Not tainted syzkaller #0 [ 218.369240][ C0] usb 4-1: async_complete: urb error -71 [ 218.375863][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 218.382030][ C0] usb 4-1: async_complete: urb error -71 [ 218.391784][ T5845] Call Trace: [ 218.391799][ T5845] [ 218.397884][ C0] usb 4-1: async_complete: urb error -71 [ 218.400786][ T5845] dump_stack_lvl+0x188/0x250 [ 218.409044][ T7] get_1284_register: usb error -71 [ 218.409396][ T5845] ? show_regs_print_info+0x20/0x20 [ 218.424589][ T5845] ? load_image+0x410/0x410 [ 218.427523][ T7] usb 4-1: USB disconnect, device number 10 [ 218.429159][ T5845] ? __lock_acquire+0x7b50/0x7b50 [ 218.440139][ T5845] should_fail+0x383/0x4b0 [ 218.444613][ T5845] _copy_from_user+0x2e/0x170 [ 218.449344][ T5845] map_update_elem+0x3b3/0x760 [ 218.454180][ T5845] __sys_bpf+0x46b/0x6f0 [ 218.458482][ T5845] ? bpf_link_show_fdinfo+0x380/0x380 [ 218.463936][ T5845] __x64_sys_bpf+0x78/0x90 [ 218.468406][ T5845] do_syscall_64+0x4c/0xa0 [ 218.472912][ T5845] ? clear_bhb_loop+0x30/0x80 [ 218.477652][ T5845] ? clear_bhb_loop+0x30/0x80 [ 218.482391][ T5845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.488335][ T5845] RIP: 0033:0x7fe329709159 [ 218.492790][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.512814][ T5845] RSP: 002b:00007fe327961028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.521291][ T5845] RAX: ffffffffffffffda RBX: 00007fe329990fa0 RCX: 00007fe329709159 [ 218.529359][ T5845] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 218.537384][ T5845] RBP: 00007fe3297a006b R08: 0000000000000000 R09: 0000000000000000 [ 218.545402][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.553423][ T5845] R13: 00007fe329991038 R14: 00007fe329990fa0 R15: 00007fff5064d178 [ 218.561556][ T5845] [ 218.614874][ T5849] netlink: 'syz.3.465': attribute type 12 has an invalid length. [ 219.372856][ T4232] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 219.732801][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.922786][ T4232] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 219.958110][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.986801][ T4232] usb 5-1: Product: syz [ 220.005001][ T4232] usb 5-1: Manufacturer: syz [ 220.020973][ T1335] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 220.044637][ T4232] usb 5-1: SerialNumber: syz [ 220.637968][ T4232] usb 5-1: cannot create comm data receiver. [ 220.686437][ T4232] snd-usb-6fire: probe of 5-1:1.0 failed with error -2 [ 220.918746][ T4232] usb 5-1: USB disconnect, device number 7 [ 221.118222][ T5895] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 221.134864][ T1335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.172938][ T5895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.180792][ T5895] IPv6: NLM_F_CREATE should be set when creating new route [ 221.432817][ T1335] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 221.443044][ T1335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 221.616907][ T1335] usb 2-1: Product: syz [ 221.639633][ T1335] usb 2-1: Manufacturer: syz [ 222.357392][ T1335] usb 2-1: selecting invalid altsetting 1 [ 222.379222][ T1335] dvb_ttusb_budget: ttusb_init_controller: error [ 222.405539][ T1335] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 222.462460][ T1111] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 222.504523][ T1335] DVB: Unable to find symbol cx22700_attach() [ 222.564327][ T5881] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 222.577313][ T1335] DVB: Unable to find symbol tda10046_attach() [ 222.592462][ T1335] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 222.703685][ T1335] usb 2-1: USB disconnect, device number 10 [ 222.752936][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 222.882923][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.919538][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.934534][ T1111] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.951847][ T1111] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 223.425377][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.473997][ T1111] usb 3-1: config 0 descriptor?? [ 224.081199][ T1111] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 224.102086][ T1111] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 224.303874][ T1111] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 224.327471][ T5941] ======================================================= [ 224.327471][ T5941] WARNING: The mand mount option has been deprecated and [ 224.327471][ T5941] and is ignored by this kernel. Remove the mand [ 224.327471][ T5941] option from the mount to silence this warning. [ 224.327471][ T5941] ======================================================= [ 224.368788][ T5941] overlayfs: missing 'lowerdir' [ 224.414958][ T5943] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 225.127923][ T1111] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 225.140121][ T1111] microsoft 0003:045E:07DA.0002: no inputs found [ 225.146584][ T1111] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 225.168376][ T1111] usb 3-1: USB disconnect, device number 6 [ 225.249930][ T5945] fido_id[5945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 229.792420][ T5989] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5994] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5989] [ 230.772488][ T1108] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 231.358837][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 231.609403][ T1108] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 231.827326][ T1108] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 231.877510][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.905762][ T23] Bluetooth: hci1: command 0x0405 tx timeout [ 231.994874][ T1108] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 232.057280][ T1108] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 232.512520][ T6004] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 232.614040][ T6004] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 232.692499][ T6004] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 232.858019][ T6003] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 232.945787][ T1108] usb 1-1: USB disconnect, device number 7 [ 233.009409][ T1108] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 233.045761][ T1108] spcp8x5 1-1:1.0: device disconnected [ 233.492484][ T1335] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 234.034631][ T6070] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6071] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6070] [ 235.212892][ T1335] usb 4-1: Using ep0 maxpacket: 16 [ 235.492694][ T1335] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 235.535029][ T1335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.566822][ T1335] usb 4-1: Product: syz [ 235.571093][ T1335] usb 4-1: Manufacturer: syz [ 235.597368][ T1335] usb 4-1: SerialNumber: syz [ 236.609832][ T1335] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 236.712916][ T1335] usb 4-1: USB disconnect, device number 11 [ 240.674479][ T6125] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6126] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6125] [ 242.190545][ T6137] loop0: detected capacity change from 0 to 1024 [ 242.346727][ T6140] overlayfs: missing 'lowerdir' [ 243.530247][ T6137] hfsplus: xattr searching failed [ 243.573266][ T6160] hfsplus: xattr searching failed [ 244.484920][ T6168] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6170] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6168] [ 248.252463][ T6207] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6211] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6207] [ 248.275699][ T6209] loop2: detected capacity change from 0 to 512 [ 248.525792][ T6209] EXT4-fs (loop2): Ignoring removed bh option [ 248.531971][ T6209] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.282717][ T6209] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 249.454686][ T6209] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.906425][ T6260] netlink: 'syz.3.569': attribute type 12 has an invalid length. [ 254.208181][ T6279] loop1: detected capacity change from 0 to 512 [ 254.247583][ T6277] loop3: detected capacity change from 0 to 512 [ 254.261680][ T6281] Need at least one configuration in g1. [ 254.280100][ T6281] udc dummy_udc.0: failed to start g1: -22 [ 254.318449][ T6279] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 254.372793][ T6279] EXT4-fs (loop1): Unrecognized mount option "fsname=/" or missing value [ 254.473395][ T6277] EXT4-fs (loop3): Ignoring removed bh option [ 254.556847][ T6277] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.642587][ T6277] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 255.684664][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.691018][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.718357][ T6277] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.345942][ T6305] netlink: 'syz.0.585': attribute type 12 has an invalid length. [ 259.218096][ T6328] FAULT_INJECTION: forcing a failure. [ 259.218096][ T6328] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.407144][ T6328] CPU: 1 PID: 6328 Comm: syz.1.594 Not tainted syzkaller #0 [ 259.414533][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 259.424819][ T6328] Call Trace: [ 259.428117][ T6328] [ 259.431058][ T6328] dump_stack_lvl+0x188/0x250 [ 259.435757][ T6328] ? show_regs_print_info+0x20/0x20 [ 259.440969][ T6328] ? load_image+0x410/0x410 [ 259.445502][ T6328] ? __lock_acquire+0x7b50/0x7b50 [ 259.450548][ T6328] should_fail+0x383/0x4b0 [ 259.454989][ T6328] prepare_alloc_pages+0x1e3/0x5b0 [ 259.460125][ T6328] __alloc_pages+0x11b/0x480 [ 259.464767][ T6328] ? zone_statistics+0x170/0x170 [ 259.469728][ T6328] ? alloc_pages+0x452/0x560 [ 259.474342][ T6328] __vmalloc_node_range+0x4b1/0x8b0 [ 259.479600][ T6328] ? kvm_dev_ioctl+0x165/0x20a0 [ 259.484585][ T6328] __vmalloc+0x76/0x80 [ 259.488700][ T6328] ? kvm_dev_ioctl+0x165/0x20a0 [ 259.493744][ T6328] kvm_dev_ioctl+0x165/0x20a0 [ 259.498487][ T6328] ? hardware_enable_nolock+0x130/0x130 [ 259.504059][ T6328] ? bpf_lsm_file_ioctl+0x5/0x10 [ 259.509016][ T6328] ? security_file_ioctl+0x7c/0xa0 [ 259.514161][ T6328] ? hardware_enable_nolock+0x130/0x130 [ 259.519730][ T6328] __se_sys_ioctl+0xfa/0x170 [ 259.524339][ T6328] do_syscall_64+0x4c/0xa0 [ 259.528781][ T6328] ? clear_bhb_loop+0x30/0x80 [ 259.533482][ T6328] ? clear_bhb_loop+0x30/0x80 [ 259.538204][ T6328] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.544133][ T6328] RIP: 0033:0x7fdcea812159 [ 259.548600][ T6328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.568266][ T6328] RSP: 002b:00007fdce8a6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.576694][ T6328] RAX: ffffffffffffffda RBX: 00007fdceaa99fa0 RCX: 00007fdcea812159 [ 259.584681][ T6328] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 259.592665][ T6328] RBP: 00007fdcea8a906b R08: 0000000000000000 R09: 0000000000000000 [ 259.600647][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.608638][ T6328] R13: 00007fdceaa9a038 R14: 00007fdceaa99fa0 R15: 00007ffffc17b258 [ 259.616655][ T6328] [ 260.728640][ T6340] netlink: 'syz.3.597': attribute type 12 has an invalid length. [ 260.821829][ T6342] loop0: detected capacity change from 0 to 512 [ 260.910654][ T6342] EXT4-fs (loop0): Ignoring removed bh option [ 260.910744][ T6342] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.184051][ T6342] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 261.203275][ T6342] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.017690][ T6367] loop2: detected capacity change from 0 to 256 [ 262.080313][ T6369] loop3: detected capacity change from 0 to 1024 [ 262.600865][ T6367] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.612650][ T6367] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 263.238216][ T6367] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 263.305000][ T6369] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.638202][ T6369] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,minixdf,bsdgroups,max_batch_time=0x0000000000000013,abort,noinit_itable,,errors=continue. Quota mode: none. [ 263.754580][ T6394] binder: BINDER_SET_CONTEXT_MGR already set [ 263.762514][ T6394] binder: 6393:6394 ioctl 4018620d 200000004a80 returned -16 [ 263.839536][ T6399] netlink: 'syz.1.614': attribute type 11 has an invalid length. [ 264.272673][ T6401] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6405] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6401] [ 266.932690][ T6432] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6434] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6432] [ 267.589475][ T6431] loop2: detected capacity change from 0 to 512 [ 267.857445][ T6436] loop3: detected capacity change from 0 to 1024 [ 268.259591][ T6431] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,user_xattr,. Quota mode: writeback. [ 268.332775][ T6442] netlink: 'syz.4.628': attribute type 12 has an invalid length. [ 268.362529][ T6431] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.204936][ T6440] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 269.242269][ T6440] EXT4-fs (loop2): Remounting filesystem read-only [ 271.287548][ T6482] loop3: detected capacity change from 0 to 512 [ 271.316256][ T26] audit: type=1326 audit(1790352305.410:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.2.641" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07292e1159 code=0x7ffc0000 [ 271.372720][ T6482] EXT4-fs (loop3): Ignoring removed nobh option [ 271.396675][ T6485] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 271.415277][ T6485] netlink: 'syz.2.641': attribute type 2 has an invalid length. [ 271.439634][ T6487] netlink: 'syz.0.640': attribute type 12 has an invalid length. [ 271.455122][ T26] audit: type=1326 audit(1790352305.440:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.2.641" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07292e1159 code=0x7ffc0000 [ 271.485359][ T6482] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 271.571254][ T26] audit: type=1326 audit(1790352305.440:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.2.641" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07292e1159 code=0x7ffc0000 [ 271.597925][ T6482] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.682452][ T26] audit: type=1326 audit(1790352305.440:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.2.641" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07292e1159 code=0x7ffc0000 [ 271.726680][ T6482] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.639: corrupted inode contents [ 271.760157][ T26] audit: type=1326 audit(1790352305.440:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.2.641" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07292e1159 code=0x7ffc0000 [ 271.836545][ T6482] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #2: comm syz.3.639: mark_inode_dirty error [ 272.812799][ T6482] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.639: corrupted inode contents [ 272.834887][ T26] audit: type=1326 audit(1790352305.440:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.2.641" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07292e1159 code=0x7ffc0000 [ 272.900794][ T6482] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.639: mark_inode_dirty error [ 272.937961][ T26] audit: type=1326 audit(1790352305.440:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.2.641" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07292e1159 code=0x7ffc0000 [ 273.024833][ T26] audit: type=1326 audit(1790352305.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.2.641" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07292e1159 code=0x7ffc0000 [ 273.092504][ T26] audit: type=1326 audit(1790352305.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.2.641" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07292e1159 code=0x7ffc0000 [ 273.238170][ T26] audit: type=1326 audit(1790352305.510:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.2.641" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07292e1159 code=0x7ffc0000 [ 275.020597][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 275.102201][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 278.596841][ T6547] loop3: detected capacity change from 0 to 512 [ 281.448197][ T6575] loop1: detected capacity change from 0 to 512 [ 281.930431][ T6575] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 281.969411][ T6575] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 282.023205][ T6575] EXT4-fs (loop1): orphan file too big: 67108874 [ 282.045725][ T6575] EXT4-fs (loop1): mount failed [ 282.190782][ T1108] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 282.441093][ T6601] loop2: detected capacity change from 0 to 8192 [ 282.500574][ T6594] ------------[ cut here ]------------ [ 282.507184][ T6594] WARNING: CPU: 1 PID: 6594 at arch/x86/kvm/x86.c:10384 kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 282.524016][ T6594] Modules linked in: [ 282.527995][ T6594] CPU: 1 PID: 6594 Comm: syz.2.674 Not tainted syzkaller #0 [ 282.550630][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 282.571709][ T6594] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 282.582593][ T1108] usb 1-1: not running at top speed; connect to a high speed hub [ 282.600323][ T6594] Code: e8 a1 11 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 86 11 af 00 e9 e4 f7 ff ff e8 ec dd 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 282.638189][ T6594] RSP: 0018:ffffc900032afca0 EFLAGS: 00010283 [ 282.645025][ T6594] RAX: ffffffff810f36b4 RBX: 1ffff1100c0d0862 RCX: 0000000000080000 [ 282.653781][ T6594] RDX: ffffc90004495000 RSI: 0000000000000431 RDI: 0000000000000432 [ 282.661989][ T6594] RBP: 0000000000000000 R08: ffffffff8d8b1eef R09: 1ffffffff1b163dd [ 282.670690][ T6594] R10: dffffc0000000000 R11: fffffbfff1b163de R12: ffff88807bfcb001 [ 282.679419][ T1108] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 282.691548][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.702345][ T6594] R13: ffff8880606840f0 R14: ffff888060684000 R15: ffff88807bfcb000 [ 282.710535][ T1108] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 282.720469][ T6594] FS: 00007f07275396c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 282.730063][ T1108] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 282.739762][ T6594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.746880][ T6594] CR2: 00007fdceaa632f8 CR3: 0000000024479000 CR4: 00000000003526e0 [ 282.755393][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.763866][ T6594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.777900][ T1108] usb 1-1: config 0 descriptor?? [ 282.783148][ T6594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.793696][ T6594] Call Trace: [ 282.797238][ T6594] [ 282.800423][ T6594] kvm_vcpu_ioctl+0x8f2/0xc10 [ 282.805958][ T6594] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 282.817660][ T6594] ? bpf_lsm_file_ioctl+0x5/0x10 [ 282.823343][ T6594] ? security_file_ioctl+0x7c/0xa0 [ 282.828743][ T6594] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 282.836899][ T6594] __se_sys_ioctl+0xfa/0x170 [ 282.841809][ T6594] do_syscall_64+0x4c/0xa0 [ 282.847768][ T6594] ? clear_bhb_loop+0x30/0x80 [ 282.853567][ T6594] ? clear_bhb_loop+0x30/0x80 [ 282.858493][ T6594] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.864925][ T6594] RIP: 0033:0x7f07292e1159 [ 282.870269][ T6594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.893075][ T6594] RSP: 002b:00007f0727539028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.901737][ T6594] RAX: ffffffffffffffda RBX: 00007f0729568fa0 RCX: 00007f07292e1159 [ 282.911875][ T6594] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 282.922939][ T6594] RBP: 00007f072937806b R08: 0000000000000000 R09: 0000000000000000 [ 282.931037][ T1108] usb 1-1: Found UVC 9.00 device (046d:0825) [ 282.939457][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.948979][ T6594] R13: 00007f0729569038 R14: 00007f0729568fa0 R15: 00007ffdf9fc7a38 [ 282.956733][ T1108] usb 1-1: No streaming interface found for terminal 2. [ 282.958555][ T6594] [ 282.967494][ T6594] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.974956][ T6594] CPU: 0 PID: 6594 Comm: syz.2.674 Not tainted syzkaller #0 [ 282.982318][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 282.992436][ T6594] Call Trace: [ 282.995764][ T6594] [ 282.998743][ T6594] dump_stack_lvl+0x188/0x250 [ 283.003483][ T6594] ? show_regs_print_info+0x20/0x20 [ 283.008897][ T6594] ? load_image+0x410/0x410 [ 283.013474][ T6594] panic+0x2f8/0x850 [ 283.017437][ T6594] ? bpf_jit_dump+0xd0/0xd0 [ 283.022020][ T6594] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 283.027885][ T6594] __warn+0x248/0x2b0 [ 283.031932][ T6594] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 283.037796][ T6594] report_bug+0x1b9/0x2e0 [ 283.042206][ T6594] handle_bug+0x3a/0x70 [ 283.046454][ T6594] exc_invalid_op+0x16/0x40 [ 283.051023][ T6594] asm_exc_invalid_op+0x16/0x20 [ 283.055936][ T6594] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 283.062440][ T6594] Code: e8 a1 11 af 00 e9 a9 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f1 f7 ff ff 4c 89 ff e8 86 11 af 00 e9 e4 f7 ff ff e8 ec dd 69 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ea f7 ff ff 4c [ 283.082096][ T6594] RSP: 0018:ffffc900032afca0 EFLAGS: 00010283 [ 283.088306][ T6594] RAX: ffffffff810f36b4 RBX: 1ffff1100c0d0862 RCX: 0000000000080000 [ 283.096341][ T6594] RDX: ffffc90004495000 RSI: 0000000000000431 RDI: 0000000000000432 [ 283.104450][ T6594] RBP: 0000000000000000 R08: ffffffff8d8b1eef R09: 1ffffffff1b163dd [ 283.112593][ T6594] R10: dffffc0000000000 R11: fffffbfff1b163de R12: ffff88807bfcb001 [ 283.120642][ T6594] R13: ffff8880606840f0 R14: ffff888060684000 R15: ffff88807bfcb000 [ 283.128881][ T6594] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x1e40 [ 283.134811][ T6594] kvm_vcpu_ioctl+0x8f2/0xc10 [ 283.139555][ T6594] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 283.145259][ T6594] ? bpf_lsm_file_ioctl+0x5/0x10 [ 283.150276][ T6594] ? security_file_ioctl+0x7c/0xa0 [ 283.155445][ T6594] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 283.161135][ T6594] __se_sys_ioctl+0xfa/0x170 [ 283.165777][ T6594] do_syscall_64+0x4c/0xa0 [ 283.170243][ T6594] ? clear_bhb_loop+0x30/0x80 [ 283.175084][ T6594] ? clear_bhb_loop+0x30/0x80 [ 283.179818][ T6594] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.185801][ T6594] RIP: 0033:0x7f07292e1159 [ 283.190261][ T6594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.210008][ T6594] RSP: 002b:00007f0727539028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.218477][ T6594] RAX: ffffffffffffffda RBX: 00007f0729568fa0 RCX: 00007f07292e1159 [ 283.226502][ T6594] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 283.234532][ T6594] RBP: 00007f072937806b R08: 0000000000000000 R09: 0000000000000000 [ 283.242551][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.250573][ T6594] R13: 00007f0729569038 R14: 00007f0729568fa0 R15: 00007ffdf9fc7a38 [ 283.258634][ T6594] [ 283.262032][ T6594] Kernel Offset: disabled [ 283.266674][ T6594] Rebooting in 86400 seconds..