last executing test programs: 7.17297041s ago: executing program 0 (id=643): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) writev(r0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) sendmmsg$inet(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x3, 0x60cd894) 7.169632151s ago: executing program 3 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000)=0xa, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x2f, 0x2020, 0x4}, 0x20) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x141040, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x0, 0x7fffffff, 0xc, 0x2f, 0xd, 0xf1, 0x8, 0x4e1, 0x10000, 0x0, 0x8008500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffff, 0x31, 0x1ff, 0x9ea, 0x10, 0x0, 0xfffffffa, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x7fffffff, 0x4, 0x9a9]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c20000030000000000008100000086dd690c9eab001406fffe80000000000000000000000000002dff0200000000000000000000000000014e224e24e751d381511f4b354528210af96bcbc809766f5ab13bbfff76b4342399cafa02c69f2d43e43227224a1da718e8772a7318ccd9de7ac3a6950c24bcde65e7a0996d0c845703d3c91a890a438340e97deec7985f022f68960e04895811442306ab03df743c1c44478fe288d4c4a718d4a64b636e65b68948ee33bb3b974f2e1bac7d81388386823277a7dfe565f5c583d0edb45a8f75c5b7ce604aaa2a2188f99334f31e6d868a0f0a14727e999391ef1a82a6d53837c8248a19074e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51400000907888fb"], 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3e8, 0x4, 0x1000000000000002, 0x101fffffffffffe, 0x7fffffffffffffff, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x7f4], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$FICLONE(r6, 0x40049409, r8) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000225bd7000fcdb3e25040000000c00160009009068000019000000050014004f000000050021000100000005002200000000a808000c000000000014102000fc0100"/78], 0x54}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000060) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) 6.901232673s ago: executing program 4 (id=646): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x1, 0x5e5}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000480)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x2cf, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x8}}}, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4000, 0x0, 0xfffffffffffffffb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r4, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x8200, 0x200, 0xa, [0x40]}}}}, 0x17) accept4(r4, 0x0, 0x0, 0x800) 6.899322213s ago: executing program 0 (id=647): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x3ff) sendfile(r0, r1, 0x0, 0x10ffff) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x483aa011, 0x8, 0xfffff801, 0x15, "000000000000f00a00"}) 6.806671867s ago: executing program 1 (id=648): setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setrlimit(0x0, &(0x7f0000000280)={0x7, 0xfdffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800034000000012080001400000000108000240000000010900010073797a"], 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) write(0xffffffffffffffff, &(0x7f0000000250)='/dev/zram0,65', 0xd) 6.644829934s ago: executing program 0 (id=649): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000019080)={0x0, 0x597f, 0x1, 0x2, 0x10d, 0x0, r0}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x3, 0x17, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x2c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x200, 0x3, 0x11a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d9, 0x800, 0x0, 0x3bd, 0x0, r0}}], 0x4, 0x0, &(0x7f000001a480)) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x6, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r7, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r7, 0x7, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) r8 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000180)) getpid() 6.543856989s ago: executing program 1 (id=650): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket(0x10, 0x3, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883ff"}}}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8805}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd) 5.973064676s ago: executing program 2 (id=651): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)="0000000000002085716c4b9ad53de8d9db5dd7039cc3a95f9a640c387834e1e56369c7d966f1d133f7cb76009042c2c1cddd5ac5381662f65c00000000000000000000000000000030b04374bcae307b8bb44315783b5a5b3c82a913013410edb938c90e0935e2a269ef5224b5bc6d51237d97301fda0decfe61c30d7858812edd73e720da538170d70177d5fe1a9fbeb8201373f93fa0bef47d04aa35", 0x9d) close(r0) 5.359027523s ago: executing program 3 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) 3.758780237s ago: executing program 4 (id=653): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x6, 0x111500) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x100}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r6, 0x8b1a, &(0x7f0000000040)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000380)='hybla', 0x5) recvfrom$inet(r7, &(0x7f0000000280)=""/8, 0x8, 0x720, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') landlock_restrict_self(r1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x24044051}, 0x4000890) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000040)={0x6, "437b6425424f18822df691ab170b11e5beb01bbec00cc2bc51700718184c44cfd6d51986226fbe62595ba7ee8eb087de0281a79b16747f3a14f883465717cb19"}) 2.930794036s ago: executing program 2 (id=654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x4) r2 = getpgrp(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000040)=0x114f60df193b2d99) 2.856103399s ago: executing program 3 (id=655): getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 2.725122065s ago: executing program 2 (id=656): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.524821424s ago: executing program 0 (id=657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) writev(r0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) sendmmsg$inet(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x3, 0x60cd894) 2.504345265s ago: executing program 3 (id=658): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x2000) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 2.477839246s ago: executing program 1 (id=659): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)='\'', 0x14}], 0x1}, 0x0) 1.926336232s ago: executing program 0 (id=660): setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setrlimit(0x0, &(0x7f0000000280)={0x7, 0xfdffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800034000000012080001400000000108000240000000010900010073797a"], 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) write(0xffffffffffffffff, &(0x7f0000000250)='/dev/zram0,65', 0xd) 1.817929737s ago: executing program 3 (id=661): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') 1.759664419s ago: executing program 4 (id=662): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=ANY=[], 0x1030}, 0x1, 0x0, 0x0, 0x84}, 0x40880) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000225bd7000ff31000000000900010073797a310031000000000900010073797a3200"/62], 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x10) syz_open_dev$evdev(0x0, 0x20000000000, 0x840) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x4e21, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000006"], 0x4a) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r4, 0x5421, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000740)='/dev/comedi4\x00', 0x60080, 0x0) ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) fcntl$addseals(r6, 0x409, 0xa) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.74031799s ago: executing program 2 (id=663): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3401000018000100feffffff0001000000000000000000000000fffbe0000002fc0100000000000000000000000000010001071c4e2300052b00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000fcffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000000080000000003500000200010020000000480003006465666c61746500"/215], 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) 1.622337316s ago: executing program 1 (id=664): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)="0000000000002085716c4b9ad53de8d9db5dd7039cc3a95f9a640c387834e1e56369c7d966f1d133f7cb76009042c2c1cddd5ac5381662f65c00000000000000000000000000000030b04374bcae307b8bb44315783b5a5b3c82a913013410edb938c90e0935e2a269ef5224b5bc6d51237d97301fda0decfe61c30d7858812edd73e720da538170d70177d5fe1a9fbeb8201373f93fa0bef47d04aa35", 0x9d) close(r0) 1.440222054s ago: executing program 0 (id=665): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) gettid() r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x11}, 0x4, 0xb6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2c}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0xd43}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {r7, 0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2094) r8 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x8, @remote, @dev={0xac, 0x14, 0x14, 0x38}, @link_local, @local}}}}, 0x0) 1.439708794s ago: executing program 2 (id=666): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x1}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.432409735s ago: executing program 1 (id=667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x4) r2 = getpgrp(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x3, @remote}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000040)=0x114f60df193b2d99) 1.341187279s ago: executing program 4 (id=668): getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 1.181237546s ago: executing program 3 (id=669): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket(0x10, 0x3, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883ff"}}}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8805}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd) 1.141752748s ago: executing program 4 (id=670): prlimit64(0xffffffffffffffff, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x3) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r1, &(0x7f00000004c0)='\n', 0x1) 728.679217ms ago: executing program 1 (id=671): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) writev(r0, &(0x7f0000000100), 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) sendmmsg$inet(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x3, 0x60cd894) 606.168343ms ago: executing program 4 (id=672): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x2000) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 0s ago: executing program 2 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. [ 74.916300][ T4259] cgroup: Unknown subsys name 'net' [ 75.070876][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.600777][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.266337][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.271018][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.282700][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.290609][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.298620][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.311256][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.312051][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.318532][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.331258][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.340180][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.340800][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.355217][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.357794][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.366153][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.372672][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.379010][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.386330][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.392318][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.397977][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.412070][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.415948][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.423609][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.429041][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.441131][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.448327][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.482859][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.491429][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.496490][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.506169][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.515453][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.006603][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 79.032718][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 79.068266][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 79.140856][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 79.172586][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 79.283236][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.291832][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.300883][ T4279] device bridge_slave_0 entered promiscuous mode [ 79.313771][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.320992][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.329856][ T4282] device bridge_slave_0 entered promiscuous mode [ 79.355625][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.362812][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.371616][ T4279] device bridge_slave_1 entered promiscuous mode [ 79.383818][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.391241][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.399825][ T4282] device bridge_slave_1 entered promiscuous mode [ 79.407776][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.415151][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.423644][ T4272] device bridge_slave_0 entered promiscuous mode [ 79.440211][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.447454][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.456393][ T4272] device bridge_slave_1 entered promiscuous mode [ 79.538192][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.548323][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.556832][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.566040][ T4271] device bridge_slave_0 entered promiscuous mode [ 79.576123][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.599632][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.615679][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.625376][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.632566][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.641392][ T4271] device bridge_slave_1 entered promiscuous mode [ 79.651963][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.663588][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.670978][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.679840][ T4274] device bridge_slave_0 entered promiscuous mode [ 79.689424][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.722056][ T4282] team0: Port device team_slave_0 added [ 79.751593][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.760268][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.768875][ T4274] device bridge_slave_1 entered promiscuous mode [ 79.778357][ T4282] team0: Port device team_slave_1 added [ 79.806958][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.819575][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.838069][ T4272] team0: Port device team_slave_0 added [ 79.853431][ T4279] team0: Port device team_slave_0 added [ 79.875410][ T4272] team0: Port device team_slave_1 added [ 79.890507][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.897818][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.924088][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.937608][ T4279] team0: Port device team_slave_1 added [ 79.955009][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.973647][ T4271] team0: Port device team_slave_0 added [ 79.980408][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.988366][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.015446][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.036478][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.054449][ T4271] team0: Port device team_slave_1 added [ 80.080494][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.088514][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.115585][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.144246][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.151351][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.177903][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.198192][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.205762][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.231988][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.251341][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.258485][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.284760][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.301705][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.309460][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.335645][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.348419][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.355770][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.381829][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.395393][ T4274] team0: Port device team_slave_0 added [ 80.443073][ T4274] team0: Port device team_slave_1 added [ 80.463090][ T4282] device hsr_slave_0 entered promiscuous mode [ 80.470595][ T4282] device hsr_slave_1 entered promiscuous mode [ 80.491758][ T4279] device hsr_slave_0 entered promiscuous mode [ 80.499029][ T4279] device hsr_slave_1 entered promiscuous mode [ 80.506499][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 80.513533][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.515519][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 80.523272][ T4279] Cannot create hsr debugfs directory [ 80.580299][ T4271] device hsr_slave_0 entered promiscuous mode [ 80.584748][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 80.586911][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 80.592781][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 80.608911][ T4271] device hsr_slave_1 entered promiscuous mode [ 80.616137][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.623726][ T4271] Cannot create hsr debugfs directory [ 80.636221][ T4272] device hsr_slave_0 entered promiscuous mode [ 80.643141][ T4272] device hsr_slave_1 entered promiscuous mode [ 80.650317][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.658089][ T4272] Cannot create hsr debugfs directory [ 80.676139][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.683144][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.710425][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.763315][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.770451][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.798081][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.939234][ T4274] device hsr_slave_0 entered promiscuous mode [ 80.947426][ T4274] device hsr_slave_1 entered promiscuous mode [ 80.955128][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.962715][ T4274] Cannot create hsr debugfs directory [ 81.220295][ T4282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.240111][ T4282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.250589][ T4282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.267672][ T4282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.331281][ T4279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.343486][ T4279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.367685][ T4279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.402990][ T4279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.418107][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.429684][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.440882][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.452331][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.577947][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.595105][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.610094][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.620826][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.716899][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.739765][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.762251][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.772558][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.792192][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.802199][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.817594][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.833705][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.866662][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.902553][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.912714][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.923086][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.930492][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.940412][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.951752][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.960531][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.967707][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.976912][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.987602][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.033041][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.042088][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.050864][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.060254][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.079578][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.107625][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.115506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.125502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.134532][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.141710][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.150134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.159156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.168702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.177923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.191390][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.206067][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.216573][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.223749][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.267856][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.277737][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.288465][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.297646][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.307199][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.318408][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.327474][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.337459][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.347024][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.357695][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.390840][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.402086][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.409233][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.423837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.433578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.443061][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.453281][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.472389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.506324][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.513753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.530065][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.540521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.552863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.563524][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.571327][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.584112][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 82.587401][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 82.617607][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.631435][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.643150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.653578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.663287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.671685][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 82.678389][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 82.678730][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 82.708481][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.715883][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.729488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.738583][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.753591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.771606][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.780525][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.787733][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.797144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.807229][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.816356][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.823479][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.832134][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.841331][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.869980][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.882119][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.896298][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.905646][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.916966][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.927788][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.951107][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.969509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.980296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.005309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.016816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.027527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.036633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.046444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.056087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.069492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.079978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.100892][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.131008][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.147960][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.161306][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.173479][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.188479][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.199591][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.246749][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.268306][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.287838][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.321379][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.356880][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.364134][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.373340][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.388969][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.401244][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.408466][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.423493][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.432181][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.450783][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.486086][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.504777][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.524971][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.542223][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.581006][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.612875][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.625203][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.644604][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.664831][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.732191][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.741623][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.756097][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.768422][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.782550][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.870817][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.881417][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.949529][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.965082][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.987571][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.017131][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.044632][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.052248][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.075551][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.124738][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.145226][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.174856][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.185086][ T4282] device veth0_vlan entered promiscuous mode [ 84.258225][ T4282] device veth1_vlan entered promiscuous mode [ 84.284874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.299972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.332480][ T4279] device veth0_vlan entered promiscuous mode [ 84.372242][ T4279] device veth1_vlan entered promiscuous mode [ 84.397275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.407110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.418284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.465736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.478123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.487098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.500205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.509263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.519325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.530900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.546844][ T4279] device veth0_macvtap entered promiscuous mode [ 84.572637][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.586214][ T4282] device veth0_macvtap entered promiscuous mode [ 84.599919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.609955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.619874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.629615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.664229][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 84.664238][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 84.673224][ T4279] device veth1_macvtap entered promiscuous mode [ 84.697879][ T4282] device veth1_macvtap entered promiscuous mode [ 84.745534][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 84.751641][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 84.754712][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 84.786212][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.794932][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.803356][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.811246][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.838060][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.849685][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.875465][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.888984][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.925746][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.935590][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.950234][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.961599][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.979777][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.992025][ T4282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.002531][ T4282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.011832][ T4282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.020934][ T4282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.044093][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.057235][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.073016][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.110205][ T4272] device veth0_vlan entered promiscuous mode [ 85.124235][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.141780][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.163095][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.172772][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.186500][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.197941][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.210090][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.239936][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.252684][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.261198][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.271388][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.344861][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.353662][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.399919][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.412720][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.430381][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.440385][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.451161][ T4272] device veth1_vlan entered promiscuous mode [ 85.575867][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.586024][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.595340][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.603857][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.614671][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.623768][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.634258][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.642356][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.652025][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.660811][ T4271] device veth0_vlan entered promiscuous mode [ 85.689990][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.709065][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.730538][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.739734][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.749678][ T4271] device veth1_vlan entered promiscuous mode [ 85.770175][ T4272] device veth0_macvtap entered promiscuous mode [ 85.786136][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.795399][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.805259][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.813177][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.837063][ T4274] device veth0_vlan entered promiscuous mode [ 85.851269][ T4272] device veth1_macvtap entered promiscuous mode [ 85.857967][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.867067][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.915472][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.925536][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.932561][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.933401][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.945297][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.960960][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.985005][ T4274] device veth1_vlan entered promiscuous mode [ 86.005877][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.016868][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.028513][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.049050][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.065659][ T4271] device veth0_macvtap entered promiscuous mode [ 86.066826][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.091284][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.105529][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.119461][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.130340][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.143390][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.156636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.174862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.185234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.193417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.207176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.259632][ T4271] device veth1_macvtap entered promiscuous mode [ 86.281299][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.303546][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.323712][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.345046][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.358281][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.375989][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.391933][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.407335][ T4274] device veth0_macvtap entered promiscuous mode [ 86.422290][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.464946][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.480686][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.493731][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.508719][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.518751][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.528216][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.730942][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.744716][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 86.751334][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 86.787544][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.825246][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 86.835374][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 86.841494][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 86.877417][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.923709][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.023547][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.115545][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.207120][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.233945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 87.273340][ T4274] device veth1_macvtap entered promiscuous mode [ 87.337316][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.373538][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.446580][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.585893][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.656320][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.729731][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.818192][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.918065][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.044242][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.223037][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.299053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.340962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.494407][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.557685][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.626719][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.659950][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.964927][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 89.650117][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.678581][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.695213][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.711608][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.723056][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.740511][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.751653][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.768270][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.805643][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.859631][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.915815][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.953970][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.974206][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.012130][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.043174][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.071801][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.106339][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.125734][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.157295][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.177369][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.214190][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.236828][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.279660][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.308450][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.332429][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.356392][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.410315][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.444755][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.538018][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.590699][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.593168][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.623628][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.634873][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.687483][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.708643][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.829984][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.860093][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.864950][ T4318] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.892218][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.931637][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.964757][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.982073][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.990889][ T4375] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.063252][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.956077][ T127] cfg80211: failed to load regulatory.db [ 92.073202][ T4318] usb 4-1: not running at top speed; connect to a high speed hub [ 92.088903][ T4318] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 92.106012][ T4318] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 92.115494][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.123847][ T4318] usb 4-1: Product: syz [ 92.129824][ T4318] usb 4-1: Manufacturer: syz [ 92.135277][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.140674][ T4318] usb 4-1: SerialNumber: syz [ 92.183081][ T4318] oti6858 4-1:1.0: oti6858 converter detected [ 92.207892][ T4318] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 92.213671][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.525320][ T4387] autofs4:pid:4387:autofs_fill_super: called with bogus options [ 92.618995][ T4391] FAULT_INJECTION: forcing a failure. [ 92.618995][ T4391] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.654189][ T4391] CPU: 0 PID: 4391 Comm: syz.2.9 Not tainted syzkaller #0 [ 92.661367][ T4391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.671478][ T4391] Call Trace: [ 92.674801][ T4391] [ 92.677777][ T4391] dump_stack_lvl+0x188/0x24e [ 92.682572][ T4391] ? show_regs_print_info+0x12/0x12 [ 92.687856][ T4391] ? load_image+0x410/0x410 [ 92.692444][ T4391] ? __lock_acquire+0x7c40/0x7c40 [ 92.697546][ T4391] should_fail_ex+0x390/0x4c0 [ 92.702315][ T4391] _copy_from_user+0x2c/0x170 [ 92.707041][ T4391] comedi_unlocked_ioctl+0x3e0/0x1240 [ 92.712518][ T4391] ? tomoyo_path_number_perm+0x4fb/0x650 [ 92.718223][ T4391] ? comedi_poll+0x8d0/0x8d0 [ 92.722903][ T4391] ? __fget_files+0x28/0x460 [ 92.727553][ T4391] ? bpf_lsm_file_ioctl+0x5/0x10 [ 92.732536][ T4391] ? security_file_ioctl+0x7c/0xa0 [ 92.737722][ T4391] ? comedi_poll+0x8d0/0x8d0 [ 92.742353][ T4391] __se_sys_ioctl+0xfa/0x170 [ 92.747069][ T4391] do_syscall_64+0x4c/0xa0 [ 92.751513][ T4391] ? clear_bhb_loop+0x60/0xb0 [ 92.756225][ T4391] ? clear_bhb_loop+0x60/0xb0 [ 92.760931][ T4391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.766888][ T4391] RIP: 0033:0x7f65c319e159 [ 92.771336][ T4391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.791008][ T4391] RSP: 002b:00007f65c3f95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.799468][ T4391] RAX: ffffffffffffffda RBX: 00007f65c3425fa0 RCX: 00007f65c319e159 [ 92.807490][ T4391] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000005 [ 92.815495][ T4391] RBP: 00007f65c323506b R08: 0000000000000000 R09: 0000000000000000 [ 92.823495][ T4391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.831526][ T4391] R13: 00007f65c3426038 R14: 00007f65c3425fa0 R15: 00007fff5b132668 [ 92.839560][ T4391] [ 93.460450][ T4399] FAULT_INJECTION: forcing a failure. [ 93.460450][ T4399] name failslab, interval 1, probability 0, space 0, times 1 [ 93.518286][ T4399] CPU: 0 PID: 4399 Comm: syz.1.10 Not tainted syzkaller #0 [ 93.525675][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.535831][ T4399] Call Trace: [ 93.539345][ T4399] [ 93.542331][ T4399] dump_stack_lvl+0x188/0x24e [ 93.547086][ T4399] ? show_regs_print_info+0x12/0x12 [ 93.552346][ T4399] ? load_image+0x410/0x410 [ 93.556930][ T4399] ? __might_sleep+0xd0/0xd0 [ 93.561675][ T4399] ? __lock_acquire+0x7c40/0x7c40 [ 93.566774][ T4399] should_fail_ex+0x390/0x4c0 [ 93.571520][ T4399] should_failslab+0x5/0x20 [ 93.576076][ T4399] slab_pre_alloc_hook+0x59/0x300 [ 93.581158][ T4399] ? __lock_acquire+0x1465/0x7c40 [ 93.586260][ T4399] kmem_cache_alloc_lru+0x49/0x2e0 [ 93.591431][ T4399] ? __d_alloc+0x2e/0x6e0 [ 93.595817][ T4399] __d_alloc+0x2e/0x6e0 [ 93.600027][ T4399] d_alloc_parallel+0xdc/0x1590 [ 93.604965][ T4399] ? __x64_sys_openat+0x135/0x160 [ 93.610050][ T4399] ? do_syscall_64+0x4c/0xa0 [ 93.614836][ T4399] ? memset+0x1e/0x40 [ 93.618885][ T4399] ? lockdep_init_map_type+0x98/0x8d0 [ 93.624318][ T4399] ? lockdep_softirqs_off+0x430/0x430 [ 93.629753][ T4399] ? d_hash_and_lookup+0x1b0/0x1b0 [ 93.634936][ T4399] ? __init_waitqueue_head+0xa4/0x140 [ 93.640392][ T4399] __lookup_slow+0x134/0x3f0 [ 93.645080][ T4399] ? lookup_one_len+0x2d0/0x2d0 [ 93.650006][ T4399] ? down_read+0x1a8/0x2d0 [ 93.654519][ T4399] lookup_slow+0x53/0x70 [ 93.658836][ T4399] link_path_walk+0x976/0xea0 [ 93.663586][ T4399] ? handle_lookup_down+0x130/0x130 [ 93.668833][ T4399] path_openat+0x285/0x2f10 [ 93.673382][ T4399] ? verify_lock_unused+0x140/0x140 [ 93.678599][ T4399] ? do_sys_openat2+0xdd/0x4f0 [ 93.683395][ T4399] ? do_filp_open+0x420/0x420 [ 93.688128][ T4399] do_filp_open+0x1ee/0x420 [ 93.692681][ T4399] ? vfs_tmpfile+0x470/0x470 [ 93.697308][ T4399] ? noop_direct_IO+0x10/0x10 [ 93.702013][ T4399] ? _raw_spin_unlock+0x24/0x40 [ 93.706982][ T4399] ? alloc_fd+0x590/0x640 [ 93.711479][ T4399] do_sys_openat2+0x14b/0x4f0 [ 93.716184][ T4399] ? do_sys_open+0xe0/0xe0 [ 93.720707][ T4399] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.726723][ T4399] ? lock_chain_count+0x20/0x20 [ 93.731602][ T4399] __x64_sys_openat+0x135/0x160 [ 93.736505][ T4399] do_syscall_64+0x4c/0xa0 [ 93.740940][ T4399] ? clear_bhb_loop+0x60/0xb0 [ 93.745668][ T4399] ? clear_bhb_loop+0x60/0xb0 [ 93.750363][ T4399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.756470][ T4399] RIP: 0033:0x7f6d1435e98e [ 93.760921][ T4399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 93.780561][ T4399] RSP: 002b:00007f6d1529fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 93.789019][ T4399] RAX: ffffffffffffffda RBX: 00007f6d152a06c0 RCX: 00007f6d1435e98e [ 93.797048][ T4399] RDX: 0000000000000002 RSI: 00007f6d1529ff90 RDI: ffffffffffffff9c [ 93.805062][ T4399] RBP: 00007f6d1443506b R08: 0000000000000000 R09: 0000000000000000 [ 93.813075][ T4399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.821086][ T4399] R13: 00007f6d14626038 R14: 00007f6d14625fa0 R15: 00007fffa2440fa8 [ 93.829111][ T4399] [ 93.993978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 94.023975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 94.165099][ T4404] binder: 4403:4404 ioctl 4018620d 0 returned -22 [ 94.201354][ T4405] jffs2: notice: (4405) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.302489][ T4404] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by ""[4404] [ 94.892347][ T4419] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 94.907097][ T14] usb 4-1: USB disconnect, device number 2 [ 95.023435][ T14] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 95.047815][ T14] oti6858 4-1:1.0: device disconnected [ 95.288898][ T4423] input: syz1 as /devices/virtual/input/input5 [ 95.697135][ T4430] netlink: 64 bytes leftover after parsing attributes in process `syz.1.19'. [ 95.745600][ T4428] device syzkaller0 entered promiscuous mode [ 95.847488][ T4428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.859704][ T4428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.522952][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 96.544239][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.767563][ T4316] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 96.776958][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.076559][ T4316] net1080 3-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 56:88:d5:b6:82:f1 [ 97.222389][ T4441] sctp: failed to load transform for md5: -2 [ 97.552871][ T4355] usb 3-1: USB disconnect, device number 2 [ 97.581174][ T4355] net1080 3-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 98.025581][ T4464] vxcan1: tx drop: invalid da for name 0x0100000000000000 [ 99.705250][ T4483] capability: warning: `syz.3.31' uses deprecated v2 capabilities in a way that may be insecure [ 100.685790][ T4509] netlink: 36 bytes leftover after parsing attributes in process `syz.4.38'. [ 105.102922][ T4584] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 105.109844][ T4584] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 105.163309][ T4584] vhci_hcd vhci_hcd.0: Device attached [ 105.355013][ T26] vhci_hcd: vhci_device speed not set [ 105.424143][ T26] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 105.786827][ T4587] vhci_hcd: connection reset by peer [ 105.795205][ T4532] vhci_hcd: stop threads [ 105.800137][ T4532] vhci_hcd: release socket [ 105.815448][ T4532] vhci_hcd: disconnect device [ 106.960852][ T4631] FAULT_INJECTION: forcing a failure. [ 106.960852][ T4631] name failslab, interval 1, probability 0, space 0, times 0 [ 107.010536][ T4631] CPU: 0 PID: 4631 Comm: syz.2.74 Not tainted syzkaller #0 [ 107.017862][ T4631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.027971][ T4631] Call Trace: [ 107.031295][ T4631] [ 107.034271][ T4631] dump_stack_lvl+0x188/0x24e [ 107.039014][ T4631] ? show_regs_print_info+0x12/0x12 [ 107.044269][ T4631] ? load_image+0x410/0x410 [ 107.048836][ T4631] ? __might_sleep+0xd0/0xd0 [ 107.053487][ T4631] ? __lock_acquire+0x7c40/0x7c40 [ 107.058604][ T4631] should_fail_ex+0x390/0x4c0 [ 107.063357][ T4631] should_failslab+0x5/0x20 [ 107.067919][ T4631] slab_pre_alloc_hook+0x59/0x300 [ 107.073011][ T4631] kmem_cache_alloc+0x56/0x2f0 [ 107.077835][ T4631] ? __alloc_file+0x25/0x230 [ 107.082487][ T4631] __alloc_file+0x25/0x230 [ 107.086964][ T4631] alloc_empty_file+0x90/0x180 [ 107.091780][ T4631] alloc_file+0x5b/0x5f0 [ 107.096083][ T4631] alloc_file_pseudo+0x180/0x200 [ 107.101078][ T4631] ? alloc_empty_file_noaccount+0x80/0x80 [ 107.106878][ T4631] ? lockdep_init_map_type+0x98/0x8d0 [ 107.112310][ T4631] ? lockdep_softirqs_off+0x430/0x430 [ 107.117748][ T4631] anon_inode_getfile+0xc1/0x1a0 [ 107.122749][ T4631] init_listener+0x27c/0x3e0 [ 107.127402][ T4631] do_seccomp+0x976/0xe00 [ 107.131788][ T4631] ? prctl_set_seccomp+0x60/0x60 [ 107.136788][ T4631] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.142860][ T4631] ? lockdep_hardirqs_on+0x94/0x140 [ 107.148126][ T4631] do_syscall_64+0x4c/0xa0 [ 107.152606][ T4631] ? clear_bhb_loop+0x60/0xb0 [ 107.157328][ T4631] ? clear_bhb_loop+0x60/0xb0 [ 107.162061][ T4631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.168036][ T4631] RIP: 0033:0x7f65c319e159 [ 107.172501][ T4631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.192249][ T4631] RSP: 002b:00007f65c3f95028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 107.200734][ T4631] RAX: ffffffffffffffda RBX: 00007f65c3425fa0 RCX: 00007f65c319e159 [ 107.208761][ T4631] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 107.216780][ T4631] RBP: 00007f65c323506b R08: 0000000000000000 R09: 0000000000000000 [ 107.224803][ T4631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.232820][ T4631] R13: 00007f65c3426038 R14: 00007f65c3425fa0 R15: 00007fff5b132668 [ 107.240866][ T4631] [ 107.325890][ T4321] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.514074][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 107.539232][ T4321] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.558142][ T4321] usb 5-1: config 0 has no interface number 0 [ 107.568556][ T4321] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 107.584096][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.602626][ T4321] usb 5-1: Product: syz [ 107.607451][ T4321] usb 5-1: Manufacturer: syz [ 107.613338][ T4321] usb 5-1: SerialNumber: syz [ 107.632893][ T4321] usb 5-1: config 0 descriptor?? [ 107.653049][ T4321] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 107.674396][ T4321] usb 5-1: selecting invalid altsetting 1 [ 107.680211][ T4321] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 107.748299][ T4321] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 107.774350][ T4321] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 107.794072][ T4321] usb 5-1: media controller created [ 107.830716][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.079884][ T4321] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 108.092850][ T4321] zl10353_read_register: readreg error (reg=127, ret==-71) [ 108.141787][ T4321] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 108.239743][ T4321] usb 5-1: USB disconnect, device number 2 [ 108.245896][ T4653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 108.252459][ T4653] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 108.299969][ T4653] vhci_hcd vhci_hcd.0: Device attached [ 108.460885][ T4654] vhci_hcd: connection closed [ 108.461951][ T4365] vhci_hcd: stop threads [ 108.473714][ T4365] vhci_hcd: release socket [ 108.488143][ T4365] vhci_hcd: disconnect device [ 108.494405][ T4316] vhci_hcd: vhci_device speed not set [ 109.742022][ T4697] device syzkaller0 entered promiscuous mode [ 110.592315][ T26] vhci_hcd: vhci_device speed not set [ 111.461521][ T4725] ======================================================= [ 111.461521][ T4725] WARNING: The mand mount option has been deprecated and [ 111.461521][ T4725] and is ignored by this kernel. Remove the mand [ 111.461521][ T4725] option from the mount to silence this warning. [ 111.461521][ T4725] ======================================================= [ 111.510218][ T4725] overlayfs: unrecognized mount option "/" or missing value [ 111.534536][ T27] audit: type=1326 audit(1789846900.754:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0e419e159 code=0x0 [ 111.575424][ T4729] device syzkaller0 entered promiscuous mode [ 112.379844][ T4751] 9pnet_virtio: no channels available for device syz [ 112.724735][ T4761] Zero length message leads to an empty skb [ 112.766855][ T4763] device syzkaller0 entered promiscuous mode [ 112.991850][ T4769] input: syz1 as /devices/virtual/input/input6 [ 113.482412][ T4788] hub 5-0:1.0: USB hub found [ 113.493416][ T4788] hub 5-0:1.0: 1 port detected [ 113.525760][ T4788] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 113.744783][ T4795] device veth0_macvtap left promiscuous mode [ 113.987460][ T4795] syz.3.137 (4795) used greatest stack depth: 20400 bytes left [ 114.764085][ T4318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.032121][ T4318] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.078048][ T4318] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 115.211440][ T4318] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.377799][ T4318] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 115.497559][ T4318] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 115.656985][ T4318] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.677250][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.697957][ T4318] usb 1-1: Product: syz [ 115.728417][ T4318] usb 1-1: Manufacturer: syz [ 115.783650][ T4318] cdc_wdm 1-1:1.0: skipping garbage [ 115.810065][ T4318] cdc_wdm 1-1:1.0: skipping garbage [ 115.849854][ T4318] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 115.872408][ T4318] cdc_wdm 1-1:1.0: Unknown control protocol [ 116.090164][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 116.101777][ T4281] CPU: 1 PID: 4281 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 116.109402][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.119497][ T4281] Workqueue: hci4 hci_rx_work [ 116.124256][ T4281] Call Trace: [ 116.127575][ T4281] [ 116.130551][ T4281] dump_stack_lvl+0x188/0x24e [ 116.135830][ T4281] ? show_regs_print_info+0x12/0x12 [ 116.141065][ T4281] ? load_image+0x410/0x410 [ 116.145616][ T4281] sysfs_create_dir_ns+0x26a/0x290 [ 116.150777][ T4281] ? __lock_acquire+0x7c40/0x7c40 [ 116.155879][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 116.160610][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 116.165849][ T4281] kobject_add_internal+0x617/0xca0 [ 116.171095][ T4281] kobject_add+0x160/0x230 [ 116.175551][ T4281] ? kobject_init+0x1c0/0x1c0 [ 116.180263][ T4281] ? __raw_spin_lock_init+0x41/0x100 [ 116.185619][ T4281] ? klist_children_get+0x50/0x50 [ 116.190677][ T4281] ? get_device_parent+0x121/0x3e0 [ 116.195832][ T4281] device_add+0x470/0x1050 [ 116.200293][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 116.205264][ T4281] le_conn_complete_evt+0xf93/0x15c0 [ 116.210615][ T4281] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 116.216966][ T4281] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 116.222738][ T4281] ? mutex_unlock+0x10/0x10 [ 116.227305][ T4281] ? skb_pull_data+0xec/0x1f0 [ 116.232018][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 116.237610][ T4281] ? hci_remote_host_features_evt+0x230/0x230 [ 116.243861][ T4281] hci_event_packet+0x7b3/0x1290 [ 116.248851][ T4281] ? lock_chain_count+0x20/0x20 [ 116.253735][ T4281] ? bis_list+0x280/0x280 [ 116.258099][ T4281] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 116.264036][ T4281] ? kcov_remote_start+0x50f/0x810 [ 116.269184][ T4281] ? lockdep_hardirqs_on+0x94/0x140 [ 116.274482][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 116.279736][ T4281] hci_rx_work+0x3eb/0xd40 [ 116.284193][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 116.289088][ T4281] ? process_one_work+0x7b4/0x1160 [ 116.294229][ T4281] process_one_work+0x8ab/0x1160 [ 116.299225][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 116.305077][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 116.310141][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 116.315812][ T4281] ? wq_worker_running+0x97/0x190 [ 116.321049][ T4281] worker_thread+0xaf5/0x12a0 [ 116.325804][ T4281] kthread+0x29d/0x330 [ 116.329908][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 116.334973][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 116.339617][ T4281] ret_from_fork+0x1f/0x30 [ 116.344187][ T4281] [ 116.350496][ T4281] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 116.364009][ T4281] Bluetooth: hci4: failed to register connection device [ 116.729149][ T3934] device veth0_macvtap entered promiscuous mode [ 116.786363][ T4846] Set syz1 is full, maxelem 14 reached [ 117.493890][ T26] usb 1-1: USB disconnect, device number 2 [ 117.825231][ T4874] device syzkaller0 entered promiscuous mode [ 118.294180][ T4887] input: syz1 as /devices/virtual/input/input7 [ 118.345223][ T4892] FAULT_INJECTION: forcing a failure. [ 118.345223][ T4892] name failslab, interval 1, probability 0, space 0, times 0 [ 118.388265][ T4892] CPU: 0 PID: 4892 Comm: syz.3.165 Not tainted syzkaller #0 [ 118.395656][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.405793][ T4892] Call Trace: [ 118.409126][ T4892] [ 118.412277][ T4892] dump_stack_lvl+0x188/0x24e [ 118.417071][ T4892] ? show_regs_print_info+0x12/0x12 [ 118.422332][ T4892] ? load_image+0x410/0x410 [ 118.425355][ T4281] Bluetooth: hci4: command 0x2016 tx timeout [ 118.426892][ T4892] ? __might_sleep+0xd0/0xd0 [ 118.426918][ T4892] ? __lock_acquire+0x7c40/0x7c40 [ 118.442714][ T4892] should_fail_ex+0x390/0x4c0 [ 118.447474][ T4892] should_failslab+0x5/0x20 [ 118.452034][ T4892] slab_pre_alloc_hook+0x59/0x300 [ 118.457120][ T4892] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 118.463168][ T4892] ? bpf_int_jit_compile+0x238/0xcbe0 [ 118.468628][ T4892] __kmem_cache_alloc_node+0x4f/0x270 [ 118.474062][ T4892] ? bpf_int_jit_compile+0x238/0xcbe0 [ 118.479484][ T4892] kmalloc_trace+0x26/0xe0 [ 118.483953][ T4892] bpf_int_jit_compile+0x238/0xcbe0 [ 118.489207][ T4892] ? slab_free_freelist_hook+0x133/0x1b0 [ 118.494904][ T4892] ? bpf_convert_filter+0x5067/0x5220 [ 118.500335][ T4892] ? __kmem_cache_free+0xb6/0x200 [ 118.505450][ T4892] ? kasan_set_track+0x60/0x70 [ 118.510299][ T4892] ? emit_bpf_dispatcher+0x1060/0x1060 [ 118.515819][ T4892] ? sk_filter_release_rcu+0x110/0x110 [ 118.521395][ T4892] ? rcu_is_watching+0x11/0xa0 [ 118.526243][ T4892] bpf_prog_select_runtime+0x48b/0x7d0 [ 118.531790][ T4892] ? bpf_prog_realloc+0x142/0x1c0 [ 118.536883][ T4892] bpf_prepare_filter+0x100e/0x11b0 [ 118.542316][ T4892] ? seccomp_notify_detach+0x220/0x220 [ 118.547869][ T4892] ? bpf_prog_create+0x1f0/0x1f0 [ 118.552865][ T4892] ? rcu_is_watching+0x11/0xa0 [ 118.557698][ T4892] ? kmemdup+0x42/0x60 [ 118.561833][ T4892] ? memcpy+0x3c/0x60 [ 118.565924][ T4892] bpf_prog_create_from_user+0x2cc/0x420 [ 118.571660][ T4892] ? seccomp_notify_detach+0x220/0x220 [ 118.577199][ T4892] do_seccomp+0x806/0xe00 [ 118.581626][ T4892] ? prctl_set_seccomp+0x60/0x60 [ 118.586634][ T4892] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 118.592699][ T4892] ? lockdep_hardirqs_on+0x94/0x140 [ 118.597969][ T4892] do_syscall_64+0x4c/0xa0 [ 118.602431][ T4892] ? clear_bhb_loop+0x60/0xb0 [ 118.607153][ T4892] ? clear_bhb_loop+0x60/0xb0 [ 118.611893][ T4892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.617956][ T4892] RIP: 0033:0x7fc0e419e159 [ 118.622616][ T4892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.642420][ T4892] RSP: 002b:00007fc0e4fff028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 118.650889][ T4892] RAX: ffffffffffffffda RBX: 00007fc0e4425fa0 RCX: 00007fc0e419e159 [ 118.659124][ T4892] RDX: 0000200000000240 RSI: 0000000000000008 RDI: 0000000000000001 [ 118.667158][ T4892] RBP: 00007fc0e423506b R08: 0000000000000000 R09: 0000000000000000 [ 118.675201][ T4892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.683227][ T4892] R13: 00007fc0e4426038 R14: 00007fc0e4425fa0 R15: 00007ffe8489b4f8 [ 118.691272][ T4892] [ 119.284002][ T4319] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.487508][ T4319] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.507057][ T4319] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 119.543479][ T4319] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.563161][ T4319] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 119.584294][ T4319] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 119.618367][ T4319] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.648098][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.674216][ T4319] usb 3-1: Product: syz [ 119.685121][ T4319] usb 3-1: Manufacturer: syz [ 119.714093][ T4319] cdc_wdm 3-1:1.0: skipping garbage [ 119.719402][ T4319] cdc_wdm 3-1:1.0: skipping garbage [ 119.742731][ T4319] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 119.769245][ T4319] cdc_wdm 3-1:1.0: Unknown control protocol [ 120.084410][ T4929] autofs4:pid:4929:autofs_fill_super: called with bogus options [ 120.506457][ T4934] Set syz1 is full, maxelem 14 reached [ 121.233973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 122.107923][ T4319] usb 3-1: USB disconnect, device number 3 [ 122.181845][ T4963] netlink: 11 bytes leftover after parsing attributes in process `syz.0.188'. [ 123.489478][ T4319] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.694011][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 123.724110][ T4319] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.768866][ T4319] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 123.780926][ T4319] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 123.811516][ T4319] usb 3-1: config 14 has no interface number 0 [ 123.821641][ T4319] usb 3-1: config 14 has no interface number 1 [ 123.838452][ T4319] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 123.860023][ T4319] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 123.871825][ T4319] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 123.883739][ T4319] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.897951][ T4319] usb 3-1: config 14 interface 57 has no altsetting 0 [ 123.914049][ T4319] usb 3-1: config 14 interface 228 has no altsetting 0 [ 123.962075][ T4319] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 123.972751][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.987608][ T4319] usb 3-1: Product: syz [ 123.991873][ T4319] usb 3-1: Manufacturer: syz [ 123.999621][ T4319] usb 3-1: SerialNumber: syz [ 124.439300][ T4319] legousbtower 3-1:14.57: interrupt endpoints not found [ 124.649969][ T4319] legousbtower 3-1:14.228: interrupt endpoints not found [ 126.958792][ T4355] usb 3-1: USB disconnect, device number 4 [ 127.811219][ T5081] autofs4:pid:5081:autofs_fill_super: called with bogus options [ 127.864156][ T4355] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.072925][ T4355] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.095392][ T4355] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.116614][ T4355] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 128.133990][ T4355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.142155][ T4355] usb 4-1: Product: syz [ 128.164123][ T4355] usb 4-1: Manufacturer: syz [ 128.168824][ T4355] usb 4-1: SerialNumber: syz [ 128.190558][ T4355] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 128.220049][ T4355] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 128.250542][ T4355] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 128.646947][ T5086] device syzkaller0 entered promiscuous mode [ 131.546419][ T5074] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 131.569898][ T5074] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 131.630850][ T26] usb 4-1: USB disconnect, device number 3 [ 131.664107][ T26] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 131.716554][ T26] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 131.748169][ T26] ti_usb_3410_5052 4-1:2.0: device disconnected [ 132.917912][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.924675][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.295723][ T5136] autofs4:pid:5136:autofs_fill_super: called with bogus options [ 133.314012][ T5123] ecryptfs_mount: kern_path() failed [ 133.331341][ T5123] Reading sb failed; rc = [-2] [ 135.751608][ T5196] input: syz1 as /devices/virtual/input/input8 [ 136.639850][ T5211] autofs4:pid:5211:autofs_fill_super: called with bogus options [ 137.235563][ T5223] tipc: Started in network mode [ 137.240546][ T5223] tipc: Node identity 0249276da82a, cluster identity 4711 [ 137.306522][ T5223] tipc: Enabled bearer , priority 0 [ 137.336512][ T5224] device syzkaller0 entered promiscuous mode [ 137.421376][ T5223] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 137.510205][ T5223] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 137.576676][ T5223] tipc: Resetting bearer [ 137.627363][ T5222] tipc: Resetting bearer [ 137.717941][ T5222] tipc: Disabling bearer [ 138.289428][ T5246] netlink: 64 bytes leftover after parsing attributes in process `syz.2.264'. [ 139.337445][ T5259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.267'. [ 139.735967][ T5265] autofs4:pid:5265:autofs_fill_super: called with bogus options [ 140.969602][ T5283] device-mapper: ioctl: name not supplied when creating device [ 141.232478][ T27] audit: type=1326 audit(1789846930.454:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.1.278" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1439e159 code=0x7fc00000 [ 141.748963][ T27] audit: type=1326 audit(1789846930.974:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5282 comm="syz.1.278" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d1439e159 code=0x7fc00000 [ 144.258457][ T5320] Set syz1 is full, maxelem 14 reached [ 144.429293][ T5322] autofs4:pid:5322:autofs_fill_super: called with bogus options [ 147.230421][ T5286] device syzkaller0 entered promiscuous mode [ 147.246998][ T5291] device syzkaller0 entered promiscuous mode [ 149.436894][ T5361] process 'syz.0.301' launched '/dev/fd/10' with NULL argv: empty string added [ 149.665811][ T5363] Need at least one configuration in g1. [ 149.672215][ T5363] udc usbip-vudc.0: failed to start g1: -22 [ 149.793518][ T5363] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 149.855886][ T5363] UDC core: g1: couldn't find an available UDC or it's busy [ 150.454334][ T4318] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 150.676077][ T4318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.776804][ T4318] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.844146][ T4318] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.853408][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.902988][ T4318] usb 4-1: config 0 descriptor?? [ 151.320855][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.449853][ T5386] autofs4:pid:5386:autofs_fill_super: called with bogus options [ 151.525987][ T4318] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.565449][ T4318] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.628574][ T4318] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 151.673205][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.710753][ T4318] usb 1-1: Product: syz [ 151.739681][ T4318] usb 1-1: Manufacturer: syz [ 151.761200][ T4318] usb 1-1: SerialNumber: syz [ 151.804764][ T4318] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 151.870729][ T4318] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 151.913577][ T4318] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 152.131844][ T4316] usb 4-1: USB disconnect, device number 4 [ 152.598639][ T5398] device syzkaller0 entered promiscuous mode [ 154.212323][ T5408] input: syz1 as /devices/virtual/input/input9 [ 154.803665][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 155.293445][ T5437] device syzkaller0 entered promiscuous mode [ 155.527478][ T4281] Bluetooth: Wrong link type (-22) [ 155.546197][ T5379] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 155.684812][ T5379] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 155.716952][ T4321] usb 1-1: USB disconnect, device number 3 [ 155.742975][ T4321] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 155.791289][ T4321] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 155.825513][ T4321] ti_usb_3410_5052 1-1:2.0: device disconnected [ 156.004203][ T4316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 156.196683][ T4316] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.235348][ T4316] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 156.276630][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 156.302626][ T4316] usb 2-1: Product: syz [ 156.317070][ T4316] usb 2-1: Manufacturer: syz [ 156.333728][ T4316] usb 2-1: SerialNumber: syz [ 156.484203][ T5452] input: syz1 as /devices/virtual/input/input10 [ 156.568128][ T4316] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 156.773434][ T26] usb 2-1: USB disconnect, device number 2 [ 156.790442][ T26] usblp0: removed [ 157.004972][ T5459] zram0: detected capacity change from 0 to 8 [ 157.588162][ T5469] device syzkaller0 entered promiscuous mode [ 158.317150][ T5486] input: syz1 as /devices/virtual/input/input11 [ 158.833955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 158.853938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 158.863936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 158.873938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 158.883942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 159.367880][ T5507] device syzkaller0 entered promiscuous mode [ 160.887259][ T26] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 160.900143][ T26] wiimote 0005:057E:0306.0001: New device registered [ 160.924646][ T5532] wiimote 0005:057E:0306.0001: Device removed [ 161.425385][ T5535] fido_id[5535]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.944105][ T26] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 162.082871][ T26] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input13 [ 162.187498][ T26] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input14 [ 162.267342][ T26] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input12 [ 162.614131][ T4316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.804760][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 162.818664][ T4316] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 162.844087][ T4316] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.895208][ T4316] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.905348][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.947920][ T4316] usbtmc 5-1:16.0: bulk endpoints not found [ 163.048124][ T5564] input: syz1 as /devices/virtual/input/input15 [ 163.408969][ T5574] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 163.415811][ T5574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.464168][ T5574] vhci_hcd vhci_hcd.0: Device attached [ 163.714071][ T4355] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 163.754066][ T4319] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 163.926108][ T4355] usb 1-1: config 0 has no interfaces? [ 163.932046][ T4355] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.964083][ T4355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.005030][ T4355] usb 1-1: config 0 descriptor?? [ 164.217428][ T4355] usb 1-1: USB disconnect, device number 4 [ 164.234452][ T5575] usb 33-1: recv xbuf, 0 [ 164.240159][ T11] vhci_hcd: stop threads [ 164.248232][ T11] vhci_hcd: release socket [ 164.261543][ T11] vhci_hcd: disconnect device [ 164.314220][ T4319] vhci_hcd: vhci_device speed not set [ 165.380050][ T4363] usb 5-1: USB disconnect, device number 3 [ 165.675854][ T4355] hid-generic 0000:0000:0000.0002: item fetching failed at offset 1/2 [ 165.691973][ T4355] hid-generic: probe of 0000:0000:0000.0002 failed with error -22 [ 165.768087][ T5608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 165.877261][ T5612] autofs4:pid:5612:autofs_fill_super: called with bogus options [ 166.679509][ T5617] futex_wake_op: syz.0.392 tries to shift op by 144; fix this program [ 166.688667][ T5617] futex_wake_op: syz.0.392 tries to shift op by 144; fix this program [ 168.427536][ T5646] input: syz1 as /devices/virtual/input/input16 [ 168.985174][ T4321] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.136727][ T27] audit: type=1800 audit(1789846959.360:5): pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.404" name="id" dev="configfs" ino=40404 res=0 errno=0 [ 169.199791][ T4321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 169.220025][ T4321] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 169.252260][ T4321] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 169.273831][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.310837][ T4321] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 169.321298][ T5675] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 169.327913][ T5675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 169.341959][ T4321] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 169.443631][ T5675] vhci_hcd vhci_hcd.0: Device attached [ 169.462475][ T5676] vhci_hcd: connection closed [ 169.493069][ T46] vhci_hcd: stop threads [ 169.514020][ T46] vhci_hcd: release socket [ 169.520742][ T46] vhci_hcd: disconnect device [ 169.576500][ T4319] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.698602][ T5652] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 169.712167][ T5690] input: syz1 as /devices/virtual/input/input17 [ 169.723748][ T5652] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 169.742028][ T5652] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 169.767748][ T4319] usb 1-1: Dual-Role OTG device on HNP port [ 169.778174][ T4319] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 169.797663][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.841836][ T4319] gspca_main: spca501-2.14.0 probing 0000:0000 [ 169.875042][ T4319] gspca_spca501: reg write: error -32 [ 169.880501][ T4319] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 169.895305][ T5651] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 169.905145][ T26] usb 4-1: USB disconnect, device number 5 [ 169.912374][ T4319] spca501: probe of 1-1:1.0 failed with error -22 [ 169.935952][ T26] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 169.980614][ T26] spcp8x5 4-1:1.0: device disconnected [ 170.750883][ T5715] FAULT_INJECTION: forcing a failure. [ 170.750883][ T5715] name failslab, interval 1, probability 0, space 0, times 0 [ 170.803129][ T5715] CPU: 1 PID: 5715 Comm: syz.4.424 Not tainted syzkaller #0 [ 170.810522][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.820649][ T5715] Call Trace: [ 170.823992][ T5715] [ 170.826980][ T5715] dump_stack_lvl+0x188/0x24e [ 170.831738][ T5715] ? show_regs_print_info+0x12/0x12 [ 170.837019][ T5715] ? load_image+0x410/0x410 [ 170.841612][ T5715] ? __might_sleep+0xd0/0xd0 [ 170.846314][ T5715] ? __lock_acquire+0x7c40/0x7c40 [ 170.851470][ T5715] should_fail_ex+0x390/0x4c0 [ 170.856229][ T5715] should_failslab+0x5/0x20 [ 170.860827][ T5715] slab_pre_alloc_hook+0x59/0x300 [ 170.865945][ T5715] ? do_filp_open+0x1ee/0x420 [ 170.870733][ T5715] ? do_sys_openat2+0x14b/0x4f0 [ 170.875671][ T5715] ? __x64_sys_openat+0x135/0x160 [ 170.880819][ T5715] kmem_cache_alloc+0x56/0x2f0 [ 170.885649][ T5715] ? fuse_get_req+0x457/0xb20 [ 170.890416][ T5715] fuse_get_req+0x457/0xb20 [ 170.894999][ T5715] ? fuse_simple_request+0x1c00/0x1c00 [ 170.900550][ T5715] fuse_simple_background+0x205/0x890 [ 170.906005][ T5715] cuse_channel_open+0x42b/0x640 [ 170.911020][ T5715] ? fuse_dax_writepages+0xe0/0xe0 [ 170.916206][ T5715] misc_open+0x31f/0x390 [ 170.920532][ T5715] chrdev_open+0x585/0x5f0 [ 170.925020][ T5715] ? cd_forget+0x160/0x160 [ 170.929520][ T5715] ? fsnotify_perm+0x39b/0x550 [ 170.934360][ T5715] ? cd_forget+0x160/0x160 [ 170.938850][ T5715] do_dentry_open+0x7dd/0x10b0 [ 170.943711][ T5715] path_openat+0x2674/0x2f10 [ 170.948368][ T5715] ? verify_lock_unused+0x140/0x140 [ 170.953631][ T5715] ? do_filp_open+0x420/0x420 [ 170.958390][ T5715] do_filp_open+0x1ee/0x420 [ 170.962939][ T5715] ? vfs_tmpfile+0x470/0x470 [ 170.967607][ T5715] ? _raw_spin_unlock+0x24/0x40 [ 170.972555][ T5715] ? alloc_fd+0x590/0x640 [ 170.976988][ T5715] do_sys_openat2+0x14b/0x4f0 [ 170.981750][ T5715] ? do_sys_open+0xe0/0xe0 [ 170.986243][ T5715] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 170.992295][ T5715] ? lock_chain_count+0x20/0x20 [ 170.997225][ T5715] __x64_sys_openat+0x135/0x160 [ 171.002241][ T5715] do_syscall_64+0x4c/0xa0 [ 171.006730][ T5715] ? clear_bhb_loop+0x60/0xb0 [ 171.011527][ T5715] ? clear_bhb_loop+0x60/0xb0 [ 171.016282][ T5715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.022267][ T5715] RIP: 0033:0x7f329599e159 [ 171.026807][ T5715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.046477][ T5715] RSP: 002b:00007f32967ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.054952][ T5715] RAX: ffffffffffffffda RBX: 00007f3295c25fa0 RCX: 00007f329599e159 [ 171.062980][ T5715] RDX: 0000000000002842 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 171.071117][ T5715] RBP: 00007f3295a3506b R08: 0000000000000000 R09: 0000000000000000 [ 171.079209][ T5715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.087271][ T5715] R13: 00007f3295c26038 R14: 00007f3295c25fa0 R15: 00007ffec50c77e8 [ 171.095321][ T5715] [ 171.251232][ T5724] input: syz1 as /devices/virtual/input/input18 [ 172.023926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 172.556575][ T5767] input: syz1 as /devices/virtual/input/input20 [ 172.753462][ T4281] Bluetooth: latency 65520 > 499 [ 173.074102][ T4319] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.265702][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.287958][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.317273][ T4319] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.337974][ T4319] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.393230][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.419552][ T4319] usb 3-1: config 0 descriptor?? [ 173.481830][ T5791] 9pnet_virtio: no channels available for device syz [ 173.896715][ T4319] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 173.936054][ T5800] autofs4:pid:5800:autofs_fill_super: called with bogus options [ 173.976174][ T4319] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 174.379971][ T5810] input: syz1 as /devices/virtual/input/input21 [ 174.697538][ T5818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.458'. [ 174.824202][ T4281] Bluetooth: hci4: command 0x2021 tx timeout [ 174.881239][ T5821] FAULT_INJECTION: forcing a failure. [ 174.881239][ T5821] name failslab, interval 1, probability 0, space 0, times 0 [ 174.958057][ T5821] CPU: 1 PID: 5821 Comm: syz.3.460 Not tainted syzkaller #0 [ 174.965462][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.975589][ T5821] Call Trace: [ 174.978937][ T5821] [ 174.981955][ T5821] dump_stack_lvl+0x188/0x24e [ 174.986719][ T5821] ? show_regs_print_info+0x12/0x12 [ 174.992001][ T5821] ? load_image+0x410/0x410 [ 174.996613][ T5821] ? __lock_acquire+0x7c40/0x7c40 [ 175.001734][ T5821] should_fail_ex+0x390/0x4c0 [ 175.006500][ T5821] should_failslab+0x5/0x20 [ 175.011076][ T5821] slab_pre_alloc_hook+0x59/0x300 [ 175.016222][ T5821] ? lockdep_init_map_type+0x98/0x8d0 [ 175.021684][ T5821] kmem_cache_alloc_lru+0x49/0x2e0 [ 175.026877][ T5821] ? bdev_alloc_inode+0x24/0x60 [ 175.031866][ T5821] ? _raw_spin_unlock+0x40/0x40 [ 175.036817][ T5821] bdev_alloc_inode+0x24/0x60 [ 175.041616][ T5821] ? bd_init_fs_context+0xa0/0xa0 [ 175.046724][ T5821] new_inode_pseudo+0x5f/0x1c0 [ 175.051586][ T5821] new_inode+0x25/0x1d0 [ 175.055812][ T5821] ? init_timer_key+0x178/0x320 [ 175.060779][ T5821] bdev_alloc+0x20/0x270 [ 175.065108][ T5821] __alloc_disk_node+0x127/0x570 [ 175.070246][ T5821] __blk_alloc_disk+0x2c/0x80 [ 175.075018][ T5821] dm_create+0x46b/0xf90 [ 175.079357][ T5821] dev_create+0x12e/0x2c0 [ 175.083774][ T5821] ? list_devices+0x820/0x820 [ 175.088545][ T5821] ? __might_fault+0xc2/0x120 [ 175.093294][ T5821] ? __might_fault+0xa6/0x120 [ 175.098053][ T5821] dm_ctl_ioctl+0xa9c/0xec0 [ 175.102649][ T5821] ? list_devices+0x820/0x820 [ 175.107425][ T5821] ? dm_poll+0x120/0x120 [ 175.111957][ T5821] ? bpf_lsm_file_ioctl+0x5/0x10 [ 175.117001][ T5821] ? security_file_ioctl+0x7c/0xa0 [ 175.122452][ T5821] ? dm_poll+0x120/0x120 [ 175.126772][ T5821] __se_sys_ioctl+0xfa/0x170 [ 175.131466][ T5821] do_syscall_64+0x4c/0xa0 [ 175.135955][ T5821] ? clear_bhb_loop+0x60/0xb0 [ 175.140889][ T5821] ? clear_bhb_loop+0x60/0xb0 [ 175.145747][ T5821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.151775][ T5821] RIP: 0033:0x7fc0e419e159 [ 175.156268][ T5821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.176033][ T5821] RSP: 002b:00007fc0e4fff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.184551][ T5821] RAX: ffffffffffffffda RBX: 00007fc0e4425fa0 RCX: 00007fc0e419e159 [ 175.192603][ T5821] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 175.200733][ T5821] RBP: 00007fc0e423506b R08: 0000000000000000 R09: 0000000000000000 [ 175.208863][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.217602][ T5821] R13: 00007fc0e4426038 R14: 00007fc0e4425fa0 R15: 00007ffe8489b4f8 [ 175.225656][ T5821] [ 175.228879][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.959462][ T5844] input: syz1 as /devices/virtual/input/input22 [ 175.989092][ T127] usb 3-1: USB disconnect, device number 5 [ 176.067632][ T5846] jffs2: notice: (5846) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 176.159222][ T5851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.471'. [ 176.339979][ T5857] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 176.346587][ T5857] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.381627][ T5861] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 176.388250][ T5861] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.402566][ T5857] vhci_hcd vhci_hcd.0: Device attached [ 176.480415][ T5861] vhci_hcd vhci_hcd.0: Device attached [ 176.510407][ T5857] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(6) [ 176.517057][ T5857] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.672197][ T5857] vhci_hcd vhci_hcd.0: Device attached [ 176.681803][ T26] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 176.729365][ T5861] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 176.735982][ T5861] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.882201][ T5857] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(11) [ 176.888902][ T5857] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.976879][ T5871] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(17) [ 176.983593][ T5871] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.995810][ T5886] device syzkaller0 entered promiscuous mode [ 177.074910][ T5853] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(14) [ 177.081603][ T5853] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.237067][ T5861] vhci_hcd vhci_hcd.0: Device attached [ 177.284231][ T5857] vhci_hcd vhci_hcd.0: Device attached [ 177.303547][ T5853] vhci_hcd vhci_hcd.0: Device attached [ 177.331216][ T5893] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 177.343109][ T5871] vhci_hcd vhci_hcd.0: Device attached [ 177.536419][ T5883] vhci_hcd: connection closed [ 177.537819][ T5876] vhci_hcd: connection closed [ 177.542951][ T46] vhci_hcd: stop threads [ 177.546697][ T5865] vhci_hcd: connection closed [ 177.548168][ T5872] vhci_hcd: connection closed [ 177.557100][ T5862] vhci_hcd: connection closed [ 177.559421][ T5858] vhci_hcd: connection reset by peer [ 177.561822][ T5874] vhci_hcd: connection closed [ 177.573993][ T46] vhci_hcd: release socket [ 177.609554][ T46] vhci_hcd: disconnect device [ 177.653793][ T46] vhci_hcd: stop threads [ 177.679408][ T46] vhci_hcd: release socket [ 177.684304][ T46] vhci_hcd: disconnect device [ 177.689869][ T46] vhci_hcd: stop threads [ 177.772928][ T46] vhci_hcd: release socket [ 177.778485][ T46] vhci_hcd: disconnect device [ 177.798035][ T46] vhci_hcd: stop threads [ 177.802368][ T46] vhci_hcd: release socket [ 177.849260][ T46] vhci_hcd: disconnect device [ 177.889893][ T46] vhci_hcd: stop threads [ 177.916710][ T46] vhci_hcd: release socket [ 177.947613][ T46] vhci_hcd: disconnect device [ 177.957852][ T46] vhci_hcd: stop threads [ 177.962839][ T46] vhci_hcd: release socket [ 177.971331][ T46] vhci_hcd: disconnect device [ 177.996607][ T46] vhci_hcd: stop threads [ 178.009924][ T46] vhci_hcd: release socket [ 178.023788][ T46] vhci_hcd: disconnect device [ 178.375123][ T5911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.485'. [ 178.476403][ T5910] device syzkaller0 entered promiscuous mode [ 178.618443][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 178.706257][ T5913] block2mtd: erasesize must be a divisor of device size [ 179.162722][ T5925] autofs4:pid:5925:autofs_fill_super: called with bogus options [ 181.786328][ T26] vhci_hcd: vhci_device speed not set [ 182.182453][ T5950] netlink: 44 bytes leftover after parsing attributes in process `syz.1.498'. [ 182.426364][ T5965] input: syz1 as /devices/virtual/input/input23 [ 182.574469][ T5970] autofs4:pid:5970:autofs_fill_super: called with bogus options [ 183.106219][ T5987] netlink: 5 bytes leftover after parsing attributes in process `syz.3.511'. [ 183.343840][ T5995] device syzkaller0 entered promiscuous mode [ 183.504308][ T4363] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 183.573553][ T6000] input: syz1 as /devices/virtual/input/input24 [ 183.694617][ T4363] usb 5-1: Using ep0 maxpacket: 16 [ 183.733488][ T4363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 183.766557][ T4363] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 183.819093][ T4363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.850530][ T4363] usb 5-1: Product: syz [ 183.874973][ T4363] usb 5-1: Manufacturer: syz [ 183.879977][ T4363] usb 5-1: SerialNumber: syz [ 183.926461][ T4363] usb 5-1: config 0 descriptor?? [ 183.959524][ T4363] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 183.979289][ T4363] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 184.227610][ T6009] Bluetooth: MGMT ver 1.22 [ 184.360893][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.377245][ T6017] autofs4:pid:6017:autofs_fill_super: called with bogus options [ 184.386969][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.407948][ T6018] FAULT_INJECTION: forcing a failure. [ 184.407948][ T6018] name fail_futex, interval 1, probability 0, space 0, times 1 [ 184.424470][ T6018] CPU: 1 PID: 6018 Comm: syz.2.523 Not tainted syzkaller #0 [ 184.431848][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.441953][ T6018] Call Trace: [ 184.445279][ T6018] [ 184.448267][ T6018] dump_stack_lvl+0x188/0x24e [ 184.453014][ T6018] ? show_regs_print_info+0x12/0x12 [ 184.458287][ T6018] ? load_image+0x410/0x410 [ 184.462852][ T6018] ? stack_trace_save+0xa6/0xf0 [ 184.467768][ T6018] ? __stack_depot_save+0x35/0x480 [ 184.472958][ T6018] should_fail_ex+0x390/0x4c0 [ 184.477719][ T6018] get_futex_key+0x1b1/0x1000 [ 184.482461][ T6018] ? futex_setup_timer+0xc0/0xc0 [ 184.487464][ T6018] futex_wake+0x123/0x4f0 [ 184.491930][ T6018] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 184.497966][ T6018] ? futex_wake_mark+0x150/0x150 [ 184.502984][ T6018] ? lockdep_hardirqs_on+0x94/0x140 [ 184.508232][ T6018] do_futex+0x2e2/0x320 [ 184.512444][ T6018] ? __ia32_sys_get_robust_list+0x100/0x100 [ 184.518403][ T6018] __se_sys_futex+0x381/0x410 [ 184.523140][ T6018] ? __x64_sys_futex+0xf0/0xf0 [ 184.527946][ T6018] ? __x64_sys_futex+0x1d/0xf0 [ 184.532746][ T6018] do_syscall_64+0x4c/0xa0 [ 184.537198][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 184.541906][ T6018] ? clear_bhb_loop+0x60/0xb0 [ 184.546617][ T6018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.552556][ T6018] RIP: 0033:0x7f65c319e159 [ 184.556999][ T6018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.576636][ T6018] RSP: 002b:00007f65c3f950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 184.585077][ T6018] RAX: ffffffffffffffda RBX: 00007f65c3425fa8 RCX: 00007f65c319e159 [ 184.593088][ T6018] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f65c3425fac [ 184.601095][ T6018] RBP: 00007f65c3425fa0 R08: 00146ac4f41976b8 R09: 0000000000000000 [ 184.609114][ T6018] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 184.617119][ T6018] R13: 00007f65c3426038 R14: 00007fff5b132580 R15: 00007fff5b132668 [ 184.625139][ T6018] [ 184.638837][ T4363] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 185.062979][ T4363] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 185.101628][ T4363] em28xx 5-1:0.0: board has no eeprom [ 185.194009][ T4363] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 185.206481][ T4363] em28xx 5-1:0.0: dvb set to bulk mode. [ 185.225273][ T26] em28xx 5-1:0.0: Binding DVB extension [ 185.274974][ T4363] usb 5-1: USB disconnect, device number 4 [ 185.281561][ T4363] em28xx 5-1:0.0: Disconnecting em28xx [ 185.490707][ T26] em28xx 5-1:0.0: Registering input extension [ 185.519768][ T4363] em28xx 5-1:0.0: Closing input extension [ 185.612841][ T4363] em28xx 5-1:0.0: Freeing device [ 185.913773][ T6059] autofs4:pid:6059:autofs_fill_super: called with bogus options [ 187.419118][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.448315][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.528912][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 187.600014][ T6057] futex_wake_op: syz.1.536 tries to shift op by 144; fix this program [ 187.612157][ T6057] futex_wake_op: syz.1.536 tries to shift op by 144; fix this program [ 187.706037][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.716452][ T26] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.730747][ T26] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 187.741989][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.768115][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 187.777822][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 187.789384][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 187.819636][ T6090] loop0: detected capacity change from 0 to 32768 [ 187.829614][ T26] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.857182][ T26] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.881475][ T26] usb 5-1: Product: syz [ 187.894064][ T26] usb 5-1: Manufacturer: syz [ 187.922046][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 187.946043][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 187.985290][ T26] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 187.991292][ T26] cdc_wdm 5-1:1.0: Unknown control protocol [ 188.257788][ T6100] autofs4:pid:6100:autofs_fill_super: called with bogus options [ 188.378887][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 188.385631][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 188.392427][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 188.398844][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 188.405480][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 188.412504][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 188.419143][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 188.425581][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 188.432309][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 188.444735][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 188.451390][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 188.464189][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 188.470906][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 188.481208][ T26] usb 5-1: USB disconnect, device number 5 [ 189.019190][ T6118] ecryptfs_mount: kern_path() failed [ 189.039838][ T6118] Reading sb failed; rc = [-2] [ 189.295691][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 189.488579][ T6128] FAULT_INJECTION: forcing a failure. [ 189.488579][ T6128] name failslab, interval 1, probability 0, space 0, times 0 [ 189.539098][ T6128] CPU: 0 PID: 6128 Comm: syz.4.561 Not tainted syzkaller #0 [ 189.546501][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.556616][ T6128] Call Trace: [ 189.559938][ T6128] [ 189.562912][ T6128] dump_stack_lvl+0x188/0x24e [ 189.568165][ T6128] ? show_regs_print_info+0x12/0x12 [ 189.573418][ T6128] ? load_image+0x410/0x410 [ 189.577995][ T6128] ? __lock_acquire+0x7c40/0x7c40 [ 189.583092][ T6128] should_fail_ex+0x390/0x4c0 [ 189.587866][ T6128] should_failslab+0x5/0x20 [ 189.592419][ T6128] slab_pre_alloc_hook+0x59/0x300 [ 189.597511][ T6128] ? lockdep_init_map_type+0x98/0x8d0 [ 189.602951][ T6128] kmem_cache_alloc_lru+0x49/0x2e0 [ 189.608121][ T6128] ? bdev_alloc_inode+0x24/0x60 [ 189.613037][ T6128] ? _raw_spin_unlock+0x40/0x40 [ 189.618008][ T6128] bdev_alloc_inode+0x24/0x60 [ 189.622748][ T6128] ? bd_init_fs_context+0xa0/0xa0 [ 189.627820][ T6128] new_inode_pseudo+0x5f/0x1c0 [ 189.632635][ T6128] new_inode+0x25/0x1d0 [ 189.636829][ T6128] ? init_timer_key+0x178/0x320 [ 189.641753][ T6128] bdev_alloc+0x20/0x270 [ 189.646044][ T6128] __alloc_disk_node+0x127/0x570 [ 189.651129][ T6128] __blk_alloc_disk+0x2c/0x80 [ 189.655857][ T6128] dm_create+0x46b/0xf90 [ 189.660237][ T6128] dev_create+0x12e/0x2c0 [ 189.664609][ T6128] ? list_devices+0x820/0x820 [ 189.669325][ T6128] ? __might_fault+0xc2/0x120 [ 189.674033][ T6128] ? __might_fault+0xa6/0x120 [ 189.678770][ T6128] dm_ctl_ioctl+0xa9c/0xec0 [ 189.683333][ T6128] ? list_devices+0x820/0x820 [ 189.688073][ T6128] ? dm_poll+0x120/0x120 [ 189.692384][ T6128] ? bpf_lsm_file_ioctl+0x5/0x10 [ 189.697366][ T6128] ? security_file_ioctl+0x7c/0xa0 [ 189.702606][ T6128] ? dm_poll+0x120/0x120 [ 189.706892][ T6128] __se_sys_ioctl+0xfa/0x170 [ 189.711535][ T6128] do_syscall_64+0x4c/0xa0 [ 189.716081][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 189.720798][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 189.725517][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.731462][ T6128] RIP: 0033:0x7f329599e159 [ 189.735918][ T6128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.755569][ T6128] RSP: 002b:00007f32967ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.764107][ T6128] RAX: ffffffffffffffda RBX: 00007f3295c25fa0 RCX: 00007f329599e159 [ 189.772143][ T6128] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 189.780172][ T6128] RBP: 00007f3295a3506b R08: 0000000000000000 R09: 0000000000000000 [ 189.788298][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.796305][ T6128] R13: 00007f3295c26038 R14: 00007f3295c25fa0 R15: 00007ffec50c77e8 [ 189.804322][ T6128] [ 189.974008][ T4319] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.176061][ T4319] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.192886][ T4319] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 190.210105][ T4319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.229540][ T4319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 190.253970][ T4319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 190.286625][ T4319] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.303932][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.312098][ T4319] usb 4-1: Product: syz [ 190.333955][ T4319] usb 4-1: Manufacturer: syz [ 190.342534][ T4319] cdc_wdm 4-1:1.0: skipping garbage [ 190.354076][ T4319] cdc_wdm 4-1:1.0: skipping garbage [ 190.358781][ T4316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 190.385446][ T4319] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 190.392542][ T4319] cdc_wdm 4-1:1.0: Unknown control protocol [ 190.567574][ T4316] usb 2-1: Using ep0 maxpacket: 16 [ 190.578763][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 190.641681][ T4316] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.681745][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.717303][ T4316] usb 2-1: Product: syz [ 190.721665][ T4316] usb 2-1: Manufacturer: syz [ 190.757313][ T4316] usb 2-1: SerialNumber: syz [ 190.778953][ T4316] usb 2-1: config 0 descriptor?? [ 190.798358][ T4316] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.801842][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 190.813391][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 190.819381][ T4316] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 190.826137][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 190.827702][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 190.839116][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 190.845485][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 190.852157][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 190.859048][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 190.865728][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 190.875045][ T4319] usb 4-1: USB disconnect, device number 6 [ 190.895842][ T6146] fuse: Bad value for 'fd' [ 191.268332][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 191.401663][ T4316] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 191.819236][ T4316] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 191.854027][ T4316] em28xx 2-1:0.0: board has no eeprom [ 191.944238][ T4316] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 191.962761][ T4316] em28xx 2-1:0.0: dvb set to bulk mode. [ 192.014564][ T26] em28xx 2-1:0.0: Binding DVB extension [ 192.241433][ T4316] usb 2-1: USB disconnect, device number 3 [ 195.436003][ T4316] em28xx 2-1:0.0: Disconnecting em28xx [ 195.442084][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.448546][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.300866][ T6180] fuse: Bad value for 'fd' [ 196.336104][ T26] em28xx 2-1:0.0: Registering input extension [ 196.342448][ T4316] em28xx 2-1:0.0: Closing input extension [ 196.414601][ T4316] em28xx 2-1:0.0: Freeing device [ 196.973631][ T27] audit: type=1326 audit(1789846988.188:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.1.585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1439e159 code=0x7ffc0000 [ 197.305262][ T27] audit: type=1326 audit(1789846988.218:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.1.585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1439e159 code=0x7ffc0000 [ 197.654383][ T4319] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 197.813456][ T27] audit: type=1326 audit(1789846988.578:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.1.585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f6d1439e159 code=0x7ffc0000 [ 197.932698][ T4319] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.991452][ T4319] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 198.112433][ T4319] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.167184][ T27] audit: type=1326 audit(1789846988.578:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.1.585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1439e159 code=0x7ffc0000 [ 198.247486][ T4319] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 198.372016][ T4319] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 198.466588][ T27] audit: type=1326 audit(1789846988.588:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.1.585" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1439e159 code=0x7ffc0000 [ 198.550768][ T4319] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.632191][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.699427][ T4319] usb 3-1: Product: syz [ 198.727494][ T4319] usb 3-1: Manufacturer: syz [ 198.929707][ T4319] cdc_wdm 3-1:1.0: skipping garbage [ 199.022398][ T4319] cdc_wdm 3-1:1.0: skipping garbage [ 199.174551][ T4319] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 199.276389][ T4319] cdc_wdm 3-1:1.0: Unknown control protocol [ 199.501142][ T4319] usb 3-1: USB disconnect, device number 6 [ 200.389337][ T4319] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 200.653115][ T4319] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.680563][ T4319] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.696972][ T4319] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 200.716149][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.725365][ T4319] usb 5-1: Product: syz [ 200.729773][ T4319] usb 5-1: Manufacturer: syz [ 200.735238][ T4319] usb 5-1: SerialNumber: syz [ 200.750730][ T4319] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 200.774930][ T4319] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 200.815311][ T4319] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 201.337973][ T4281] Bluetooth: Wrong link type (-22) [ 201.544145][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 201.554341][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 201.560595][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 201.624503][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 201.630674][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 201.754154][ T4316] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 201.766544][ T6248] 9pnet_virtio: no channels available for device syz [ 202.715777][ T4316] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.734340][ T4316] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 202.753329][ T4316] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.773152][ T4316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 202.804020][ T4316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 202.841293][ T4316] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.865074][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.884771][ T4316] usb 2-1: Product: syz [ 202.889166][ T4316] usb 2-1: Manufacturer: syz [ 202.911599][ T4316] cdc_wdm 2-1:1.0: skipping garbage [ 202.925881][ T4316] cdc_wdm 2-1:1.0: skipping garbage [ 202.955001][ T4316] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 202.961087][ T4316] cdc_wdm 2-1:1.0: Unknown control protocol [ 203.367088][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 203.372901][ C1] wdm_int_callback: 2 callbacks suppressed [ 203.372919][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 203.385575][ C1] wdm_int_callback: 2 callbacks suppressed [ 203.385593][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 203.398597][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 203.405269][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 203.414179][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 203.420856][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 203.434364][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 203.441061][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 203.448078][ T4316] usb 2-1: USB disconnect, device number 4 [ 204.238319][ T4284] Bluetooth: Wrong link type (-22) [ 204.271863][ T6208] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 204.409867][ T6208] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 204.485594][ T4319] usb 5-1: USB disconnect, device number 6 [ 204.510483][ T4319] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 204.545012][ T6286] input: syz1 as /devices/virtual/input/input27 [ 204.566163][ T4319] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 204.622386][ T4319] ti_usb_3410_5052 5-1:2.0: device disconnected [ 204.952599][ T6299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.631'. [ 205.834578][ T4363] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 206.072961][ T4363] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 206.130156][ T4363] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 206.236049][ T4363] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 206.355453][ T4363] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 206.507336][ T4363] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 206.686088][ T4363] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 206.803613][ T4363] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 206.899619][ T4363] usb 2-1: Product: syz [ 206.955378][ T4363] usb 2-1: Manufacturer: syz [ 207.157592][ T4363] cdc_wdm 2-1:1.0: skipping garbage [ 207.201508][ T4363] cdc_wdm 2-1:1.0: skipping garbage [ 207.310121][ T4363] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 207.374455][ T4363] cdc_wdm 2-1:1.0: Unknown control protocol [ 207.537684][ T4363] usb 2-1: USB disconnect, device number 5 [ 208.570944][ T6330] input: syz1 as /devices/virtual/input/input28 [ 208.620820][ T6327] comedi comedi0: Minor 3 could not be opened [ 208.771662][ T6332] zram: Can't change algorithm for initialized device [ 208.814876][ T6332] zram: Cannot change disksize for initialized device [ 208.868024][ T4284] Bluetooth: Wrong link type (-22) [ 208.895993][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 212.813171][ T6362] device bridge1 entered promiscuous mode [ 212.848612][ T6362] team0: Port device bridge1 added [ 212.959278][ T6366] bridge0: port 3(team0) entered blocking state [ 213.015933][ T6366] bridge0: port 3(team0) entered disabled state [ 213.057652][ T6366] device team0 entered promiscuous mode [ 213.103380][ T6366] device team_slave_0 entered promiscuous mode [ 213.157842][ T6366] device team_slave_1 entered promiscuous mode [ 213.224767][ T6366] bridge0: port 3(team0) entered blocking state [ 213.231617][ T6366] bridge0: port 3(team0) entered forwarding state [ 213.321511][ T6377] FAULT_INJECTION: forcing a failure. [ 213.321511][ T6377] name failslab, interval 1, probability 0, space 0, times 0 [ 213.381841][ T6377] CPU: 0 PID: 6377 Comm: syz.3.658 Not tainted syzkaller #0 [ 213.389337][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.399450][ T6377] Call Trace: [ 213.402782][ T6377] [ 213.405761][ T6377] dump_stack_lvl+0x188/0x24e [ 213.410511][ T6377] ? show_regs_print_info+0x12/0x12 [ 213.415805][ T6377] ? load_image+0x410/0x410 [ 213.420380][ T6377] ? __might_sleep+0xd0/0xd0 [ 213.425030][ T6377] ? __lock_acquire+0x7c40/0x7c40 [ 213.430132][ T6377] should_fail_ex+0x390/0x4c0 [ 213.434969][ T6377] should_failslab+0x5/0x20 [ 213.439889][ T6377] slab_pre_alloc_hook+0x59/0x300 [ 213.445011][ T6377] ? _raw_spin_unlock_irq+0x1f/0x40 [ 213.450288][ T6377] ? blk_throtl_init+0x8f/0x480 [ 213.455225][ T6377] __kmem_cache_alloc_node+0x4f/0x270 [ 213.460657][ T6377] ? blkcg_activate_policy+0x6a6/0xa10 [ 213.466191][ T6377] ? blk_throtl_init+0x8f/0x480 [ 213.471120][ T6377] kmalloc_node_trace+0x22/0xe0 [ 213.476038][ T6377] blk_throtl_init+0x8f/0x480 [ 213.480831][ T6377] blkcg_init_disk+0x33a/0x3f0 [ 213.485671][ T6377] ? blkcg_unpin_online+0x250/0x250 [ 213.490929][ T6377] ? __xa_insert+0x242/0x290 [ 213.495574][ T6377] ? do_raw_spin_unlock+0x11d/0x230 [ 213.500876][ T6377] __alloc_disk_node+0x2b3/0x570 [ 213.505896][ T6377] __blk_alloc_disk+0x2c/0x80 [ 213.510628][ T6377] dm_create+0x46b/0xf90 [ 213.514917][ T6377] dev_create+0x12e/0x2c0 [ 213.519292][ T6377] ? list_devices+0x820/0x820 [ 213.524007][ T6377] ? __might_fault+0xc2/0x120 [ 213.528716][ T6377] ? __might_fault+0xa6/0x120 [ 213.533430][ T6377] dm_ctl_ioctl+0xa9c/0xec0 [ 213.537973][ T6377] ? list_devices+0x820/0x820 [ 213.542691][ T6377] ? dm_poll+0x120/0x120 [ 213.547019][ T6377] ? bpf_lsm_file_ioctl+0x5/0x10 [ 213.551997][ T6377] ? security_file_ioctl+0x7c/0xa0 [ 213.557181][ T6377] ? dm_poll+0x120/0x120 [ 213.561463][ T6377] __se_sys_ioctl+0xfa/0x170 [ 213.566103][ T6377] do_syscall_64+0x4c/0xa0 [ 213.570549][ T6377] ? clear_bhb_loop+0x60/0xb0 [ 213.575260][ T6377] ? clear_bhb_loop+0x60/0xb0 [ 213.579969][ T6377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.586200][ T6377] RIP: 0033:0x7fc0e419e159 [ 213.590647][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.610468][ T6377] RSP: 002b:00007fc0e4fff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.618916][ T6377] RAX: ffffffffffffffda RBX: 00007fc0e4425fa0 RCX: 00007fc0e419e159 [ 213.626925][ T6377] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 213.634932][ T6377] RBP: 00007fc0e423506b R08: 0000000000000000 R09: 0000000000000000 [ 213.642942][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.650945][ T6377] R13: 00007fc0e4426038 R14: 00007fc0e4425fa0 R15: 00007ffe8489b4f8 [ 213.658952][ T6377] [ 213.831716][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 214.032005][ T6384] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'. [ 214.457574][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 214.533141][ T14] usb 1-1: USB disconnect, device number 5 [ 214.562058][ T30] bond0: (slave bond_slave_0): interface is now down [ 214.598787][ T30] bond0: (slave bond_slave_1): interface is now down [ 214.659859][ T30] bond0: now running without any active interface! [ 216.128789][ T6390] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 216.498822][ T6422] FAULT_INJECTION: forcing a failure. [ 216.498822][ T6422] name failslab, interval 1, probability 0, space 0, times 0 [ 216.511577][ T6422] CPU: 0 PID: 6422 Comm: syz.4.672 Not tainted syzkaller #0 [ 216.518919][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.529051][ T6422] Call Trace: [ 216.532378][ T6422] [ 216.535357][ T6422] dump_stack_lvl+0x188/0x24e [ 216.540231][ T6422] ? show_regs_print_info+0x12/0x12 [ 216.545501][ T6422] ? load_image+0x410/0x410 [ 216.550262][ T6422] ? __lock_acquire+0x7c40/0x7c40 [ 216.555525][ T6422] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 216.561584][ T6422] should_fail_ex+0x390/0x4c0 [ 216.566337][ T6422] should_failslab+0x5/0x20 [ 216.570891][ T6422] slab_pre_alloc_hook+0x59/0x300 [ 216.575976][ T6422] ? blk_iolatency_init+0x74/0x4c0 [ 216.581186][ T6422] __kmem_cache_alloc_node+0x4f/0x270 [ 216.586584][ T6422] ? blk_iolatency_init+0x74/0x4c0 [ 216.591858][ T6422] kmalloc_trace+0x26/0xe0 [ 216.596319][ T6422] blk_iolatency_init+0x74/0x4c0 [ 216.601490][ T6422] ? blk_throtl_init+0x429/0x480 [ 216.606478][ T6422] blkcg_init_disk+0x35a/0x3f0 [ 216.611410][ T6422] ? blkcg_unpin_online+0x250/0x250 [ 216.616659][ T6422] ? __xa_insert+0x242/0x290 [ 216.621291][ T6422] ? do_raw_spin_unlock+0x11d/0x230 [ 216.626526][ T6422] __alloc_disk_node+0x2b3/0x570 [ 216.631531][ T6422] __blk_alloc_disk+0x2c/0x80 [ 216.636261][ T6422] dm_create+0x46b/0xf90 [ 216.640578][ T6422] dev_create+0x12e/0x2c0 [ 216.644972][ T6422] ? list_devices+0x820/0x820 [ 216.649692][ T6422] ? __might_fault+0xc2/0x120 [ 216.654400][ T6422] ? __might_fault+0xa6/0x120 [ 216.659137][ T6422] dm_ctl_ioctl+0xa9c/0xec0 [ 216.663701][ T6422] ? list_devices+0x820/0x820 [ 216.668524][ T6422] ? dm_poll+0x120/0x120 [ 216.672917][ T6422] ? bpf_lsm_file_ioctl+0x5/0x10 [ 216.677899][ T6422] ? security_file_ioctl+0x7c/0xa0 [ 216.683052][ T6422] ? dm_poll+0x120/0x120 [ 216.687335][ T6422] __se_sys_ioctl+0xfa/0x170 [ 216.691966][ T6422] do_syscall_64+0x4c/0xa0 [ 216.696417][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 216.701159][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 216.705888][ T6422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.711903][ T6422] RIP: 0033:0x7f329599e159 [ 216.716370][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.736005][ T6422] RSP: 002b:00007f32967ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.744451][ T6422] RAX: ffffffffffffffda RBX: 00007f3295c25fa0 RCX: 00007f329599e159 [ 216.752544][ T6422] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 216.760548][ T6422] RBP: 00007f3295a3506b R08: 0000000000000000 R09: 0000000000000000 [ 216.768571][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.776577][ T6422] R13: 00007f3295c26038 R14: 00007f3295c25fa0 R15: 00007ffec50c77e8 [ 216.784599][ T6422] [ 216.824301][ T6422] [ 216.826756][ T6422] ====================================================== [ 216.833816][ T6422] WARNING: possible circular locking dependency detected [ 216.840876][ T6422] syzkaller #0 Not tainted [ 216.845299][ T6422] ------------------------------------------------------ [ 216.852347][ T6422] syz.4.672/6422 is trying to acquire lock: [ 216.858245][ T6422] ffff8880792970a8 ((&sq->pending_timer)){+.-.}-{0:0}, at: __timer_delete_sync+0xc8/0x2e0 [ 216.868197][ T6422] [ 216.868197][ T6422] but task is already holding lock: [ 216.875572][ T6422] ffffffff96e1ee30 (&blkcg->lock){....}-{2:2}, at: blkcg_deactivate_policy+0x191/0x5c0 [ 216.885381][ T6422] [ 216.885381][ T6422] which lock already depends on the new lock. [ 216.885381][ T6422] [ 216.895854][ T6422] [ 216.895854][ T6422] the existing dependency chain (in reverse order) is: [ 216.904909][ T6422] [ 216.904909][ T6422] -> #2 (&blkcg->lock){....}-{2:2}: [ 216.912334][ T6422] _raw_spin_lock+0x2a/0x40 [ 216.917497][ T6422] blkg_create+0xbe9/0x13c0 [ 216.922605][ T6422] blkcg_init_disk+0x28c/0x3f0 [ 216.927946][ T6422] __alloc_disk_node+0x2b3/0x570 [ 216.933433][ T6422] __blk_alloc_disk+0x2c/0x80 [ 216.938759][ T6422] brd_alloc+0x377/0x760 [ 216.943587][ T6422] brd_init+0x125/0x1a5 [ 216.948280][ T6422] do_one_initcall+0x257/0x800 [ 216.953586][ T6422] do_initcall_level+0x13d/0x1ed [ 216.959107][ T6422] do_initcalls+0x4b/0x8a [ 216.964009][ T6422] kernel_init_freeable+0x401/0x5ab [ 216.969843][ T6422] kernel_init+0x19/0x1b0 [ 216.974738][ T6422] ret_from_fork+0x1f/0x30 [ 216.979750][ T6422] [ 216.979750][ T6422] -> #1 (&q->queue_lock){..-.}-{2:2}: [ 216.987350][ T6422] _raw_spin_lock_irq+0xab/0xf0 [ 216.992779][ T6422] throtl_pending_timer_fn+0x10e/0x1dd0 [ 216.998876][ T6422] call_timer_fn+0x1ac/0x670 [ 217.004036][ T6422] __run_timers+0x56c/0x810 [ 217.009133][ T6422] run_timer_softirq+0x63/0xf0 [ 217.014436][ T6422] handle_softirqs+0x291/0x910 [ 217.019745][ T6422] __irq_exit_rcu+0x13b/0x230 [ 217.024977][ T6422] irq_exit_rcu+0x5/0x20 [ 217.029793][ T6422] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 217.035990][ T6422] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 217.042554][ T6422] syscall_enter_from_user_mode+0x2a/0x80 [ 217.048845][ T6422] do_syscall_64+0x24/0xa0 [ 217.053795][ T6422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.060256][ T6422] [ 217.060256][ T6422] -> #0 ((&sq->pending_timer)){+.-.}-{0:0}: [ 217.068458][ T6422] __lock_acquire+0x2d18/0x7c40 [ 217.073897][ T6422] lock_acquire+0x1bb/0x4a0 [ 217.078966][ T6422] __timer_delete_sync+0xe1/0x2e0 [ 217.084533][ T6422] throtl_pd_free+0x15/0x40 [ 217.089584][ T6422] blkcg_deactivate_policy+0x35c/0x5c0 [ 217.095678][ T6422] blk_throtl_exit+0xa6/0x140 [ 217.100973][ T6422] blkcg_init_disk+0x37b/0x3f0 [ 217.106392][ T6422] __alloc_disk_node+0x2b3/0x570 [ 217.111926][ T6422] __blk_alloc_disk+0x2c/0x80 [ 217.117246][ T6422] dm_create+0x46b/0xf90 [ 217.122038][ T6422] dev_create+0x12e/0x2c0 [ 217.126924][ T6422] dm_ctl_ioctl+0xa9c/0xec0 [ 217.131975][ T6422] __se_sys_ioctl+0xfa/0x170 [ 217.137146][ T6422] do_syscall_64+0x4c/0xa0 [ 217.142135][ T6422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.148725][ T6422] [ 217.148725][ T6422] other info that might help us debug this: [ 217.148725][ T6422] [ 217.159152][ T6422] Chain exists of: [ 217.159152][ T6422] (&sq->pending_timer) --> &q->queue_lock --> &blkcg->lock [ 217.159152][ T6422] [ 217.172303][ T6422] Possible unsafe locking scenario: [ 217.172303][ T6422] [ 217.179780][ T6422] CPU0 CPU1 [ 217.185181][ T6422] ---- ---- [ 217.190579][ T6422] lock(&blkcg->lock); [ 217.194783][ T6422] lock(&q->queue_lock); [ 217.201657][ T6422] lock(&blkcg->lock); [ 217.208358][ T6422] lock((&sq->pending_timer)); [ 217.213316][ T6422] [ 217.213316][ T6422] *** DEADLOCK *** [ 217.213316][ T6422] [ 217.221501][ T6422] 2 locks held by syz.4.672/6422: [ 217.226605][ T6422] #0: ffff88802755d610 (&q->queue_lock){..-.}-{2:2}, at: blkcg_deactivate_policy+0xde/0x5c0 [ 217.236949][ T6422] #1: ffffffff96e1ee30 (&blkcg->lock){....}-{2:2}, at: blkcg_deactivate_policy+0x191/0x5c0 [ 217.247090][ T6422] [ 217.247090][ T6422] stack backtrace: [ 217.253031][ T6422] CPU: 0 PID: 6422 Comm: syz.4.672 Not tainted syzkaller #0 [ 217.260434][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.270523][ T6422] Call Trace: [ 217.273828][ T6422] [ 217.276792][ T6422] dump_stack_lvl+0x188/0x24e [ 217.281495][ T6422] ? load_image+0x410/0x410 [ 217.286056][ T6422] ? show_regs_print_info+0x12/0x12 [ 217.291293][ T6422] ? print_circular_bug+0x12b/0x1a0 [ 217.296561][ T6422] check_noncircular+0x296/0x330 [ 217.301555][ T6422] ? look_up_lock_class+0x75/0x140 [ 217.306705][ T6422] ? add_chain_block+0x9b0/0x9b0 [ 217.311721][ T6422] ? lockdep_lock+0xf1/0x1f0 [ 217.316386][ T6422] ? _find_first_zero_bit+0xd2/0x100 [ 217.321713][ T6422] __lock_acquire+0x2d18/0x7c40 [ 217.326607][ T6422] ? __lock_acquire+0x1465/0x7c40 [ 217.331830][ T6422] ? verify_lock_unused+0x140/0x140 [ 217.337076][ T6422] ? verify_lock_unused+0x140/0x140 [ 217.342352][ T6422] ? __flush_work+0x109/0xac0 [ 217.347053][ T6422] ? verify_lock_unused+0x140/0x140 [ 217.352286][ T6422] ? __flush_work+0x9aa/0xac0 [ 217.357092][ T6422] lock_acquire+0x1bb/0x4a0 [ 217.361643][ T6422] ? __timer_delete_sync+0xc8/0x2e0 [ 217.366870][ T6422] ? try_to_grab_pending+0xfa/0x890 [ 217.372099][ T6422] ? read_lock_is_recursive+0x10/0x10 [ 217.377502][ T6422] ? __timer_delete_sync+0xc8/0x2e0 [ 217.382721][ T6422] __timer_delete_sync+0xe1/0x2e0 [ 217.387791][ T6422] ? __timer_delete_sync+0xc8/0x2e0 [ 217.393010][ T6422] ? timer_delete_sync+0x20/0x20 [ 217.397965][ T6422] ? do_raw_spin_lock+0x128/0x2f0 [ 217.403022][ T6422] ? __rwlock_init+0x140/0x140 [ 217.407810][ T6422] ? __timer_delete_sync+0x239/0x2e0 [ 217.413243][ T6422] ? blk_iolatency_init+0x74/0x4c0 [ 217.418500][ T6422] ? throtl_pd_offline+0x160/0x160 [ 217.423654][ T6422] throtl_pd_free+0x15/0x40 [ 217.428210][ T6422] blkcg_deactivate_policy+0x35c/0x5c0 [ 217.433701][ T6422] blk_throtl_exit+0xa6/0x140 [ 217.438439][ T6422] blkcg_init_disk+0x37b/0x3f0 [ 217.443239][ T6422] ? blkcg_unpin_online+0x250/0x250 [ 217.448465][ T6422] ? __xa_insert+0x242/0x290 [ 217.453076][ T6422] ? do_raw_spin_unlock+0x11d/0x230 [ 217.458289][ T6422] __alloc_disk_node+0x2b3/0x570 [ 217.463271][ T6422] __blk_alloc_disk+0x2c/0x80 [ 217.467976][ T6422] dm_create+0x46b/0xf90 [ 217.472270][ T6422] dev_create+0x12e/0x2c0 [ 217.476799][ T6422] ? list_devices+0x820/0x820 [ 217.481500][ T6422] ? __might_fault+0xc2/0x120 [ 217.486313][ T6422] ? __might_fault+0xa6/0x120 [ 217.491123][ T6422] dm_ctl_ioctl+0xa9c/0xec0 [ 217.495670][ T6422] ? list_devices+0x820/0x820 [ 217.500372][ T6422] ? dm_poll+0x120/0x120 [ 217.504668][ T6422] ? bpf_lsm_file_ioctl+0x5/0x10 [ 217.509645][ T6422] ? security_file_ioctl+0x7c/0xa0 [ 217.514780][ T6422] ? dm_poll+0x120/0x120 [ 217.519049][ T6422] __se_sys_ioctl+0xfa/0x170 [ 217.523659][ T6422] do_syscall_64+0x4c/0xa0 [ 217.528086][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 217.532834][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 217.537559][ T6422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.543477][ T6422] RIP: 0033:0x7f329599e159 [ 217.548077][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.567719][ T6422] RSP: 002b:00007f32967ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.576158][ T6422] RAX: ffffffffffffffda RBX: 00007f3295c25fa0 RCX: 00007f329599e159 [ 217.584149][ T6422] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 217.592141][ T6422] RBP: 00007f3295a3506b R08: 0000000000000000 R09: 0000000000000000 [ 217.600130][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.608137][ T6422] R13: 00007f3295c26038 R14: 00007f3295c25fa0 R15: 00007ffec50c77e8 [ 217.616131][ T6422]