last executing test programs: 54.782132167s ago: executing program 0 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/rfkill/rfkill0/state\x00', 0x20141, 0x180) write(r4, &(0x7f0000000200)=']-A', 0x3) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800018014000a"], 0x4c}}, 0x0) 54.675690986s ago: executing program 0 (id=6): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x2, "2fd68285"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000180)=0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x810) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0x607d5c403ce3de35}}, 0x4) ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0x40184810, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x200, 0x26b5, 0xfffffffe}) 54.244743799s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./sys\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/devices/system/cpu/vulnerabilities/old_microcode\x00', 0x0, 0x0) read(r0, &(0x7f0000000ac0)=""/256, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000840)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000580), 0x800080, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000640)) mount$overlay(0x0, &(0x7f0000000880)='./bus\x00', &(0x7f00000008c0), 0x40, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000940)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_user\x00', 0x275a, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000600), 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in=@rand_addr=0x64010100, 0x4d4, 0x32}, @in=@empty, {0x0, 0x7, 0x6, 0xa, 0xa, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x4000000002, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x3501, 0x2, 0x1, 0x0, 0x68}, [@algo_aead={0x4c, 0x12, {{'ccm_base(xts-aes-neon,blake2b-160)\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="050427bd7000ffdbdf2501000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'gretap0\x00'}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000130a0188000000000000000005000004"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040010) sendmsg$netlink(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="140100002000"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0xc040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r7, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r9, 0x0, 0x81, &(0x7f00000006c0)={'nat\x00', 0x0, 0x600, 0x4, [0x2, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000980)=0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 53.913550367s ago: executing program 3 (id=7): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000004c0)="3f000000010014", 0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x6, 0x4) 53.216533863s ago: executing program 3 (id=8): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000580), 0x48a99fbe, 0x10b241) ioctl$MEMERASE64(r0, 0x40104d14, &(0x7f00000005c0)={0x5, 0x10000}) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x400, 0xc2, 0x9}, 0x18) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x4}, 0x6) r2 = socket$inet6(0xa, 0x5, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x3fa, 0x4) listen(r2, 0x50) close(0x4) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x5238004, &(0x7f0000000300)=ANY=[]) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0x9}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000380)={0x1, 0x1, 0xfe5, 0x9}) fcntl$lock(r8, 0x26, &(0x7f00000003c0)={0x0, 0x0, 0x76, 0x6031}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000400)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x4c}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050003000000050003"], 0x44}}, 0x40040c4) r11 = syz_open_procfs(r6, &(0x7f00000000c0)='net/nfsfs\x00') r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0xee01, 0xee01, 0x0) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x400, 0x1c4, 0x0, 0x400, 0x140}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000100)={0x7b1060d9}) read$FUSE(r11, &(0x7f0000000f40)={0x2020}, 0x2020) 52.753515824s ago: executing program 32 (id=8): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000580), 0x48a99fbe, 0x10b241) ioctl$MEMERASE64(r0, 0x40104d14, &(0x7f00000005c0)={0x5, 0x10000}) r1 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x400, 0xc2, 0x9}, 0x18) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x4}, 0x6) r2 = socket$inet6(0xa, 0x5, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x3fa, 0x4) listen(r2, 0x50) close(0x4) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x5238004, &(0x7f0000000300)=ANY=[]) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0x9}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000380)={0x1, 0x1, 0xfe5, 0x9}) fcntl$lock(r8, 0x26, &(0x7f00000003c0)={0x0, 0x0, 0x76, 0x6031}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000400)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x4c}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050003000000050003"], 0x44}}, 0x40040c4) r11 = syz_open_procfs(r6, &(0x7f00000000c0)='net/nfsfs\x00') r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresuid(0xee01, 0xee01, 0x0) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x400, 0x1c4, 0x0, 0x400, 0x140}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000100)={0x7b1060d9}) read$FUSE(r11, &(0x7f0000000f40)={0x2020}, 0x2020) 50.899604633s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x0) mount(0x0, &(0x7f0000000040)='./dbg\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mkdirat$rnull(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/kernel/config/rnull/syzrnull', 0x0}, 0x1ff) openat$rnull_attr(0xffffffffffffff9c, &(0x7f0000000280)={'/sys/kernel/config/rnull/syzrnull', 0x0, '/power\x00'}, 0x2, 0x0) r0 = creat(&(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x22a) write$rnull_attr(r0, &(0x7f00000002c0)='1', 0x1) unlinkat$rnull(0xffffffffffffff9c, &(0x7f0000000300)={'/sys/kernel/config/rnull/syzrnull', 0x0}, 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl(r2, 0x8915, &(0x7f0000000200)) write$sysctl(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'hsr0\x00', 0x0}) bind$packet(r3, &(0x7f00000003c0)={0x11, 0x0, r4}, 0x14) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bd4c892c1c513b1598b2125f539a89899e8c927a4c1978df2c818f2213d4ef44a9577c88d0ab5deb5ffe360fd66d40fac3e08c91fbfa82a720525f7aaa0f11d84709ff762d427f18dd6dcbf626802cef"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x400c0c0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001d80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000001dc0)='7', 0x6) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffd) 50.165580633s ago: executing program 0 (id=13): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x201, 0x551, 0x82, 0x200000, 0x100000002}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x3800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000010000000000000000000000000a14"], 0x28}, 0x1, 0x0, 0x0, 0x20044851}, 0x802) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f00000009c0)='./bus\x00', &(0x7f0000000a00), 0x8, &(0x7f0000000a40)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000a80)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b80)='./bus\x00', &(0x7f0000000bc0), 0x40, &(0x7f0000000c00)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040bd280909000000000001090224000100000001090400070203e0740009210800000122180009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) pipe2$9p(&(0x7f0000000900), 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x2, 0x1, 0x0, "ba27"}, @local=@item_4={0x3, 0x2, 0x0, "049143fb"}, @main=@item_4={0x3, 0x0, 0xb, "8c45c01a"}, @local=@item_4={0x3, 0x2, 0x1, '0b\b\x00'}, @global=@item_4={0x3, 0x1, 0x4, "c1235e5c"}, @global=@item_012={0x0, 0x1, 0x3}]}}, 0x0}, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f00000003c0)="11e891cbeb9c5ae6c27b90d6c1c5d10672305c73873cba01b2a4ce05ce8855e599e001ff3845a95005218c797648e9f05286dd3b53279938648c2e301ba624ffdfcfb0acf260318fc8e5ad06a7d4c49ac4b8f33875685cdb7681a06737cfa89b6a2a1c37b0d5275f811a18a0d367dc0885b41177ac353fcce262e3f9c5b132b16dc5eae90b4017a14f55545f597d2293176f4fcf38cadbd69c6664bdcaf5eb7a4babf66e", 0xa4}, {&(0x7f0000000480)="9a42daf74dd8c54f8400894752c1b050c9687e268545dad4f4d15c80e8548ffd61f6fcc97e9375d144bb96e7926a1871107c3f52b52640bfd7f676e278ce5d4c9e5cfaef5b0153c3546bc1cee0a3446ea9cb67718c88125c84a89628df8e24a0501883b4c4f1831a1e03b835fe3f62aeb97c47b3975bb86ee7db741df81a37c6c6bd3fbfd77114a631583b57c537186aacbd3a48860ef30cb5325ec84970a4cdca668aa006cf21506af3b7455bf042fdc53b2036476ba7f892213bd19cb94f6db668ad8649d6e6de05d1ef13cbf007e10adfd0c8fed8aeccc7db282c498dfd0a332bc6744ec7ed2fa5b9aaab6b48cb43d344", 0xf2}, {&(0x7f0000000580)="2905942f196e132f2d48ac2d93f731c14f4894ee61f6118e7e9c904da1d97634041acd211cc13b0d4f9b5883867318eb6a986752db6526fa590f6a80336369503c34c4ab266f427d5b218738c2668aa1aa914d79d511181ba0a84410f8911cef96bea828d66490233d99eacead90e1ff237d2a445b84d66b4bdb9f71528191f7f7086ab52ff1faac8cb711cb05d64004cc31ca98b3b8ddefb755298318b05a5943fdfd56dd63aa9fc1ec6c4024c16e25320849846051738dfcd05f625daaf1b362b2c66153858331f74b29bf41cbf7f80c3dae6ac37eae58d874501f5a36b254d12bcc77e5d3ef4c119a58e62b6b", 0xee}, {&(0x7f0000000680)="c29e1f4eb9647f7126366fc059f78ff4ebed0e746a569dcb7a5a0cb8f139a0c3ee9f59e80da789978a2322ae345f6890f7e4ff197d2ec263a6fc1268b979499be02252d52d38", 0x46}, {&(0x7f0000000700)="683be56a6cde9d9d4ad518c54e323b71b1b9d687c2c2cd5fc7db1a763e7a4737f7239f26235496960c9924cc803344934386ebf0def5b5e643a8b21db651d48d63534cd41627daf772fba0db6c2bfa483d956d1c00256cc94d264c178465c5fdc88d0b588c67458c09c10e9531ac4d03f4867e070b5cac06516817ac434de42f9637a8954ef6378e8df21a893101", 0x8e}], 0x5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000200)={'wlan1\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) r4 = syz_open_dev$media(&(0x7f0000000340), 0x5c, 0xa00) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000380)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./bus\x00', 0x42, 0xc8) write$P9_RREADLINK(r5, &(0x7f0000000c80)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="3e430f019c360000000066b843008ee8c402719991da000000c74424000c32e35dc744240200380000c7442406000000000f011c2465f3460f09b8010000000f01d926f2af660f388113c4e13d6aa489d6a600000fc73b", 0x57}], 0x1, 0x4a, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6(0xa, 0x2, 0x0) 47.436855451s ago: executing program 0 (id=18): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x400, 0xfffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='270', 0x3) r2 = syz_pidfd_open(r0, 0x0) io_setup(0x6, &(0x7f0000000080)) setns(r2, 0x24020000) syz_clone(0xf8024100, 0x0, 0x0, 0x0, 0x0, 0x0) 45.963020392s ago: executing program 0 (id=22): syz_usb_connect(0x0, 0x2e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./debug\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x14, 0x4401) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) pivot_root(&(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='./debug\x00') write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x6, 0x102443) syz_io_uring_setup(0x435c, &(0x7f0000000200)={0x0, 0x1b34, 0x20, 0x0, 0x32f}, &(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) syz_ublk_setup_io_uring(0x7e22, &(0x7f0000000340)={0x0, 0x9157, 0x80000, 0x3, 0xc3}, &(0x7f00000003c0), &(0x7f0000000440)=0x0, &(0x7f0000000480)) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f00000004c0)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000680)=@IORING_OP_FGETXATTR={0x2b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xc3472eb2bd492d97}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000700)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f00000007c0)) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000840)={0x0, 0x0, 0x100}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000980)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a00)=@new_dev={0x2, 0x5a6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbb}}}, &(0x7f0000000a40)) syz_ublk_add_dev(r0, r1, r2, r6, &(0x7f0000000ac0)={0x2e, 0x2d, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7a26, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x4, 0x9d4, 0x0, 0x0, 0x1000, 0x13aa, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000b40)) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xca, &(0x7f0000000040)="040e0e010410000102ffffffffffffffff", 0x11) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r12, &(0x7f0000000140)='7', 0x1) listen(r12, 0x8) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r12, 0x2, &(0x7f0000000180)={0xc, 0x2}, 0x1) write(0xffffffffffffffff, &(0x7f0000000640)='1', 0x1) 30.802504946s ago: executing program 33 (id=22): syz_usb_connect(0x0, 0x2e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./debug\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x14, 0x4401) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) pivot_root(&(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='./debug\x00') write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x6, 0x102443) syz_io_uring_setup(0x435c, &(0x7f0000000200)={0x0, 0x1b34, 0x20, 0x0, 0x32f}, &(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) syz_ublk_setup_io_uring(0x7e22, &(0x7f0000000340)={0x0, 0x9157, 0x80000, 0x3, 0xc3}, &(0x7f00000003c0), &(0x7f0000000440)=0x0, &(0x7f0000000480)) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f00000004c0)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000680)=@IORING_OP_FGETXATTR={0x2b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xc3472eb2bd492d97}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000700)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f00000007c0)) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000840)={0x0, 0x0, 0x100}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000980)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a00)=@new_dev={0x2, 0x5a6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbb}}}, &(0x7f0000000a40)) syz_ublk_add_dev(r0, r1, r2, r6, &(0x7f0000000ac0)={0x2e, 0x2d, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7a26, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x4, 0x9d4, 0x0, 0x0, 0x1000, 0x13aa, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000b40)) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xca, &(0x7f0000000040)="040e0e010410000102ffffffffffffffff", 0x11) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r12, &(0x7f0000000140)='7', 0x1) listen(r12, 0x8) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r12, 0x2, &(0x7f0000000180)={0xc, 0x2}, 0x1) write(0xffffffffffffffff, &(0x7f0000000640)='1', 0x1) 5.136208171s ago: executing program 5 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.005368028s ago: executing program 5 (id=244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f00000011c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000001340)={'syzkaller0\x00', 0x1}) 4.569443216s ago: executing program 5 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0xd, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) 2.859053249s ago: executing program 4 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) 1.537345191s ago: executing program 4 (id=265): r0 = syz_open_dev$usbfs(&(0x7f0000000580), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000740)=""/102400, 0x19000, 0x1000000300) 1.384809058s ago: executing program 4 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syzkaller0\x00'}) r2 = socket(0x200000000000011, 0x2, 0xd) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001300)={0x0, 0x8000}, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000001340)={'syzkaller0\x00', 0x1}) 1.141753827s ago: executing program 1 (id=267): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/sys/net/core/rps_default_mask\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='add', 0x3) 948.37246ms ago: executing program 5 (id=268): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, 0x0) 851.670694ms ago: executing program 4 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4001}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f00000011c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001300)={0x0, 0x8000}, 0x4) 765.530697ms ago: executing program 1 (id=270): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000240)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x5220, 0x0) 696.808193ms ago: executing program 5 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x2, 0x7, 0x401, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 594.35556ms ago: executing program 4 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 591.624696ms ago: executing program 5 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) 524.460006ms ago: executing program 2 (id=274): r0 = syz_open_dev$usbfs(&(0x7f0000000580), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='pagemap\x00') pread64(r1, 0x0, 0x0, 0x1000000300) 511.614613ms ago: executing program 1 (id=275): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) 498.727537ms ago: executing program 4 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_usb_connect(0x5, 0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000180)='mnt\x00', 0x1ab) mount(0x0, &(0x7f00000001c0)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x440, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x1, 0x101, 0xfe00, 0xc9, 0x16, "dff2606aaa31d00f"}) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0xd, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) 412.361431ms ago: executing program 2 (id=277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001940)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f00000019c0)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001a40)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001cc0)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 409.608279ms ago: executing program 1 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a40)='./proc\x00', &(0x7f0000000a80)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000b00)='add', 0x3) 344.085901ms ago: executing program 1 (id=279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syzkaller0\x00'}) r2 = socket(0x200000000000011, 0x2, 0xd) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001300)={0x0, 0x8000}, 0x4) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000001340)={'syzkaller0\x00', 0x1}) 272.60823ms ago: executing program 2 (id=280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x4001}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000011c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001300)={0x0, 0x8000}, 0x4) 194.642836ms ago: executing program 1 (id=281): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc\x00', 0x1ef) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/ubifs/chk_lprops\x00', 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @broadcast}, 0x10) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='md0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/md0\x00', 0x2, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000240)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r3, 0x40140921, &(0x7f00000002c0)="0000000001") ioctl(r3, 0x400c0930, 0x0) write(r0, &(0x7f0000000e40)='3', 0x4e) 107.854509ms ago: executing program 2 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x2, 0x7, 0x401, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 105.519776ms ago: executing program 2 (id=283): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000240)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x5220, 0x0) 0s ago: executing program 2 (id=284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 66.559942][ T5597] cgroup: Unknown subsys name 'net' [ 66.670818][ T5597] cgroup: Unknown subsys name 'cpuset' [ 66.679327][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.097368][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.249543][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.251714][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.252521][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.253455][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.254159][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.369604][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.372770][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.373701][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.400425][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.401091][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.485357][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.487042][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.495772][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.497088][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.505314][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.505939][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.524434][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.533389][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.555372][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.570604][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.107913][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.110507][ T5606] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.118285][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.122344][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.339370][ T5617] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.379199][ T5618] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.501145][ T5611] infiniband rxe0: set active [ 71.502232][ T5611] infiniband rxe0: added rxe_eth0 [ 71.538239][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.562331][ T5611] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 71.562377][ T5611] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 71.562413][ T5611] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 71.650007][ T5611] RDS/IB: rxe0: added [ 71.650337][ T5611] smc: adding ib device rxe0 with port count 1 [ 71.650435][ T5611] smc: ib device rxe0 port 1 has no pnetid [ 71.678216][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.695822][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.760239][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.760317][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.047539][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.048262][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.123329][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.164661][ T3108] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.316983][ T5624] Bluetooth: hci0: command tx timeout [ 72.395385][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.395534][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.395683][ T5606] bridge_slave_0: entered allmulticast mode [ 72.403108][ T5606] bridge_slave_0: entered promiscuous mode [ 72.444138][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.444227][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.444354][ T5606] bridge_slave_1: entered allmulticast mode [ 72.445906][ T5606] bridge_slave_1: entered promiscuous mode [ 72.476405][ T5624] Bluetooth: hci1: command tx timeout [ 72.527748][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.527835][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.530668][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.567232][ T5624] Bluetooth: hci2: command tx timeout [ 72.636284][ T5624] Bluetooth: hci3: command tx timeout [ 72.667189][ T5606] team0: Port device team_slave_0 added [ 72.700554][ T5606] team0: Port device team_slave_1 added [ 72.700946][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.701334][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.701461][ T5617] bridge_slave_0: entered allmulticast mode [ 72.703203][ T5617] bridge_slave_0: entered promiscuous mode [ 72.705298][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.705395][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.705507][ T5618] bridge_slave_0: entered allmulticast mode [ 72.708684][ T5618] bridge_slave_0: entered promiscuous mode [ 72.726674][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.726852][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.726979][ T5617] bridge_slave_1: entered allmulticast mode [ 72.728649][ T5617] bridge_slave_1: entered promiscuous mode [ 72.730472][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.730570][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.730692][ T5618] bridge_slave_1: entered allmulticast mode [ 72.732446][ T5618] bridge_slave_1: entered promiscuous mode [ 72.797823][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.797843][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.797865][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.834291][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.843072][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.846484][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.846500][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.846523][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.861755][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.871364][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.983635][ T5618] team0: Port device team_slave_0 added [ 72.988806][ T5617] team0: Port device team_slave_0 added [ 72.992798][ T5618] team0: Port device team_slave_1 added [ 73.016331][ T5617] team0: Port device team_slave_1 added [ 73.047560][ T5606] hsr_slave_0: entered promiscuous mode [ 73.048323][ T5606] hsr_slave_1: entered promiscuous mode [ 73.061123][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.061148][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.061170][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.078517][ T5611] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.085773][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.085801][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.085824][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.093245][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.093265][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.093288][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.153823][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.153841][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.153864][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.296481][ T5617] hsr_slave_0: entered promiscuous mode [ 73.297574][ T5617] hsr_slave_1: entered promiscuous mode [ 73.298347][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 73.298454][ T5617] Cannot create hsr debugfs directory [ 73.357372][ T5618] hsr_slave_0: entered promiscuous mode [ 73.358529][ T5618] hsr_slave_1: entered promiscuous mode [ 73.359283][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 73.359301][ T5618] Cannot create hsr debugfs directory [ 73.759471][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.775892][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.784488][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.797576][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.799968][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.811463][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.822184][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.834296][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.949210][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.957883][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.958853][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.968064][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.995707][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.006643][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.007261][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.010709][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.015208][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.015308][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.015425][ T5611] bridge_slave_0: entered allmulticast mode [ 74.017968][ T5611] bridge_slave_0: entered promiscuous mode [ 74.072634][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.072734][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.072918][ T5611] bridge_slave_1: entered allmulticast mode [ 74.074238][ T5611] bridge_slave_1: entered promiscuous mode [ 74.139022][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.142577][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.196087][ T5611] team0: Port device team_slave_0 added [ 74.209526][ T5611] team0: Port device team_slave_1 added [ 74.231963][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.234394][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.254482][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.254495][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.254507][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.255074][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.260376][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.261287][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.268337][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.270951][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.299149][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.303784][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.303799][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.303822][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.397472][ T5624] Bluetooth: hci0: command tx timeout [ 74.413025][ T5611] hsr_slave_0: entered promiscuous mode [ 74.413729][ T5611] hsr_slave_1: entered promiscuous mode [ 74.414218][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 74.414237][ T5611] Cannot create hsr debugfs directory [ 74.467920][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.545818][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.556682][ T5624] Bluetooth: hci1: command tx timeout [ 74.611773][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.611871][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.642909][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.653033][ T5624] Bluetooth: hci2: command tx timeout [ 74.662525][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.662596][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.716864][ T5624] Bluetooth: hci3: command tx timeout [ 74.725856][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.767300][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.769874][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.774040][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.774110][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.798282][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.816700][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.817516][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.819840][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.829016][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.829122][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.834264][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.834570][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.845058][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.918207][ T5606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.932014][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.959212][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.959275][ T4128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.960455][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.960519][ T4128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.265521][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.309338][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.331716][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.331807][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.353148][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.353254][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.802470][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.916815][ T5606] veth0_vlan: entered promiscuous mode [ 75.936347][ T5606] veth1_vlan: entered promiscuous mode [ 76.025840][ T5606] veth0_macvtap: entered promiscuous mode [ 76.050068][ T5606] veth1_macvtap: entered promiscuous mode [ 76.088959][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.113816][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.147160][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.151040][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.187749][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.287293][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.409125][ T4128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.409152][ T4128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.429666][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.445462][ T5617] veth0_vlan: entered promiscuous mode [ 76.470187][ T5618] veth0_vlan: entered promiscuous mode [ 76.476978][ T5624] Bluetooth: hci0: command tx timeout [ 76.492754][ T5617] veth1_vlan: entered promiscuous mode [ 76.493701][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.493719][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.502232][ T5618] veth1_vlan: entered promiscuous mode [ 76.595923][ T5606] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.626966][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.627128][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.628529][ T5617] veth0_macvtap: entered promiscuous mode [ 76.635947][ T5611] veth0_vlan: entered promiscuous mode [ 76.643445][ T5611] veth1_vlan: entered promiscuous mode [ 76.646712][ T5624] Bluetooth: hci1: command tx timeout [ 76.674902][ T5611] veth0_macvtap: entered promiscuous mode [ 76.680109][ T5611] veth1_macvtap: entered promiscuous mode [ 76.696930][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.698626][ T5617] veth1_macvtap: entered promiscuous mode [ 76.700669][ T5618] veth0_macvtap: entered promiscuous mode [ 76.728323][ T5624] Bluetooth: hci2: command tx timeout [ 76.733251][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.740534][ T5618] veth1_macvtap: entered promiscuous mode [ 76.797029][ T5624] Bluetooth: hci3: command tx timeout [ 76.800418][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.814010][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.858324][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.915208][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.923418][ T5770] netlink: 'syz.0.5': attribute type 10 has an invalid length. [ 77.050677][ T4128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.050699][ T4128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.086850][ T4128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.086872][ T4128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.087078][ T4128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.119970][ T45] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.153672][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.153694][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.177652][ T4128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.177700][ T4128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.177734][ T4128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.177766][ T4128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.205725][ T4128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.205744][ T4128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.275728][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.275748][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.298133][ T5719] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.317917][ T157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.317963][ T157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.317989][ T157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.318012][ T157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.318035][ T157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.318060][ T157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.386075][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.386095][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.490520][ T5719] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 77.514882][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.514916][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.514936][ T5719] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.514978][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.578551][ T5719] usb 1-1: config 0 descriptor?? [ 77.622422][ T5777] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 77.622470][ T5777] nbd: error processing sock list [ 77.642982][ T5775] ======================================================= [ 77.642982][ T5775] WARNING: The mand mount option has been deprecated and [ 77.642982][ T5775] and is ignored by this kernel. Remove the mand [ 77.642982][ T5775] option from the mount to silence this warning. [ 77.642982][ T5775] ======================================================= [ 77.678228][ T5775] evm: overlay not supported [ 78.013523][ T5719] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 78.052936][ T5719] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 78.278274][ T5790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.281550][ T5790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.375337][ T5624] Bluetooth: hci0: SCO packet for unknown connection handle 3637 [ 78.524056][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.557574][ T5624] Bluetooth: hci0: command tx timeout [ 78.672972][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.809804][ T5624] Bluetooth: hci2: command tx timeout [ 78.836968][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.074379][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.078484][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.089021][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.105628][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.115036][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.140652][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.402145][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 79.506401][ T5803] block2mtd: illegal erase size [ 79.546782][ T31] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 79.576907][ T45] bridge_slave_1: left allmulticast mode [ 79.576952][ T45] bridge_slave_1: left promiscuous mode [ 79.579201][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.601862][ T45] bridge_slave_0: left allmulticast mode [ 79.601891][ T45] bridge_slave_0: left promiscuous mode [ 79.603421][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.686291][ T31] usb 1-1: device descriptor read/64, error -32 [ 79.884318][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.899085][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.905174][ T45] bond0 (unregistering): Released all slaves [ 79.936301][ T31] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 80.014529][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.068072][ T31] usb 1-1: device descriptor read/64, error -32 [ 80.157971][ T1231] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.306425][ T31] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 80.327159][ T1231] usb 3-1: New USB device found: idVendor=103d, idProduct=0101, bcdDevice=0.40 [ 80.329477][ T1231] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 80.329518][ T1231] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 80.329820][ T31] usb 1-1: device descriptor read/8, error -32 [ 80.334619][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.334647][ T1231] usb 3-1: Product: syz [ 80.334660][ T1231] usb 3-1: Manufacturer: syz [ 80.334668][ T1231] usb 3-1: SerialNumber: syz [ 80.555535][ T5786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.570946][ T31] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 80.588497][ T31] usb 1-1: device descriptor read/8, error -32 [ 80.600673][ T5776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.696595][ T31] raw-gadget.0 gadget.0: failed to queue suspend event [ 80.716816][ T3215] usb 1-1: USB disconnect, device number 2 [ 80.731491][ T5772] raw-gadget.0 gadget.0: failed to queue disconnect event [ 80.825232][ T1231] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 80.860153][ T45] hsr_slave_0: left promiscuous mode [ 80.874342][ T45] hsr_slave_1: left promiscuous mode [ 80.875418][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.875453][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.888420][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.888444][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.892044][ T1231] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 80.944168][ T45] veth1_macvtap: left promiscuous mode [ 80.944231][ T45] veth0_macvtap: left promiscuous mode [ 80.944395][ T45] veth1_vlan: left promiscuous mode [ 80.944511][ T45] veth0_vlan: left promiscuous mode [ 81.174358][ T1231] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 81.190360][ T5821] FAULT_INJECTION: forcing a failure. [ 81.190360][ T5821] name failslab, interval 1, probability 0, space 0, times 1 [ 81.190406][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz.0.11 Not tainted syzkaller #0 PREEMPT(full) [ 81.190428][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.190449][ T5821] Call Trace: [ 81.190463][ T5821] [ 81.190472][ T5821] dump_stack_lvl+0xe8/0x150 [ 81.190508][ T5821] should_fail_ex+0x3eb/0x540 [ 81.190545][ T5821] should_failslab+0xa8/0x100 [ 81.190570][ T5821] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 81.190601][ T5821] ? key_alloc+0x35c/0x1020 [ 81.190629][ T5821] ? key_alloc+0x35c/0x1020 [ 81.190662][ T5821] kmemdup_noprof+0x2b/0x70 [ 81.190690][ T5821] key_alloc+0x35c/0x1020 [ 81.190732][ T5821] keyring_alloc+0x45/0xb0 [ 81.190756][ T5821] join_session_keyring+0x131/0x440 [ 81.190788][ T5821] lookup_user_key+0x546/0x1230 [ 81.190816][ T5821] ? futex_unqueue+0x211/0x240 [ 81.190844][ T5821] ? __pfx_lookup_user_key+0x10/0x10 [ 81.190876][ T5821] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 81.190910][ T5821] ? __pfx_futex_wake_mark+0x10/0x10 [ 81.190944][ T5821] ? try_to_wake_up+0x8ce/0x14e0 [ 81.190969][ T5821] keyctl_get_persistent+0x235/0x7c0 [ 81.190995][ T5821] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 81.191014][ T5821] ? futex_wait+0x2a2/0x390 [ 81.191035][ T5821] ? __pfx_futex_wait+0x10/0x10 [ 81.191069][ T5821] __se_sys_keyctl+0x83e/0xbc0 [ 81.191098][ T5821] ? __pfx___se_sys_keyctl+0x10/0x10 [ 81.191126][ T5821] ? __pfx_do_futex+0x10/0x10 [ 81.191158][ T5821] ? __fget_files+0x3a2/0x420 [ 81.191187][ T5821] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.191218][ T5821] ? __se_sys_futex+0x3a8/0x450 [ 81.191251][ T5821] ? rcu_is_watching+0x16/0xb0 [ 81.191282][ T5821] ? __x64_sys_keyctl+0x20/0xc0 [ 81.191310][ T5821] do_syscall_64+0x166/0x520 [ 81.191332][ T5821] ? trace_irq_disable+0x3b/0x140 [ 81.191353][ T5821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.191372][ T5821] ? clear_bhb_loop+0x70/0xc0 [ 81.191395][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.191414][ T5821] RIP: 0033:0x7f466339f559 [ 81.191440][ T5821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.191455][ T5821] RSP: 002b:00007f46641ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 81.191476][ T5821] RAX: ffffffffffffffda RBX: 00007f4663626090 RCX: 00007f466339f559 [ 81.191490][ T5821] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 81.191504][ T5821] RBP: 00007f4663436b20 R08: 0000000000000000 R09: 0000000000000000 [ 81.191517][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.191529][ T5821] R13: 00007f4663626128 R14: 00007f4663626090 R15: 00007fff99294268 [ 81.191560][ T5821] [ 81.210890][ T1231] usb 3-1: USB disconnect, device number 2 [ 81.327282][ T5608] Bluetooth: hci1: command tx timeout [ 81.801139][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.859548][ T5832] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 81.984402][ T5841] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.066266][ T1231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.206664][ T3215] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.216291][ T1231] usb 3-1: Using ep0 maxpacket: 8 [ 82.229726][ T1231] usb 3-1: New USB device found: idVendor=041e, idProduct=3f19, bcdDevice=0.40 [ 82.230677][ T1231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.230752][ T1231] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.233687][ T1231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.233710][ T1231] usb 3-1: Product: syz [ 82.233723][ T1231] usb 3-1: Manufacturer: syz [ 82.233735][ T1231] usb 3-1: SerialNumber: syz [ 82.295372][ T45] team0 (unregistering): Port device team_slave_1 removed [ 82.338166][ T45] team0 (unregistering): Port device team_slave_0 removed [ 82.361004][ T3215] usb 1-1: New USB device found: idVendor=28bd, idProduct=0909, bcdDevice=0.00 [ 82.362036][ T3215] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.362063][ T3215] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.362083][ T3215] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.362107][ T3215] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.362137][ T3215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.379036][ T3215] usb 1-1: config 0 descriptor?? [ 82.486379][ T5718] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.638398][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 82.639219][ T5718] usb 2-1: New USB device found: idVendor=0eb1, idProduct=7007, bcdDevice=2.00 [ 82.640602][ T5718] usb 2-1: config 253 has an invalid interface number: 184 but max is 0 [ 82.640627][ T5718] usb 2-1: config 253 has no interface number 0 [ 82.640652][ T5718] usb 2-1: config 253 interface 184 has no altsetting 0 [ 82.644590][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.644615][ T5718] usb 2-1: Product: syz [ 82.644627][ T5718] usb 2-1: Manufacturer: syz [ 82.644662][ T5718] usb 2-1: SerialNumber: syz [ 82.769658][ T5718] go7007 2-1:253.184: probe with driver go7007 failed with error -12 [ 82.898030][ T3215] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.0002/input/input5 [ 82.980932][ T5704] usb 2-1: USB disconnect, device number 2 [ 83.097480][ T3215] uclogic 0003:28BD:0909.0002: input,hidraw0: USB HID v0.08 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 83.104637][ T5832] warning: `syz.0.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.187937][ T1231] usb 3-1: 1:1: invalid format type 0x1b02 is detected, processed as PCM [ 83.187966][ T1231] usb 3-1: 1:1 : sample bitwidth 199 in over sample bytes 2 [ 83.188020][ T1231] usb 3-1: 1:1: All rates were zero [ 83.192466][ T1231] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 83.216798][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.216956][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.217121][ T5795] bridge_slave_0: entered allmulticast mode [ 83.227675][ T5795] bridge_slave_0: entered promiscuous mode [ 83.254920][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.255470][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.255638][ T5795] bridge_slave_1: entered allmulticast mode [ 83.278589][ T5795] bridge_slave_1: entered promiscuous mode [ 83.325788][ T1231] usb 3-1: USB disconnect, device number 3 [ 83.356309][ T5608] Bluetooth: hci1: command tx timeout [ 83.379564][ T5718] usb 1-1: USB disconnect, device number 4 [ 83.439626][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.489631][ T5867] fido_id[5867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 83.530790][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.569878][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.720641][ T5795] team0: Port device team_slave_0 added [ 83.726032][ T5795] team0: Port device team_slave_1 added [ 83.791623][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.791640][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.791663][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.793895][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.793911][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.793935][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.844203][ T5795] hsr_slave_0: entered promiscuous mode [ 83.845232][ T5795] hsr_slave_1: entered promiscuous mode [ 83.845993][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 83.846012][ T5795] Cannot create hsr debugfs directory [ 84.169935][ T5881] FAULT_INJECTION: forcing a failure. [ 84.169935][ T5881] name failslab, interval 1, probability 0, space 0, times 0 [ 84.169971][ T5881] CPU: 0 UID: 0 PID: 5881 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT(full) [ 84.169995][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.170006][ T5881] Call Trace: [ 84.170012][ T5881] [ 84.170020][ T5881] dump_stack_lvl+0xe8/0x150 [ 84.170053][ T5881] should_fail_ex+0x3eb/0x540 [ 84.170087][ T5881] should_failslab+0xa8/0x100 [ 84.170111][ T5881] __kmalloc_noprof+0xf9/0x710 [ 84.170142][ T5881] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 84.170170][ T5881] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 84.170202][ T5881] __memcg_list_lru_alloc+0x1d9/0x760 [ 84.170228][ T5881] ? xa_load+0x60/0x210 [ 84.170260][ T5881] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 84.170288][ T5881] ? xa_load+0x60/0x210 [ 84.170330][ T5881] __memcg_slab_post_alloc_hook+0x3b2/0xdb0 [ 84.170357][ T5881] ? __memcg_slab_post_alloc_hook+0x1f1/0xdb0 [ 84.170389][ T5881] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 84.170418][ T5881] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 84.170449][ T5881] ? __d_alloc+0x37/0x820 [ 84.170466][ T5881] ? __d_alloc+0x37/0x820 [ 84.170489][ T5881] __d_alloc+0x37/0x820 [ 84.170508][ T5881] d_make_root+0x41/0x80 [ 84.170526][ T5881] devpts_fill_super+0x1e8/0x4f0 [ 84.170543][ T5881] ? __pfx_devpts_fill_super+0x10/0x10 [ 84.170561][ T5881] get_tree_nodev+0xbb/0x150 [ 84.170582][ T5881] vfs_get_tree+0x92/0x2a0 [ 84.170603][ T5881] do_new_mount+0x325/0xb00 [ 84.170635][ T5881] ? __pfx_do_new_mount+0x10/0x10 [ 84.170660][ T5881] ? ns_capable+0x84/0xe0 [ 84.170682][ T5881] ? path_mount+0x647/0x1050 [ 84.170709][ T5881] ? user_path_at+0xd4/0x160 [ 84.170728][ T5881] __se_sys_mount+0x31d/0x420 [ 84.170758][ T5881] ? __pfx___se_sys_mount+0x10/0x10 [ 84.170799][ T5881] ? __x64_sys_mount+0x20/0xc0 [ 84.170828][ T5881] do_syscall_64+0x166/0x520 [ 84.170848][ T5881] ? trace_irq_disable+0x3b/0x140 [ 84.170867][ T5881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.170884][ T5881] ? clear_bhb_loop+0x70/0xc0 [ 84.170908][ T5881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.170926][ T5881] RIP: 0033:0x7fca1699f559 [ 84.170944][ T5881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.170959][ T5881] RSP: 002b:00007fca1786b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.170980][ T5881] RAX: ffffffffffffffda RBX: 00007fca16c25fa0 RCX: 00007fca1699f559 [ 84.170993][ T5881] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000000000000000 [ 84.171005][ T5881] RBP: 00007fca16a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 84.171017][ T5881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.171029][ T5881] R13: 00007fca16c26038 R14: 00007fca16c25fa0 R15: 00007ffdade9d728 [ 84.171062][ T5881] [ 84.248315][ T5881] devpts: get root dentry failed [ 84.535159][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.561315][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.562170][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.586035][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.594735][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.606358][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.629058][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.645363][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.645789][ T5888] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.720698][ T5895] Bluetooth: MGMT ver 1.23 [ 84.720742][ T5895] Bluetooth: hci0: unsupported parameter 5135 [ 84.720756][ T5895] Bluetooth: hci0: unsupported parameter 8192 [ 84.720770][ T5895] Bluetooth: hci0: unsupported parameter 5135 [ 84.720789][ T5895] Bluetooth: hci0: unsupported parameter 8192 [ 84.770831][ T5895] loop8: detected capacity change from 0 to 7 [ 84.775964][ T5895] Dev loop8: unable to read RDB block 7 [ 84.776019][ T5895] loop8: unable to read partition table [ 84.776309][ T5895] loop8: partition table beyond EOD, truncated [ 84.776327][ T5895] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 84.786088][ T5894] Bluetooth: MGMT ver 1.23 [ 85.008409][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.035709][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.053110][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.053171][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.082375][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.082485][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.223029][ T5704] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.370411][ T5704] usb 2-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 85.374858][ T5704] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 85.374887][ T5704] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 85.379534][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.379559][ T5704] usb 2-1: Product: syz [ 85.379573][ T5704] usb 2-1: Manufacturer: syz [ 85.379586][ T5704] usb 2-1: SerialNumber: syz [ 85.393632][ T5894] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.393776][ T5894] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.439353][ T5608] Bluetooth: hci1: command tx timeout [ 85.506285][ T1231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.623370][ T5894] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.623501][ T5894] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.656816][ T1231] usb 3-1: Using ep0 maxpacket: 16 [ 85.657527][ T1231] usb 3-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 85.660790][ T1231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.660839][ T1231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 85.660861][ T1231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 85.660899][ T1231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.698926][ T5704] zaurus 2-1:1.0 usb0: register 'zaurus' at usb-dummy_hcd.1-1, pseudo-MDLM (BLAN) device, 32:d8:09:4c:ac:30 [ 85.725081][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 85.753606][ T1231] usb 3-1: config 0 descriptor?? [ 86.541876][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.971363][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 87.142897][ T9] cfg80211: failed to load regulatory.db [ 87.395739][ T5795] veth0_vlan: entered promiscuous mode [ 87.428434][ T5795] veth1_vlan: entered promiscuous mode [ 87.516353][ T5608] Bluetooth: hci1: command tx timeout [ 87.579908][ T5795] veth0_macvtap: entered promiscuous mode [ 87.611240][ T5795] veth1_macvtap: entered promiscuous mode [ 87.700853][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.732390][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.773239][ T5719] usb 2-1: USB disconnect, device number 3 [ 87.797766][ T5719] zaurus 2-1:1.0 usb0: unregister 'zaurus' usb-dummy_hcd.1-1, pseudo-MDLM (BLAN) device [ 88.053295][ T157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.053343][ T157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.053373][ T157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.126982][ T45] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.139773][ T3215] usb 3-1: USB disconnect, device number 4 [ 88.449544][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 88.473287][ T5704] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.485005][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.485025][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.641277][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.641299][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.686410][ T5791] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 88.849144][ T5791] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 88.852347][ T5791] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.852374][ T5791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.852391][ T5791] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.852433][ T5791] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.852455][ T5791] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.857037][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.857060][ T5791] usb 3-1: Product: syz [ 88.857074][ T5791] usb 3-1: Manufacturer: syz [ 88.899396][ T5791] cdc_wdm 3-1:1.0: skipping garbage [ 88.899416][ T5791] cdc_wdm 3-1:1.0: skipping garbage [ 88.989935][ T5791] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 88.989971][ T5791] cdc_wdm 3-1:1.0: Unknown control protocol [ 89.300477][ T5982] syz.4.26: attempt to access beyond end of device [ 89.300477][ T5982] ram9: rw=2048, sector=8191, nr_sectors = 8 limit=8192 [ 89.335451][ T5982] device-mapper: table: 248:1: integrity: Error reading superblock (-EIO) [ 89.335492][ T5982] device-mapper: ioctl: error adding target to table [ 89.393168][ T1231] usb 3-1: USB disconnect, device number 5 [ 89.976613][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.069480][ T6010] Cannot find add_set index 0 as target [ 90.126923][ T9] usb 2-1: New USB device found: idVendor=056a, idProduct=3f3b, bcdDevice=0.00 [ 90.129233][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.129262][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.129297][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.531835][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4 [ 90.634294][ T9] wacom 0003:056A:3F3B.0003: hidraw0: USB HID v1.11 Device [HID 056a:3f3b] on usb-dummy_hcd.1-1/input0 [ 90.654288][ T9] input: Wacom HID 056a:3f3b Finger as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:3F3B.0003/input/input7 [ 90.877459][ T5719] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.026790][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 91.031868][ T5719] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.031927][ T5719] usb 5-1: New USB device found: idVendor=413c, idProduct=81c2, bcdDevice=c9.4b [ 91.033160][ T5719] usb 5-1: config 14 has an invalid interface number: 8 but max is 1 [ 91.033185][ T5719] usb 5-1: config 14 has no interface number 1 [ 91.033223][ T5719] usb 5-1: config 14 interface 8 has no altsetting 0 [ 91.033242][ T5719] usb 5-1: config 14 interface 0 has no altsetting 0 [ 91.039940][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.039969][ T5719] usb 5-1: Product: syz [ 91.039983][ T5719] usb 5-1: Manufacturer: syz [ 91.039995][ T5719] usb 5-1: SerialNumber: syz [ 91.260402][ T6020] @0Ù: renamed from virt_wifi0 [ 91.328568][ T5719] usb 5-1: selecting invalid altsetting 0 [ 91.328592][ T5719] usb 5-1: Could not set interface, error -22 [ 91.341115][ T5719] usb 5-1: USB disconnect, device number 2 [ 91.366584][ T5791] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.461742][ T3215] usb 2-1: USB disconnect, device number 4 [ 91.519241][ T5791] usb 3-1: New USB device found: idVendor=04e8, idProduct=6889, bcdDevice=1.00 [ 91.532499][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.532530][ T5791] usb 3-1: Product: syz [ 91.532544][ T5791] usb 3-1: Manufacturer: syz [ 91.532558][ T5791] usb 3-1: SerialNumber: syz [ 91.765648][ T5791] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 91.783331][ T5791] kalmia 3-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 91.783785][ T5791] kalmia 3-1:1.0: probe with driver kalmia failed with error -71 [ 91.805887][ T5791] usb 3-1: USB disconnect, device number 6 [ 91.911543][ T6034] i2c i2c-0: new_device: Missing parameters [ 91.977738][ T6034] FAULT_INJECTION: forcing a failure. [ 91.977738][ T6034] name failslab, interval 1, probability 0, space 0, times 0 [ 91.977769][ T6034] CPU: 0 UID: 0 PID: 6034 Comm: syz.4.33 Not tainted syzkaller #0 PREEMPT(full) [ 91.977802][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.977814][ T6034] Call Trace: [ 91.977822][ T6034] [ 91.977831][ T6034] dump_stack_lvl+0xe8/0x150 [ 91.977864][ T6034] should_fail_ex+0x3eb/0x540 [ 91.977899][ T6034] should_failslab+0xa8/0x100 [ 91.977924][ T6034] __kmalloc_cache_noprof+0x9e/0x600 [ 91.977955][ T6034] ? virtual_ncidev_open+0x54/0x1a0 [ 91.977976][ T6034] ? virtual_ncidev_open+0x54/0x1a0 [ 91.978003][ T6034] virtual_ncidev_open+0x54/0x1a0 [ 91.978026][ T6034] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 91.978045][ T6034] misc_open+0x2d5/0x350 [ 91.978077][ T6034] chrdev_open+0x4d9/0x600 [ 91.978104][ T6034] ? __pfx_chrdev_open+0x10/0x10 [ 91.978126][ T6034] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 91.978149][ T6034] ? devcgroup_check_permission+0x31/0x8f0 [ 91.978179][ T6034] ? __pfx_chrdev_open+0x10/0x10 [ 91.978202][ T6034] do_dentry_open+0x80e/0x1360 [ 91.978237][ T6034] vfs_open_consume+0x4a/0x350 [ 91.978260][ T6034] ? path_openat+0x16e1/0x20f0 [ 91.978284][ T6034] path_openat+0x16fc/0x20f0 [ 91.978322][ T6034] do_file_open+0x23e/0x4a0 [ 91.978350][ T6034] ? __pfx_do_file_open+0x10/0x10 [ 91.978392][ T6034] ? _raw_spin_unlock+0x28/0x50 [ 91.978412][ T6034] ? alloc_fd+0x6af/0x760 [ 91.978450][ T6034] do_sys_openat2+0x115/0x200 [ 91.978476][ T6034] ? __se_sys_futex+0x3a8/0x450 [ 91.978502][ T6034] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.978537][ T6034] ? rcu_is_watching+0x16/0xb0 [ 91.978566][ T6034] __x64_sys_openat+0x138/0x170 [ 91.978599][ T6034] do_syscall_64+0x166/0x520 [ 91.978621][ T6034] ? trace_irq_disable+0x3b/0x140 [ 91.978642][ T6034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.978661][ T6034] ? clear_bhb_loop+0x70/0xc0 [ 91.978685][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.978704][ T6034] RIP: 0033:0x7f4cf8b9f559 [ 91.978723][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.978738][ T6034] RSP: 002b:00007f4cf6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.978759][ T6034] RAX: ffffffffffffffda RBX: 00007f4cf8e25fa0 RCX: 00007f4cf8b9f559 [ 91.978773][ T6034] RDX: 0000000000000002 RSI: 0000200000011840 RDI: ffffffffffffff9c [ 91.978793][ T6034] RBP: 00007f4cf8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 91.978805][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.978817][ T6034] R13: 00007f4cf8e26038 R14: 00007f4cf8e25fa0 R15: 00007ffd3fd87108 [ 91.978849][ T6034] [ 92.436403][ T5791] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.526854][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.590033][ T5791] usb 2-1: New USB device found: idVendor=041e, idProduct=3010, bcdDevice=1.00 [ 92.591549][ T5791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.591573][ T5791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.591620][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.623806][ T5791] usb 2-1: 0:1 : does not exist [ 92.709092][ T9] usb 5-1: device descriptor read/64, error -71 [ 92.885023][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 92.885052][ T6037] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 92.885052][ T6037] Please contact the netfilter-devel mailing list or update your nftables rules. [ 92.886390][ T5719] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 92.948984][ T3215] usb 2-1: USB disconnect, device number 5 [ 92.986688][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.037845][ T5719] usb 3-1: New USB device found: idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 93.038823][ T5719] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 93.038847][ T5719] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 93.038867][ T5719] usb 3-1: config 150 has no interface number 0 [ 93.038904][ T5719] usb 3-1: config 150 interface 204 has no altsetting 0 [ 93.041582][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.041605][ T5719] usb 3-1: Product: syz [ 93.041619][ T5719] usb 3-1: Manufacturer: syz [ 93.041631][ T5719] usb 3-1: SerialNumber: syz [ 93.118257][ T5608] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 93.118932][ T5608] Bluetooth: hci2: Injecting HCI hardware error event [ 93.120437][ T5608] Bluetooth: hci2: hardware error 0x00 [ 93.166298][ T9] usb 5-1: device descriptor read/64, error -71 [ 93.257104][ T5719] xr_serial 3-1:150.204: skipping garbage [ 93.257156][ T5719] xr_serial 3-1:150.204: xr_serial converter detected [ 93.285292][ T9] usb usb5-port1: attempt power cycle [ 93.626281][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.648498][ T9] usb 5-1: device descriptor read/8, error -71 [ 93.796324][ T5791] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 93.888185][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.908894][ T9] usb 5-1: device descriptor read/8, error -71 [ 93.914175][ T5719] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 93.914236][ T5719] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 93.934749][ T5719] usb 3-1: USB disconnect, device number 7 [ 93.939367][ T5719] xr_serial 3-1:150.204: device disconnected [ 93.946853][ T5791] usb 2-1: Using ep0 maxpacket: 8 [ 93.953624][ T5791] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.954766][ T5791] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 93.954794][ T5791] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.954815][ T5791] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.954837][ T5791] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.954875][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.019854][ T9] usb usb5-port1: unable to enumerate USB device [ 94.185863][ T5791] usb 2-1: GET_CAPABILITIES returned 0 [ 94.185914][ T5791] usbtmc 2-1:16.0: can't read capabilities [ 94.496414][ T9] usb 2-1: USB disconnect, device number 6 [ 94.818550][ T5773] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 94.976928][ T5773] usb 3-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00 [ 94.978053][ T5773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.978081][ T5773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.980762][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 94.980785][ T5773] usb 3-1: Product: syz [ 94.980798][ T5773] usb 3-1: Manufacturer: syz [ 95.041859][ T5773] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 95.150279][ T6051] syz.4.40 uses obsolete (PF_INET,SOCK_PACKET) [ 95.197378][ T5608] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 95.266125][ T5773] mos7840 3-1:1.0: probe with driver mos7840 failed with error -71 [ 95.301866][ T5773] usb 3-1: USB disconnect, device number 8 [ 95.924127][ T6071] comedi comedi1: adq12b: I/O base address or length out of range [ 96.216505][ T6055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.568234][ T6083] cgroup: subsys name conflicts with all [ 96.646278][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.798564][ T9] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 96.799531][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.799556][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.799573][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.799614][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 96.799636][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 96.801298][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.801320][ T9] usb 2-1: Product: syz [ 96.801333][ T9] usb 2-1: Manufacturer: syz [ 96.894889][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 96.894911][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 96.916992][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 96.917016][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 97.146289][ T5719] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 97.296605][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 97.298904][ T5719] usb 3-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 97.302645][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.307164][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.307192][ T5719] usb 3-1: Product: syz [ 97.307205][ T5719] usb 3-1: Manufacturer: syz [ 97.307217][ T5719] usb 3-1: SerialNumber: syz [ 97.315142][ T5719] usb 3-1: config 0 descriptor?? [ 97.328010][ T5719] usb 3-1: No union descriptors [ 97.332349][ T5719] usb 3-1: unsupported MDLM descriptors [ 97.421134][ T6090] device-mapper: table: 248:2: ram9 too small for target: start=0, len=12288, dev_size=8192 [ 97.421162][ T6090] device-mapper: core: Cannot calculate initial queue limits [ 97.421170][ T6090] device-mapper: ioctl: unable to set up device queue for new table. [ 97.554623][ T5704] usb 3-1: USB disconnect, device number 9 [ 98.035367][ T6097] syzkaller1: entered promiscuous mode [ 98.035391][ T6097] syzkaller1: entered allmulticast mode [ 98.164834][ T6099] syzkaller1: entered promiscuous mode [ 98.164879][ T6099] syzkaller1: entered allmulticast mode [ 98.220582][ T6101] usb usb9: usbfs: process 6101 (syz.4.54) did not claim interface 0 before use [ 99.374514][ T6122] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.402467][ T5718] usb 2-1: USB disconnect, device number 7 [ 99.550675][ T6124] FAULT_INJECTION: forcing a failure. [ 99.550675][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 99.550707][ T6124] CPU: 1 UID: 0 PID: 6124 Comm: syz.4.62 Not tainted syzkaller #0 PREEMPT(full) [ 99.550731][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.550744][ T6124] Call Trace: [ 99.550752][ T6124] [ 99.550762][ T6124] dump_stack_lvl+0xe8/0x150 [ 99.550795][ T6124] should_fail_ex+0x3eb/0x540 [ 99.550841][ T6124] should_failslab+0xa8/0x100 [ 99.550865][ T6124] __kmalloc_noprof+0xf9/0x710 [ 99.550892][ T6124] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.550919][ T6124] ? hash_ipportnet6_add+0x2608/0x3290 [ 99.550939][ T6124] ? hash_ipportnet6_add+0x2608/0x3290 [ 99.550966][ T6124] hash_ipportnet6_add+0x2608/0x3290 [ 99.551023][ T6124] hash_ipportnet6_uadt+0xa57/0xde0 [ 99.551047][ T6124] ? __pfx_hash_ipportnet6_add+0x10/0x10 [ 99.551073][ T6124] ? __pfx_hash_ipportnet6_uadt+0x10/0x10 [ 99.551091][ T6124] ? __nla_validate_parse+0x2429/0x2d50 [ 99.551138][ T6124] call_ad+0x18d/0xb50 [ 99.551157][ T6124] ? __lock_acquire+0x747/0x2de0 [ 99.551182][ T6124] ? __pfx_call_ad+0x10/0x10 [ 99.551214][ T6124] ? __nla_parse+0x40/0x60 [ 99.551239][ T6124] ip_set_ad+0x82a/0x9d0 [ 99.551264][ T6124] ? __pfx_ip_set_ad+0x10/0x10 [ 99.551281][ T6124] ? __mutex_lock+0x305/0x15a0 [ 99.551335][ T6124] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 99.551362][ T6124] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 99.551427][ T6124] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 99.551489][ T6124] ? hook_capable+0x1c3/0x5e0 [ 99.551521][ T6124] netlink_rcv_skb+0x226/0x4a0 [ 99.551552][ T6124] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 99.551581][ T6124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.551621][ T6124] ? bpf_lsm_capable+0x9/0x20 [ 99.551644][ T6124] ? security_capable+0x7e/0x2c0 [ 99.551679][ T6124] nfnetlink_rcv+0x2b9/0x28c0 [ 99.551712][ T6124] ? __dev_queue_xmit+0x29b/0x3920 [ 99.551741][ T6124] ? __local_bh_enable_ip+0xd6/0x140 [ 99.551763][ T6124] ? lockdep_hardirqs_on+0x7b/0x110 [ 99.551786][ T6124] ? __dev_queue_xmit+0x29b/0x3920 [ 99.551819][ T6124] ? __local_bh_enable_ip+0xd6/0x140 [ 99.551841][ T6124] ? __dev_queue_xmit+0x29b/0x3920 [ 99.551865][ T6124] ? __dev_queue_xmit+0x1efb/0x3920 [ 99.551895][ T6124] ? __dev_queue_xmit+0x29b/0x3920 [ 99.551926][ T6124] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 99.551963][ T6124] ? __pfx___dev_queue_xmit+0x10/0x10 [ 99.551999][ T6124] ? __copy_skb_header+0xa3/0x4a0 [ 99.552027][ T6124] ? __asan_memcpy+0x40/0x70 [ 99.552054][ T6124] ? __skb_clone+0x5c/0x6c0 [ 99.552081][ T6124] ? __skb_clone+0x449/0x6c0 [ 99.552118][ T6124] ? skb_clone+0x246/0x3a0 [ 99.552145][ T6124] ? __netlink_deliver_tap+0x681/0x6e0 [ 99.552178][ T6124] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.552212][ T6124] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.552240][ T6124] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.552274][ T6124] netlink_unicast+0x8ef/0xa80 [ 99.552316][ T6124] netlink_sendmsg+0x7f0/0xb20 [ 99.552352][ T6124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.552385][ T6124] ? aa_sock_msg_perm+0x144/0x210 [ 99.552409][ T6124] ? apparmor_socket_sendmsg+0x98/0x360 [ 99.552439][ T6124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.552466][ T6124] sock_sendmsg_nosec+0x14e/0x190 [ 99.552497][ T6124] ____sys_sendmsg+0x54e/0x850 [ 99.552525][ T6124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.552558][ T6124] ? import_iovec+0x73/0xa0 [ 99.552592][ T6124] ___sys_sendmsg+0x2a5/0x360 [ 99.552612][ T6124] ? __lock_acquire+0x747/0x2de0 [ 99.552638][ T6124] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.552665][ T6124] ? futex_wake+0x51b/0x5f0 [ 99.552723][ T6124] ? __fget_files+0x3a2/0x420 [ 99.552752][ T6124] ? __fget_files+0x2a/0x420 [ 99.552789][ T6124] __x64_sys_sendmsg+0x1b1/0x290 [ 99.552826][ T6124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.552868][ T6124] do_syscall_64+0x166/0x520 [ 99.552890][ T6124] ? trace_irq_disable+0x3b/0x140 [ 99.552911][ T6124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.552931][ T6124] ? clear_bhb_loop+0x70/0xc0 [ 99.552954][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.552972][ T6124] RIP: 0033:0x7f4cf8b9f559 [ 99.552991][ T6124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.553005][ T6124] RSP: 002b:00007f4cf6df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.553026][ T6124] RAX: ffffffffffffffda RBX: 00007f4cf8e25fa0 RCX: 00007f4cf8b9f559 [ 99.553041][ T6124] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 99.553053][ T6124] RBP: 00007f4cf8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 99.553065][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.553076][ T6124] R13: 00007f4cf8e26038 R14: 00007f4cf8e25fa0 R15: 00007ffd3fd87108 [ 99.553108][ T6124] [ 99.881104][ T6125] md/raid1:md2: active with 1 out of 2 mirrors [ 99.908121][ T6125] md2: detected capacity change from 0 to 4096 [ 100.034676][ T6122] md2: detected capacity change from 4096 to 0 [ 100.034697][ T6122] md: md2 stopped. [ 100.466085][ T6141] nvmet: Invalid value 't' for trtype [ 100.572347][ T6143] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.848998][ T6143] md/raid:md0: not enough operational devices (3/3 failed) [ 101.160003][ T6143] md/raid:md0: failed to run raid set. [ 101.160022][ T6143] md: pers->run() failed ... [ 101.216219][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.225319][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.233666][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.244200][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.247626][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.142943][ T157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.236388][ T5773] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 102.394547][ T5773] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 102.403757][ T5773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.403819][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.405354][ T5620] Bluetooth: hci1: command 0x0405 tx timeout [ 102.429636][ T5773] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 102.429929][ T5773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 102.430015][ T5773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 102.439320][ T5773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 102.439415][ T5773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 102.451554][ T5773] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 102.471926][ T5773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 102.472020][ T5773] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 102.523617][ T5773] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 102.706049][ T157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.995223][ T157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.357614][ T5608] Bluetooth: hci4: command tx timeout [ 103.367899][ T157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.670523][ T5773] usb 3-1: USB disconnect, device number 10 [ 103.697140][ T5773] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 103.740202][ T5773] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 103.752725][ T6161] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.758986][ T5773] keyspan 3-1:1.0: device disconnected [ 104.205274][ T157] bridge_slave_1: left allmulticast mode [ 104.205292][ T157] bridge_slave_1: left promiscuous mode [ 104.205512][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.279968][ T157] bridge_slave_0: left allmulticast mode [ 104.279987][ T157] bridge_slave_0: left promiscuous mode [ 104.280683][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.979238][ T6232] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 104.997576][ T5718] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.064013][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.079127][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.082361][ T157] bond0 (unregistering): Released all slaves [ 105.139856][ T5718] usb 2-1: New USB device found: idVendor=04e8, idProduct=6889, bcdDevice=1.00 [ 105.142691][ T5718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.142788][ T5718] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.149936][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.149955][ T5718] usb 2-1: Product: syz [ 105.149969][ T5718] usb 2-1: Manufacturer: syz [ 105.149983][ T5718] usb 2-1: SerialNumber: syz [ 105.174987][ T5718] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -90 [ 105.175230][ T5718] kalmia 2-1:1.0: probe with driver kalmia failed with error -90 [ 105.270355][ T6232] syz.4.84 (6232) used greatest stack depth: 12224 bytes left [ 105.436570][ T5608] Bluetooth: hci4: command tx timeout [ 105.529862][ T5718] usb 2-1: USB disconnect, device number 8 [ 105.872140][ T6249] FAULT_INJECTION: forcing a failure. [ 105.872140][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 105.872171][ T6249] CPU: 0 UID: 0 PID: 6249 Comm: syz.4.86 Not tainted syzkaller #0 PREEMPT(full) [ 105.872205][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.872217][ T6249] Call Trace: [ 105.872227][ T6249] [ 105.872235][ T6249] dump_stack_lvl+0xe8/0x150 [ 105.872270][ T6249] should_fail_ex+0x3eb/0x540 [ 105.872303][ T6249] should_failslab+0xa8/0x100 [ 105.872326][ T6249] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 105.872356][ T6249] kmem_cache_alloc_noprof+0x9c/0x600 [ 105.872384][ T6249] ? __kvmalloc_node_noprof+0x340/0x820 [ 105.872404][ T6249] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 105.872429][ T6249] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 105.872464][ T6249] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 105.872504][ T6249] mmu_topup_memory_caches+0x21/0x1a0 [ 105.872535][ T6249] kvm_mmu_load+0x9d/0x21e0 [ 105.872557][ T6249] ? vmx_vcpu_load_vmcs+0x3fa/0x620 [ 105.872595][ T6249] ? vmx_vcpu_load+0x1af/0x260 [ 105.872623][ T6249] ? kvm_arch_vcpu_load+0x1f3/0xa90 [ 105.872649][ T6249] ? lock_acquire+0x115/0x350 [ 105.872672][ T6249] kvm_arch_vcpu_pre_fault_memory+0x4a1/0x6c0 [ 105.872716][ T6249] kvm_vcpu_pre_fault_memory+0x26f/0x4e0 [ 105.872740][ T6249] ? kvm_vcpu_pre_fault_memory+0x184/0x4e0 [ 105.872765][ T6249] kvm_vcpu_ioctl+0x8a6/0xfd0 [ 105.872802][ T6249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 105.872830][ T6249] ? do_futex+0x3e7/0x4e0 [ 105.872876][ T6249] ? __fget_files+0x2a/0x420 [ 105.872919][ T6249] ? bpf_lsm_file_ioctl+0x9/0x20 [ 105.872942][ T6249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 105.872973][ T6249] __se_sys_ioctl+0xfc/0x170 [ 105.872998][ T6249] do_syscall_64+0x166/0x520 [ 105.873022][ T6249] ? trace_irq_disable+0x3b/0x140 [ 105.873044][ T6249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.873065][ T6249] ? clear_bhb_loop+0x70/0xc0 [ 105.873087][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.873106][ T6249] RIP: 0033:0x7f4cf8b9f559 [ 105.873127][ T6249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.873143][ T6249] RSP: 002b:00007f4cf6df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.873165][ T6249] RAX: ffffffffffffffda RBX: 00007f4cf8e25fa0 RCX: 00007f4cf8b9f559 [ 105.873188][ T6249] RDX: 0000200000000100 RSI: 00000000c040aed5 RDI: 0000000000000007 [ 105.873203][ T6249] RBP: 00007f4cf8c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 105.873216][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.873229][ T6249] R13: 00007f4cf8e26038 R14: 00007f4cf8e25fa0 R15: 00007ffd3fd87108 [ 105.873263][ T6249] [ 106.645348][ T6268] capability: warning: `syz.1.88' uses 32-bit capabilities (legacy support in use) [ 106.656316][ T157] hsr_slave_0: left promiscuous mode [ 106.668138][ T157] hsr_slave_1: left promiscuous mode [ 106.670958][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.670977][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.672201][ T157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.672217][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.725995][ T157] veth1_macvtap: left promiscuous mode [ 106.726036][ T157] veth0_macvtap: left promiscuous mode [ 106.740560][ T157] veth1_vlan: left promiscuous mode [ 106.740758][ T157] veth0_vlan: left promiscuous mode [ 106.834750][ T6263] FAULT_INJECTION: forcing a failure. [ 106.834750][ T6263] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.834785][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.4.87 Not tainted syzkaller #0 PREEMPT(full) [ 106.834804][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.834814][ T6263] Call Trace: [ 106.834822][ T6263] [ 106.834830][ T6263] dump_stack_lvl+0xe8/0x150 [ 106.834863][ T6263] should_fail_ex+0x3eb/0x540 [ 106.834896][ T6263] _copy_to_user+0x31/0xb0 [ 106.834940][ T6263] copy_siginfo_to_user+0x22/0xc0 [ 106.834966][ T6263] x64_setup_rt_frame+0x764/0xc50 [ 106.835011][ T6263] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 106.835041][ T6263] arch_do_signal_or_restart+0x456/0x860 [ 106.835067][ T6263] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 106.835098][ T6263] ? ksys_write+0x242/0x270 [ 106.835124][ T6263] exit_to_user_mode_loop+0x10e/0x770 [ 106.835145][ T6263] ? rcu_is_watching+0x16/0xb0 [ 106.835172][ T6263] do_syscall_64+0x328/0x520 [ 106.835194][ T6263] ? trace_irq_disable+0x3b/0x140 [ 106.835215][ T6263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.835235][ T6263] ? clear_bhb_loop+0x70/0xc0 [ 106.835271][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.835290][ T6263] RIP: 0033:0x7f4cf8b5fd8e [ 106.835308][ T6263] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.835323][ T6263] RSP: 002b:00007f4cf6df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.835344][ T6263] RAX: 0000000000000001 RBX: 00007f4cf6df66c0 RCX: 00007f4cf8b5fd8e [ 106.835358][ T6263] RDX: 0000000000000001 RSI: 00007f4cf6df6090 RDI: 0000000000000006 [ 106.835370][ T6263] RBP: 00007f4cf6df6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.835383][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.835395][ T6263] R13: 00007f4cf8e26038 R14: 00007f4cf8e25fa0 R15: 00007ffd3fd87108 [ 106.835425][ T6263] [ 107.159096][ T6261] block nbd4: shutting down sockets [ 107.276294][ C0] net_ratelimit: 81 callbacks suppressed [ 107.512900][ T157] team0 (unregistering): Port device team_slave_1 removed [ 107.516416][ T5608] Bluetooth: hci4: command tx timeout [ 107.571943][ T157] team0 (unregistering): Port device team_slave_0 removed [ 107.916654][ T5719] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.067267][ T5719] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 108.068495][ T5719] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.068559][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.087048][ T5719] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 108.087318][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 108.087402][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 108.092587][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 108.094912][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 108.097228][ T5719] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 108.111741][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 108.111833][ T5719] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 108.125771][ T5719] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 108.999898][ T5719] usb 5-1: USB disconnect, device number 7 [ 109.072366][ T5719] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 109.104118][ T5719] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 109.119592][ T5719] keyspan 5-1:1.0: device disconnected [ 109.199116][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.199215][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.199386][ T6161] bridge_slave_0: entered allmulticast mode [ 109.201284][ T6161] bridge_slave_0: entered promiscuous mode [ 109.232699][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.232998][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.233166][ T6161] bridge_slave_1: entered allmulticast mode [ 109.235912][ T6161] bridge_slave_1: entered promiscuous mode [ 109.529085][ T6161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.542072][ T6161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.597745][ T5608] Bluetooth: hci4: command tx timeout [ 109.782115][ T6161] team0: Port device team_slave_0 added [ 109.785964][ T6161] team0: Port device team_slave_1 added [ 109.884087][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.884097][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.884118][ T6161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.984140][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.984155][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.984176][ T6161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.271493][ T6161] hsr_slave_0: entered promiscuous mode [ 110.272737][ T6161] hsr_slave_1: entered promiscuous mode [ 110.651625][ T6161] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.698221][ T6161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.699112][ T6161] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.735070][ T6161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.744915][ T6161] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.773451][ T6161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.783599][ T6161] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.827868][ T6161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.353074][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 111.386970][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.485616][ T6161] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.490609][ T5791] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 111.499155][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.499253][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.519853][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.519946][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.647487][ T5791] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 111.652159][ T5791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.652224][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.676444][ T5791] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 111.676879][ T5791] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 111.676959][ T5791] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 111.684206][ T5791] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 111.684298][ T5791] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 111.725440][ T5791] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 111.763565][ T5791] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 111.774143][ T5791] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 111.839998][ T5791] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 112.355987][ T5704] usb 3-1: USB disconnect, device number 11 [ 112.382171][ T5704] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 112.396342][ C0] net_ratelimit: 90 callbacks suppressed [ 112.426093][ T5704] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 112.442208][ T5704] keyspan 3-1:1.0: device disconnected [ 113.127370][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 113.180964][ T6161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.033507][ T6161] veth0_vlan: entered promiscuous mode [ 114.068230][ T6161] veth1_vlan: entered promiscuous mode [ 114.149863][ T6161] veth0_macvtap: entered promiscuous mode [ 114.165350][ T6161] veth1_macvtap: entered promiscuous mode [ 114.425746][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.480982][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.546472][ T157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.546511][ T157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.546544][ T157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.546575][ T157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.995295][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 115.015009][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.015023][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.166931][ T1231] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 115.268882][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.268897][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.327928][ T1231] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 115.331856][ T1231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.331949][ T1231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.381670][ T1231] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 115.381938][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 115.382029][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 115.385325][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 115.385424][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 115.432606][ T1231] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 115.449289][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 115.449382][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 115.454686][ T1231] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 115.746324][ T5704] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 115.892565][ T6497] device-mapper: table: 248:3: snapshot-merge: Cannot get origin device (-ENOENT) [ 115.892596][ T6497] device-mapper: ioctl: error adding target to table [ 115.897771][ T5704] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 115.901592][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.901658][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.953132][ T5704] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 115.958439][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 115.958521][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 115.973457][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 115.973562][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 115.983859][ T5704] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 115.996616][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 116.001493][ T5704] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 116.022776][ T5704] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 116.954189][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 117.341624][ T6546] device-mapper: table: 248:4: snapshot-merge: Snapshot exception store does not support snapshot-merge. (-EINVAL) [ 117.341650][ T6546] device-mapper: ioctl: error adding target to table [ 117.596249][ C0] net_ratelimit: 292 callbacks suppressed [ 117.899809][ T5704] usb 2-1: USB disconnect, device number 9 [ 117.905641][ T5704] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 117.936588][ T5704] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 117.937708][ T5704] keyspan 2-1:1.0: device disconnected [ 118.086678][ T5791] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.242518][ T3215] usb 3-1: USB disconnect, device number 12 [ 118.248568][ T5791] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 118.268095][ T5791] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.268170][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.278444][ T3215] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 118.296736][ T5791] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 118.296998][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 118.297081][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 118.311616][ T3215] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 118.321667][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 118.321763][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 118.333542][ T3215] keyspan 3-1:1.0: device disconnected [ 118.341287][ T5791] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 118.372539][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 118.372635][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 118.429898][ T5791] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 118.434739][ T6571] device-mapper: table: 248:5: snapshot-merge: Snapshot exception store does not support snapshot-merge. (-EINVAL) [ 118.434764][ T6571] device-mapper: ioctl: error adding target to table [ 118.531034][ T5791] usb 5-1: USB disconnect, device number 8 [ 118.587184][ T5791] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 118.623848][ T5791] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 118.639946][ T5791] keyspan 5-1:1.0: device disconnected [ 119.263310][ T6594] device-mapper: table: 248:5: snapshot-merge: Snapshot exception store does not support snapshot-merge. (-EINVAL) [ 119.263337][ T6594] device-mapper: ioctl: error adding target to table [ 119.328939][ T5773] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 119.500760][ T5773] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 119.505398][ T5773] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.505467][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.573478][ T5773] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 119.573751][ T5773] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 119.573837][ T5773] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 119.585109][ T5773] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 119.585206][ T5773] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 119.605775][ T5773] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 119.622153][ T5773] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 119.622268][ T5773] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 119.652966][ T5773] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 119.896383][ T1231] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 120.057228][ T1231] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 120.059138][ T1231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.059205][ T1231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.099444][ T1231] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 120.102419][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 120.102500][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 120.124473][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 120.126798][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 120.136000][ T1231] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 120.160953][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 120.161049][ T1231] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 120.170010][ T1231] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 120.896420][ T5791] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 121.048663][ T5791] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 121.050369][ T5791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.050438][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.075591][ T5791] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 121.076023][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 121.076107][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 121.079476][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 121.079566][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 121.088568][ T5791] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB4 [ 121.092624][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 121.092719][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 121.101842][ T5791] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB5 [ 121.282796][ T5791] usb 2-1: USB disconnect, device number 10 [ 121.288774][ T5791] keyspan_2 ttyUSB4: Keyspan 2 port adapter converter now disconnected from ttyUSB4 [ 121.301050][ T5791] keyspan_2 ttyUSB5: Keyspan 2 port adapter converter now disconnected from ttyUSB5 [ 121.305182][ T5791] keyspan 2-1:1.0: device disconnected [ 122.021314][ T5718] usb 3-1: USB disconnect, device number 13 [ 122.051217][ T5718] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 122.067932][ T5718] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 122.068840][ T5718] keyspan 3-1:1.0: device disconnected [ 122.285890][ T5704] usb 6-1: USB disconnect, device number 2 [ 122.323304][ T5704] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 122.351804][ T5704] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 122.363682][ T5704] keyspan 6-1:1.0: device disconnected [ 122.676321][ T5275] net_ratelimit: 80 callbacks suppressed [ 122.866631][ T5704] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.028861][ T5704] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 123.030841][ T5704] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.030909][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.072809][ T5704] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 123.073064][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 123.073143][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 123.103284][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 123.103382][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 123.123719][ T5704] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 123.139462][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 123.139551][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 123.163877][ T5704] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 123.289723][ T5704] usb 6-1: USB disconnect, device number 3 [ 123.302969][ T5791] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 123.331536][ T5704] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 123.351885][ T5704] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 123.353495][ T5704] keyspan 6-1:1.0: device disconnected [ 123.447326][ T5791] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 123.461688][ T5791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.461781][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.494290][ T5791] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 123.494570][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 123.494655][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 123.522587][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 123.522703][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 123.548122][ T5791] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 123.556112][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 123.574495][ T5791] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 123.590466][ T5791] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 123.616390][ T5773] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 123.767245][ T5773] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 123.770136][ T5773] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.770174][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.795396][ T5773] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 123.795768][ T5773] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 123.795846][ T5773] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 123.803595][ T5773] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 123.805551][ T5773] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 123.814491][ T5773] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 123.820809][ T5773] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 123.820903][ T5773] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 123.824586][ T5773] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 124.028769][ T1231] usb 5-1: USB disconnect, device number 9 [ 124.049579][ T1231] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 124.087378][ T1231] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 124.101271][ T1231] keyspan 5-1:1.0: device disconnected [ 125.306522][ T5704] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 125.457251][ T5704] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 125.458284][ T5704] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.458322][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.465428][ T5704] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 125.465706][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 125.465785][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 125.525950][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 125.526046][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 125.546133][ T5704] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 125.566953][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 125.567050][ T5704] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 125.584744][ T5791] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.595961][ T5704] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 125.669728][ T1231] usb 6-1: USB disconnect, device number 4 [ 125.684317][ T1231] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 125.701141][ T1231] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 125.710724][ T1231] keyspan 6-1:1.0: device disconnected [ 125.738706][ T5791] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 125.745012][ T5791] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.745077][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.786667][ T5791] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 125.787686][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 125.787773][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 125.792144][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 125.794081][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 125.840410][ T5791] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 125.844547][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 125.844637][ T5791] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 125.873044][ T5791] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 125.992483][ T5791] usb 5-1: USB disconnect, device number 10 [ 126.018190][ T5791] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 126.025319][ T5791] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 126.047026][ T5791] keyspan 5-1:1.0: device disconnected [ 126.210284][ T5704] usb 2-1: USB disconnect, device number 11 [ 126.234532][ T5704] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 126.254448][ T5704] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 126.266073][ T5704] keyspan 2-1:1.0: device disconnected [ 126.560609][ T6748] Zero length message leads to an empty skb [ 127.166978][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 127.318059][ T9] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 127.323136][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.323207][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.354966][ T9] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 127.355239][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 127.355322][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 127.375793][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 127.375905][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 127.383469][ T9] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 127.393664][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 127.393769][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 127.425256][ T9] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 127.590590][ T5773] usb 2-1: USB disconnect, device number 12 [ 127.634120][ T5773] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 127.658481][ T5718] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 127.678879][ T5773] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 127.679837][ T5773] keyspan 2-1:1.0: device disconnected [ 127.817508][ T5718] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 127.823268][ T5718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.823766][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.870207][ T5718] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 127.870508][ T5718] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 127.870591][ T5718] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 127.885805][ T5718] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 127.885905][ T5718] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 127.917595][ C1] net_ratelimit: 57 callbacks suppressed [ 127.919820][ T5718] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 127.935414][ T5718] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 127.935603][ T5718] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 127.957536][ T5718] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 129.160554][ T1231] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 129.308782][ T1231] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 129.311170][ T1231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.311234][ T1231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.341982][ T1231] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 129.342251][ T1231] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 129.342335][ T1231] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 129.349770][ T1231] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 129.349867][ T1231] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 129.368433][ T1231] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 129.375273][ T1231] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 129.375367][ T1231] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 129.402315][ T1231] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 129.457798][ T5718] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 129.535413][ T5791] usb 5-1: USB disconnect, device number 11 [ 129.571699][ T5791] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 129.590399][ T5791] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 129.593724][ T5791] keyspan 5-1:1.0: device disconnected [ 129.614544][ T5718] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 129.618700][ T5718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.618764][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.690131][ T5718] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 129.690436][ T5718] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 129.690519][ T5718] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 129.708721][ T5718] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 129.708815][ T5718] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 129.716626][ T5718] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 129.729110][ T5718] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 129.729206][ T5718] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 129.743736][ T5718] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 129.908491][ T5718] usb 2-1: USB disconnect, device number 13 [ 129.935834][ T5718] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 129.979848][ T5718] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 129.982044][ T5718] keyspan 2-1:1.0: device disconnected [ 130.660640][ T9] usb 6-1: USB disconnect, device number 5 [ 130.684713][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 130.725917][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 130.742606][ T9] keyspan 6-1:1.0: device disconnected [ 131.406582][ T5719] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 131.477491][ T5718] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 131.510736][ T6899] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.549480][ T6899] md: array md0 already has disks! [ 131.579286][ T5719] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 131.580816][ T5719] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.580885][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.590570][ T6899] md: could not open device unknown-block(1,0). [ 131.590630][ T6899] md: error, md_import_device() returned -16 [ 131.627909][ T5718] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 131.629471][ T5718] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.629536][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.670902][ T5719] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 131.671177][ T5719] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 131.671253][ T5719] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 131.672953][ T5719] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 131.673046][ T5719] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 131.689407][ T5718] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 131.689679][ T5718] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 131.689761][ T5718] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 131.706445][ T5718] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 131.706540][ T5718] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 131.720367][ T5718] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 131.737233][ T5718] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 131.737344][ T5718] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 131.745916][ T5718] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 131.754647][ T5719] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 131.802779][ T5719] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 131.802885][ T5719] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 131.826019][ T5719] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 131.860099][ T6899] FAULT_INJECTION: forcing a failure. [ 131.860099][ T6899] name failslab, interval 1, probability 0, space 0, times 0 [ 131.860138][ T6899] CPU: 0 UID: 0 PID: 6899 Comm: syz.1.281 Not tainted syzkaller #0 PREEMPT(full) [ 131.860169][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.860182][ T6899] Call Trace: [ 131.860191][ T6899] [ 131.860201][ T6899] dump_stack_lvl+0xe8/0x15 ** replaying previous printk message ** [ 131.860201][ T6899] dump_stack_lvl+0xe8/0x150 [ 131.860239][ T6899] should_fail_ex+0x3eb/0x540 [ 131.860276][ T6899] should_failslab+0xa8/0x100 [ 131.860302][ T6899] __kmalloc_noprof+0xf9/0x710 [ 131.860334][ T6899] ? __raw_spin_lock_init+0x45/0x100 [ 131.860357][ T6899] ? setup_conf+0xc15/0x2ad0 [ 131.860382][ T6899] ? setup_conf+0xc15/0x2ad0 [ 131.860410][ T6899] setup_conf+0xc15/0x2ad0 [ 131.860447][ T6899] ? __pfx_setup_conf+0x10/0x10 [ 131.860482][ T6899] raid5_run+0x8cc/0x2560 [ 131.860505][ T6899] ? _raw_spin_unlock+0x28/0x50 [ 131.860526][ T6899] ? get_pers+0x22b/0x2e0 [ 131.860554][ T6899] ? __pfx_get_pers+0x10/0x10 [ 131.860596][ T6899] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 131.860624][ T6899] md_run+0xc3d/0x1cd0 [ 131.860661][ T6899] ? __pfx_md_run+0x10/0x10 [ 131.860699][ T6899] do_md_run+0x35/0x720 [ 131.860721][ T6899] ? md_ioctl+0x1e23/0x2610 [ 131.860746][ T6899] md_ioctl+0x1e2b/0x2610 [ 131.860775][ T6899] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 131.860803][ T6899] ? tomoyo_path_number_perm+0x219/0x5f0 [ 131.860830][ T6899] ? __pfx_md_ioctl+0x10/0x10 [ 131.860859][ T6899] ? do_vfs_ioctl+0x116f/0x1530 [ 131.860886][ T6899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.860922][ T6899] ? do_futex+0x3e7/0x4e0 [ 131.860965][ T6899] ? __pfx_md_ioctl+0x10/0x10 [ 131.860998][ T6899] blkdev_ioctl+0x5e3/0x740 [ 131.861026][ T6899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 131.861053][ T6899] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.861078][ T6899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 131.861099][ T6899] __se_sys_ioctl+0xfc/0x170 [ 131.861120][ T6899] do_syscall_64+0x166/0x520 [ 131.861144][ T6899] ? trace_irq_disable+0x3b/0x140 [ 131.861168][ T6899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.861188][ T6899] ? clear_bhb_loop+0x70/0xc0 [ 131.861212][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.861232][ T6899] RIP: 0033:0x7faba499f559 [ 131.861252][ T6899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.861271][ T6899] RSP: 002b:00007faba57ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.861294][ T6899] RAX: ffffffffffffffda RBX: 00007faba4c25fa0 RCX: 00007faba499f559 [ 131.861310][ T6899] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005 [ 131.861325][ T6899] RBP: 00007faba4a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 131.861339][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.861352][ T6899] R13: 00007faba4c26038 R14: 00007faba4c25fa0 R15: 00007ffed332ae68 [ 131.861385][ T6899] [ 131.861447][ T6899] ================================================================== [ 131.861458][ T6899] BUG: KASAN: null-ptr-deref in free_conf+0x81/0x5d0 [ 131.861484][ T6899] Read of size 8 at addr 0000000000000028 by task syz.1.281/6899 [ 131.861504][ T6899] [ 131.861514][ T6899] CPU: 0 UID: 0 PID: 6899 Comm: syz.1.281 Not tainted syzkaller #0 PREEMPT(full) [ 131.861540][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.861553][ T6899] Call Trace: [ 131.861560][ T6899] [ 131.861569][ T6899] dump_stack_lvl+0xe8/0x150 [ 131.861603][ T6899] ? free_conf+0x81/0x5d0 [ 131.861627][ T6899] kasan_report+0x117/0x150 [ 131.861651][ T6899] ? free_conf+0x81/0x5d0 [ 131.861675][ T6899] kasan_check_range+0x264/0x2c0 [ 131.861697][ T6899] free_conf+0x81/0x5d0 [ 131.861723][ T6899] setup_conf+0x1720/0x2ad0 [ 131.861752][ T6899] ? __pfx_setup_conf+0x10/0x10 [ 131.861776][ T6899] raid5_run+0x8cc/0x2560 [ 131.861796][ T6899] ? _raw_spin_unlock+0x28/0x50 [ 131.861815][ T6899] ? get_pers+0x22b/0x2e0 [ 131.861843][ T6899] ? __pfx_get_pers+0x10/0x10 [ 131.861868][ T6899] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 131.861890][ T6899] md_run+0xc3d/0x1cd0 [ 131.861917][ T6899] ? __pfx_md_run+0x10/0x10 [ 131.861941][ T6899] do_md_run+0x35/0x720 [ 131.861963][ T6899] ? md_ioctl+0x1e23/0x2610 [ 131.861988][ T6899] md_ioctl+0x1e2b/0x2610 [ 131.862014][ T6899] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 131.862043][ T6899] ? tomoyo_path_number_perm+0x219/0x5f0 [ 131.862069][ T6899] ? __pfx_md_ioctl+0x10/0x10 [ 131.862099][ T6899] ? do_vfs_ioctl+0x116f/0x1530 [ 131.862124][ T6899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.862151][ T6899] ? do_futex+0x3e7/0x4e0 [ 131.862180][ T6899] ? __pfx_md_ioctl+0x10/0x10 [ 131.862205][ T6899] blkdev_ioctl+0x5e3/0x740 [ 131.862223][ T6899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 131.862235][ T6899] ? bpf_lsm_file_ioctl+0x9/0x20 [ 131.862247][ T6899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 131.862257][ T6899] __se_sys_ioctl+0xfc/0x170 [ 131.862270][ T6899] do_syscall_64+0x166/0x520 [ 131.862284][ T6899] ? trace_irq_disable+0x3b/0x140 [ 131.862296][ T6899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.862308][ T6899] ? clear_bhb_loop+0x70/0xc0 [ 131.862323][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.862333][ T6899] RIP: 0033:0x7faba499f559 [ 131.862344][ T6899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.862353][ T6899] RSP: 002b:00007faba57ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.862366][ T6899] RAX: ffffffffffffffda RBX: 00007faba4c25fa0 RCX: 00007faba499f559 [ 131.862375][ T6899] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005 [ 131.862382][ T6899] RBP: 00007faba4a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 131.862389][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.862395][ T6899] R13: 00007faba4c26038 R14: 00007faba4c25fa0 R15: 00007ffed332ae68 [ 131.862407][ T6899] [ 131.862412][ T6899] ================================================================== [ 131.909707][ T6899] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 132.469003][ T6899] CPU: 0 UID: 0 PID: 6899 Comm: syz.1.281 Not tainted syzkaller #0 PREEMPT(full) [ 132.478197][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 132.488252][ T6899] Call Trace: [ 132.491533][ T6899] [ 132.494459][ T6899] vpanic+0x26f/0x710 [ 132.498451][ T6899] panic+0xc5/0xd0 [ 132.502178][ T6899] ? __pfx_panic+0x10/0x10 [ 132.506599][ T6899] ? preempt_schedule_thunk+0x16/0x40 [ 132.511975][ T6899] ? free_conf+0x81/0x5d0 [ 132.516309][ T6899] check_panic_on_warn+0x89/0xb0 [ 132.521269][ T6899] ? free_conf+0x81/0x5d0 [ 132.525676][ T6899] end_report+0x73/0x170 [ 132.529954][ T6899] ? free_conf+0x81/0x5d0 [ 132.534296][ T6899] kasan_report+0x128/0x150 [ 132.538805][ T6899] ? free_conf+0x81/0x5d0 [ 132.543180][ T6899] kasan_check_range+0x264/0x2c0 [ 132.548125][ T6899] free_conf+0x81/0x5d0 [ 132.552291][ T6899] setup_conf+0x1720/0x2ad0 [ 132.556804][ T6899] ? __pfx_setup_conf+0x10/0x10 [ 132.561666][ T6899] raid5_run+0x8cc/0x2560 [ 132.566025][ T6899] ? _raw_spin_unlock+0x28/0x50 [ 132.570876][ T6899] ? get_pers+0x22b/0x2e0 [ 132.575227][ T6899] ? __pfx_get_pers+0x10/0x10 [ 132.579918][ T6899] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 132.585777][ T6899] md_run+0xc3d/0x1cd0 [ 132.589871][ T6899] ? __pfx_md_run+0x10/0x10 [ 132.594394][ T6899] do_md_run+0x35/0x720 [ 132.598550][ T6899] ? md_ioctl+0x1e23/0x2610 [ 132.603062][ T6899] md_ioctl+0x1e2b/0x2610 [ 132.607416][ T6899] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 132.613124][ T6899] ? tomoyo_path_number_perm+0x219/0x5f0 [ 132.618784][ T6899] ? __pfx_md_ioctl+0x10/0x10 [ 132.623474][ T6899] ? do_vfs_ioctl+0x116f/0x1530 [ 132.628330][ T6899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 132.633365][ T6899] ? do_futex+0x3e7/0x4e0 [ 132.637705][ T6899] ? __pfx_md_ioctl+0x10/0x10 [ 132.642397][ T6899] blkdev_ioctl+0x5e3/0x740 [ 132.646904][ T6899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 132.651948][ T6899] ? bpf_lsm_file_ioctl+0x9/0x20 [ 132.656926][ T6899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 132.661978][ T6899] __se_sys_ioctl+0xfc/0x170 [ 132.666590][ T6899] do_syscall_64+0x166/0x520 [ 132.671184][ T6899] ? trace_irq_disable+0x3b/0x140 [ 132.676222][ T6899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.682312][ T6899] ? clear_bhb_loop+0x70/0xc0 [ 132.687021][ T6899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.692938][ T6899] RIP: 0033:0x7faba499f559 [ 132.697349][ T6899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.716955][ T6899] RSP: 002b:00007faba57ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.725392][ T6899] RAX: ffffffffffffffda RBX: 00007faba4c25fa0 RCX: 00007faba499f559 [ 132.733368][ T6899] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005 [ 132.741374][ T6899] RBP: 00007faba4a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 132.749352][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.757346][ T6899] R13: 00007faba4c26038 R14: 00007faba4c25fa0 R15: 00007ffed332ae68 [ 132.765344][ T6899] [ 132.768655][ T6899] Kernel Offset: disabled [ 132.773001][ T6899] Rebooting in 86400 seconds..