last executing test programs: 13.894368279s ago: executing program 1 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 13.243025222s ago: executing program 1 (id=358): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)={0x240, 0x7d, 0x0, {{0x500, 0xff, 0x0, 0xfffffffe, {}, 0x0, 0x40000, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\x1f\x00\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00\x00\x00_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2/\n\x00\x00\x00\x89e\xdd\xb3\xe6\x14\xb6\x98\x13\xf6\x00', 0x63, '\xf8\xf6i\xfbqm\xcf1^3b5\xea\x7f!\xeb\xac\xd6au6.i\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x240) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'wg1\x00', {0x572}, 0x80ae}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) chdir(&(0x7f00000002c0)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x4b) write$sndseq(r6, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0xfffffffffffffe65) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x44, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x44}}, 0x0) syz_usb_connect$uac2(0x2, 0x83, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0) 8.627207279s ago: executing program 1 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a0100000000000000000002000a000900010073797a300000000060000000120a0100000000000000000002000a000900010073797a30000000000900020073797a30000000000800030000000009280004800500020006000000060003001f900000080004"], 0xa8}}, 0x0) 7.757389758s ago: executing program 1 (id=368): syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f00000000c0)={0x7fffffff, 0xb0, @name="4c0dfa2815d81a3e075a92d3c6791a10f103bcbdcdd32add501d5a11e2d2dca0"}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x14c3, 0x6, 0x801, 0x0, 0x8, 'syz1\x00'}) 6.699218205s ago: executing program 2 (id=372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) add_key(0x0, 0x0, &(0x7f0000000040)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040301751892a6eb270cf3a2900b04030c2f4367", 0x40, 0xfffffffffffffffd) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.448349147s ago: executing program 3 (id=373): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x50) 6.031959362s ago: executing program 3 (id=374): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)={0x240, 0x7d, 0x0, {{0x500, 0xff, 0x0, 0xfffffffe, {}, 0x0, 0x40000, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\x1f\x00\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00\x00\x00_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2/\n\x00\x00\x00\x89e\xdd\xb3\xe6\x14\xb6\x98\x13\xf6\x00', 0x63, '\xf8\xf6i\xfbqm\xcf1^3b5\xea\x7f!\xeb\xac\xd6au6.i\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x240) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'wg1\x00', {0x572}, 0x80ae}) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) chdir(&(0x7f00000002c0)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x4b) write$sndseq(r6, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0xfffffffffffffe65) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r7) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x44, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x44}}, 0x0) syz_usb_connect$uac2(0x2, 0x83, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0) 4.301189807s ago: executing program 1 (id=375): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, 0x0) 4.180392042s ago: executing program 0 (id=376): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000001880)=""/18) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.165691265s ago: executing program 2 (id=377): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000000740)=@framed={{}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x2}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.660223839s ago: executing program 2 (id=378): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 3.102089273s ago: executing program 2 (id=379): r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './sys/class/net/dummy0/carrier\x00'}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000280)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x402, 0x2) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x220000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000600)='sysfs\x00', 0x1810004, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='1', 0x1) setns(0xc9, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./sys/class/net/dummy0/carrier\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r4, @ANYRES8=r5, @ANYBLOB="1d78a44328740b9a54498e1bc2486fb0b01f885fc9", @ANYRESOCT=r4, @ANYBLOB="9649ae2cae07dd7563ef690e253257c06f2a72da7e21c4eee8178574c6e925bf173ceae0ac817fe5ffebdc29fe12e86564edb2b67faeb53bd6b6a467d95370c4ce2f260919046d", @ANYRESHEX=r2]) fstatfs(0xffffffffffffffff, 0x0) r6 = socket(0x2a, 0x2, 0x9) bind$inet(r6, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) write(r3, &(0x7f0000000440)="1dbc5636ee3abbd429ecd16b8e1219489bfd660f25ab18af6c291e4581ae2c9d6dcae97ee1519c538e8271be76017fc080a04447d17250125f1cfb51a3c8137e454bc06b04034dd391bb3ca1d7b707cc9358734297cac7d91f75cc9ed5cd7c25d194087a097d5b220589bfde46f6e52f7a2d8a98de3568c82d25554511698b6f23d1d6d0e9dda438cc973b8f70600fc3396e8f1b71a575db4df091502f4ad60e6ea064219917824e0b0da300f13258bab93d7a89309f5ddc136025c6497d492a5fe1bed81c1fbe", 0xc7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write(r0, &(0x7f0000000200)='transport=rdma,nqn=nqn.2014-08.org.nvmexpress.discovery,traddr=127.0.0.1', 0x48) 3.078939308s ago: executing program 0 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x40000000}) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f00000001c0)={r1, r2}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) write(r6, &(0x7f0000000240)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) readlinkat(r4, 0x0, &(0x7f00000002c0)=""/161, 0xa1) 2.800141225s ago: executing program 2 (id=381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000786dd0100"], 0x4a) 2.477439391s ago: executing program 0 (id=382): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='7', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000340)='1', 0x1) mkdir(&(0x7f0000000380)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='2', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='3', 0x1) 2.109097907s ago: executing program 2 (id=383): syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f00000000c0)={0x7fffffff, 0xb0, @name="4c0dfa2815d81a3e075a92d3c6791a10f103bcbdcdd32add501d5a11e2d2dca0"}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x14c3, 0x6, 0x801, 0x0, 0x8, 'syz1\x00'}) 2.055343138s ago: executing program 3 (id=384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xdf0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) 1.860005708s ago: executing program 0 (id=385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) add_key(0x0, 0x0, &(0x7f0000000040)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040301751892a6eb270cf3a2900b04030c2f4367", 0x40, 0xfffffffffffffffd) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.546325532s ago: executing program 3 (id=386): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}}, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 1.36084512s ago: executing program 3 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') 1.227132928s ago: executing program 3 (id=388): openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x107c00) r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x521f) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) 1.186895806s ago: executing program 0 (id=389): r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './sys/class/net/dummy0/carrier\x00'}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000280)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x402, 0x2) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x220000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000600)='sysfs\x00', 0x1810004, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='1', 0x1) setns(0xc9, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./sys/class/net/dummy0/carrier\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r4, @ANYRES8=r5, @ANYBLOB="1d78a44328740b9a54498e1bc2486fb0b01f885fc9", @ANYRESOCT=r4, @ANYBLOB="9649ae2cae07dd7563ef690e253257c06f2a72da7e21c4eee8178574c6e925bf173ceae0ac817fe5ffebdc29fe12e86564edb2b67faeb53bd6b6a467d95370c4ce2f260919046d", @ANYRESHEX=r2]) fstatfs(0xffffffffffffffff, 0x0) r6 = socket(0x2a, 0x2, 0x9) bind$inet(r6, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) write(r3, &(0x7f0000000440)="1dbc5636ee3abbd429ecd16b8e1219489bfd660f25ab18af6c291e4581ae2c9d6dcae97ee1519c538e8271be76017fc080a04447d17250125f1cfb51a3c8137e454bc06b04034dd391bb3ca1d7b707cc9358734297cac7d91f75cc9ed5cd7c25d194087a097d5b220589bfde46f6e52f7a2d8a98de3568c82d25554511698b6f23d1d6d0e9dda438cc973b8f70600fc3396e8f1b71a575db4df091502f4ad60e6ea064219917824e0b0da300f13258bab93d7a89309f5ddc136025c6497d492a5fe1bed81c1fbe", 0xc7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write(r0, &(0x7f0000000200)='transport=rdma,nqn=nqn.2014-08.org.nvmexpress.discovery,traddr=127.0.0.1', 0x48) 521.511712ms ago: executing program 0 (id=390): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000001880)=""/18) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 1 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000786dd0100"], 0x4a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 84.133255][ T5764] cgroup: Unknown subsys name 'net' [ 84.275823][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.934930][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.916527][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.925226][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.933025][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.941351][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.958008][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.965469][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.981792][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.005063][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.013386][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.028611][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.037754][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.045276][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.080189][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.088997][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.102056][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.110239][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.118756][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.127470][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.138771][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.146965][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.155180][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.156240][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.169794][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.182746][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.686955][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 88.705394][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.722875][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 88.884586][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 88.962722][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.970573][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.981060][ T5785] bridge_slave_0: entered allmulticast mode [ 88.988545][ T5785] bridge_slave_0: entered promiscuous mode [ 88.999590][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.006736][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.014116][ T5785] bridge_slave_1: entered allmulticast mode [ 89.021729][ T5785] bridge_slave_1: entered promiscuous mode [ 89.056518][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.064543][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.072228][ T5776] bridge_slave_0: entered allmulticast mode [ 89.079614][ T5776] bridge_slave_0: entered promiscuous mode [ 89.115968][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.124066][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.131799][ T5776] bridge_slave_1: entered allmulticast mode [ 89.139406][ T5776] bridge_slave_1: entered promiscuous mode [ 89.163190][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.170467][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.177811][ T5779] bridge_slave_0: entered allmulticast mode [ 89.185047][ T5779] bridge_slave_0: entered promiscuous mode [ 89.208220][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.223303][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.233871][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.241774][ T5779] bridge_slave_1: entered allmulticast mode [ 89.249528][ T5779] bridge_slave_1: entered promiscuous mode [ 89.268679][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.315646][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.328464][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.352921][ T5785] team0: Port device team_slave_0 added [ 89.395655][ T5785] team0: Port device team_slave_1 added [ 89.402538][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.410390][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.417751][ T5786] bridge_slave_0: entered allmulticast mode [ 89.425300][ T5786] bridge_slave_0: entered promiscuous mode [ 89.436178][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.449261][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.472966][ T5776] team0: Port device team_slave_0 added [ 89.490933][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.498231][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.505395][ T5786] bridge_slave_1: entered allmulticast mode [ 89.512897][ T5786] bridge_slave_1: entered promiscuous mode [ 89.533165][ T5776] team0: Port device team_slave_1 added [ 89.564908][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.571983][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.598157][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.652203][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.659546][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.685685][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.700180][ T5779] team0: Port device team_slave_0 added [ 89.718943][ T5779] team0: Port device team_slave_1 added [ 89.729456][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.747632][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.754805][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.781318][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.805979][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.817534][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.824526][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.851380][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.894671][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.901781][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.927963][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.971681][ T5785] hsr_slave_0: entered promiscuous mode [ 89.978328][ T5785] hsr_slave_1: entered promiscuous mode [ 89.998601][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.005619][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.032003][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.040573][ T5784] Bluetooth: hci0: command tx timeout [ 90.074578][ T5786] team0: Port device team_slave_0 added [ 90.132472][ T5786] team0: Port device team_slave_1 added [ 90.143287][ T5776] hsr_slave_0: entered promiscuous mode [ 90.150586][ T5776] hsr_slave_1: entered promiscuous mode [ 90.156942][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.165008][ T5776] Cannot create hsr debugfs directory [ 90.177293][ T5784] Bluetooth: hci1: command tx timeout [ 90.182662][ T5779] hsr_slave_0: entered promiscuous mode [ 90.190397][ T5779] hsr_slave_1: entered promiscuous mode [ 90.197297][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.204881][ T5779] Cannot create hsr debugfs directory [ 90.257757][ T5784] Bluetooth: hci3: command tx timeout [ 90.263486][ T5784] Bluetooth: hci2: command tx timeout [ 90.337425][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.344431][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.375679][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.394508][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.402100][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.433815][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.585145][ T5786] hsr_slave_0: entered promiscuous mode [ 90.591782][ T5786] hsr_slave_1: entered promiscuous mode [ 90.599399][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.607146][ T5786] Cannot create hsr debugfs directory [ 90.884931][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.920952][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.932716][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.945150][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.041555][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.056016][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.066780][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.080178][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.162339][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.173725][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.205871][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.218966][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.297566][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.309584][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.341503][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.353717][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.381041][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.440893][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.481184][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.495117][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.502619][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.526856][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.534132][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.615801][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.663691][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.670890][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.702219][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.709445][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.758401][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.793976][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.829518][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.836696][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.916622][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.923891][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.971459][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.993487][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.090889][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.109269][ T5784] Bluetooth: hci0: command tx timeout [ 92.160418][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.167673][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.204803][ T787] cfg80211: failed to load regulatory.db [ 92.204830][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.217735][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.262583][ T5784] Bluetooth: hci1: command tx timeout [ 92.285717][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.337260][ T5784] Bluetooth: hci2: command tx timeout [ 92.337893][ T5780] Bluetooth: hci3: command tx timeout [ 92.446528][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.483412][ T5785] veth0_vlan: entered promiscuous mode [ 92.525529][ T5785] veth1_vlan: entered promiscuous mode [ 92.590425][ T5779] veth0_vlan: entered promiscuous mode [ 92.621606][ T5785] veth0_macvtap: entered promiscuous mode [ 92.642110][ T5779] veth1_vlan: entered promiscuous mode [ 92.662810][ T5785] veth1_macvtap: entered promiscuous mode [ 92.753479][ T5779] veth0_macvtap: entered promiscuous mode [ 92.765657][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.808911][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.829911][ T5779] veth1_macvtap: entered promiscuous mode [ 92.843046][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.857116][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.871034][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.884799][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.903840][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.994231][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.001960][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.013926][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.025829][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.070487][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.084651][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.097637][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.133058][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.143949][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.154395][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.164874][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.232968][ T5776] veth0_vlan: entered promiscuous mode [ 93.254032][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.270516][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.303008][ T5776] veth1_vlan: entered promiscuous mode [ 93.332992][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.354447][ T5786] veth0_vlan: entered promiscuous mode [ 93.364061][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.487781][ T5786] veth1_vlan: entered promiscuous mode [ 93.541448][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.560664][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.599421][ T5776] veth0_macvtap: entered promiscuous mode [ 93.650180][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.662221][ T5776] veth1_macvtap: entered promiscuous mode [ 93.683897][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.745629][ T5786] veth0_macvtap: entered promiscuous mode [ 93.788060][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.807956][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.822950][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.833730][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.863724][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.904331][ T5786] veth1_macvtap: entered promiscuous mode [ 93.975951][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.991440][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.003449][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.023591][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.036183][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.102960][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.116194][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.126824][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.141332][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.178000][ T5780] Bluetooth: hci0: command tx timeout [ 94.244305][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.255940][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.274792][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.285648][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.296068][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.315453][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.333651][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.341203][ T5780] Bluetooth: hci1: command tx timeout [ 94.417711][ T5780] Bluetooth: hci3: command tx timeout [ 94.418460][ T5784] Bluetooth: hci2: command tx timeout [ 94.451250][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.491032][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.514890][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.526538][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.542724][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.554853][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.596441][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.615061][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.057772][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.098907][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.141356][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.203959][ T5867] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.258266][ T5784] Bluetooth: hci0: command tx timeout [ 96.368032][ T969] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 96.417310][ T5784] Bluetooth: hci1: command tx timeout [ 96.491292][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.499533][ T5784] Bluetooth: hci3: command tx timeout [ 96.507199][ T5784] Bluetooth: hci2: command tx timeout [ 96.537173][ T969] usb 1-1: device descriptor read/64, error -71 [ 96.556082][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.641624][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.680715][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.796561][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.817630][ T969] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.825825][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.833132][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.867096][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.997813][ T969] usb 1-1: device descriptor read/64, error -71 [ 97.040604][ T5883] FAULT_INJECTION: forcing a failure. [ 97.040604][ T5883] name failslab, interval 1, probability 0, space 0, times 1 [ 97.073158][ T5883] CPU: 0 PID: 5883 Comm: syz.1.14 Not tainted syzkaller #0 [ 97.080456][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.090577][ T5883] Call Trace: [ 97.093911][ T5883] [ 97.096883][ T5883] dump_stack_lvl+0x18c/0x250 [ 97.101732][ T5883] ? show_regs_print_info+0x20/0x20 [ 97.106977][ T5883] ? load_image+0x420/0x420 [ 97.111515][ T5883] ? __lock_acquire+0x7d80/0x7d80 [ 97.116579][ T5883] should_fail_ex+0x394/0x4c0 [ 97.121296][ T5883] should_failslab+0x9/0x20 [ 97.125852][ T5883] slab_pre_alloc_hook+0x59/0x300 [ 97.130912][ T5883] ? __vmalloc_node_range+0x598/0x1320 [ 97.136406][ T5883] ? __vmalloc_node_range+0x598/0x1320 [ 97.141909][ T5883] __kmem_cache_alloc_node+0x53/0x250 [ 97.142773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.147322][ T5883] ? __vmalloc_node_range+0x598/0x1320 [ 97.147358][ T5883] __kmalloc_node+0xa6/0x240 [ 97.147396][ T5883] __vmalloc_node_range+0x598/0x1320 [ 97.147429][ T5883] ? __stack_depot_save+0x1f/0x660 [ 97.180026][ T5883] ? do_syscall_64+0x55/0xb0 [ 97.184671][ T5883] ? free_vm_area+0x50/0x50 [ 97.189231][ T5883] ? __asan_memset+0x22/0x40 [ 97.193877][ T5883] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 97.199459][ T5883] __vmalloc+0x7a/0x90 [ 97.203652][ T5883] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 97.209237][ T5883] bpf_prog_alloc_no_stats+0x46/0x430 [ 97.214642][ T5883] bpf_prog_alloc+0x3d/0x1a0 [ 97.219264][ T5883] ? bpf_prepare_filter+0x12b1/0x1320 [ 97.224700][ T5883] bpf_prog_create_from_user+0xa6/0x420 [ 97.230287][ T5883] ? seccomp_notify_detach+0x220/0x220 [ 97.235804][ T5883] do_seccomp+0x794/0xdc0 [ 97.240177][ T5883] ? prctl_set_seccomp+0x60/0x60 [ 97.245157][ T5883] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 97.251180][ T5883] ? lockdep_hardirqs_on+0x98/0x150 [ 97.256414][ T5883] do_syscall_64+0x55/0xb0 [ 97.260864][ T5883] ? clear_bhb_loop+0x40/0x90 [ 97.265572][ T5883] ? clear_bhb_loop+0x40/0x90 [ 97.270281][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.276228][ T5883] RIP: 0033:0x7ff31bd9e159 [ 97.280683][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.300327][ T5883] RSP: 002b:00007ff31cc3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 97.308774][ T5883] RAX: ffffffffffffffda RBX: 00007ff31c025fa0 RCX: 00007ff31bd9e159 [ 97.316776][ T5883] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 97.324775][ T5883] RBP: 00007ff31be3506b R08: 0000000000000000 R09: 0000000000000000 [ 97.332775][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.340772][ T5883] R13: 00007ff31c026038 R14: 00007ff31c025fa0 R15: 00007ffe10cdb4b8 [ 97.348799][ T5883] [ 97.401011][ T969] usb usb1-port1: attempt power cycle [ 97.448322][ T5883] syz.1.14: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 97.528876][ T5883] CPU: 1 PID: 5883 Comm: syz.1.14 Not tainted syzkaller #0 [ 97.536134][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.546218][ T5883] Call Trace: [ 97.549540][ T5883] [ 97.552490][ T5883] dump_stack_lvl+0x18c/0x250 [ 97.557207][ T5883] ? show_regs_print_info+0x20/0x20 [ 97.562455][ T5883] ? load_image+0x420/0x420 [ 97.567023][ T5883] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 97.573506][ T5883] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 97.580097][ T5883] warn_alloc+0x246/0x340 [ 97.584486][ T5883] ? zone_watermark_ok_safe+0x230/0x230 [ 97.590087][ T5883] ? __vmalloc_node_range+0x598/0x1320 [ 97.595622][ T5883] ? __vmalloc_node_range+0x598/0x1320 [ 97.601155][ T5883] ? rcu_is_watching+0x15/0xb0 [ 97.605980][ T5883] ? __vmalloc_node_range+0x598/0x1320 [ 97.611505][ T5883] ? __kmalloc_node+0xe4/0x240 [ 97.616342][ T5883] __vmalloc_node_range+0x661/0x1320 [ 97.621700][ T5883] ? __stack_depot_save+0x1f/0x660 [ 97.626902][ T5883] ? free_vm_area+0x50/0x50 [ 97.631472][ T5883] ? __asan_memset+0x22/0x40 [ 97.636107][ T5883] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 97.641725][ T5883] __vmalloc+0x7a/0x90 [ 97.645853][ T5883] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 97.651433][ T5883] bpf_prog_alloc_no_stats+0x46/0x430 [ 97.656840][ T5883] bpf_prog_alloc+0x3d/0x1a0 [ 97.661458][ T5883] ? bpf_prepare_filter+0x12b1/0x1320 [ 97.666868][ T5883] bpf_prog_create_from_user+0xa6/0x420 [ 97.672457][ T5883] ? seccomp_notify_detach+0x220/0x220 [ 97.677954][ T5883] do_seccomp+0x794/0xdc0 [ 97.682330][ T5883] ? prctl_set_seccomp+0x60/0x60 [ 97.687304][ T5883] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 97.693323][ T5883] ? lockdep_hardirqs_on+0x98/0x150 [ 97.698551][ T5883] do_syscall_64+0x55/0xb0 [ 97.703002][ T5883] ? clear_bhb_loop+0x40/0x90 [ 97.707728][ T5883] ? clear_bhb_loop+0x40/0x90 [ 97.712440][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.718487][ T5883] RIP: 0033:0x7ff31bd9e159 [ 97.722931][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.742567][ T5883] RSP: 002b:00007ff31cc3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 97.751015][ T5883] RAX: ffffffffffffffda RBX: 00007ff31c025fa0 RCX: 00007ff31bd9e159 [ 97.759016][ T5883] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 97.767014][ T5883] RBP: 00007ff31be3506b R08: 0000000000000000 R09: 0000000000000000 [ 97.775033][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.783030][ T5883] R13: 00007ff31c026038 R14: 00007ff31c025fa0 R15: 00007ffe10cdb4b8 [ 97.791036][ T5883] [ 97.885171][ T5883] Mem-Info: [ 97.889117][ T5883] active_anon:27447 inactive_anon:0 isolated_anon:0 [ 97.889117][ T5883] active_file:10550 inactive_file:39952 isolated_file:0 [ 97.889117][ T5883] unevictable:768 dirty:1729 writeback:0 [ 97.889117][ T5883] slab_reclaimable:9963 slab_unreclaimable:90023 [ 97.889117][ T5883] mapped:24164 shmem:23498 pagetables:546 [ 97.889117][ T5883] sec_pagetables:0 bounce:0 [ 97.889117][ T5883] kernel_misc_reclaimable:0 [ 97.889117][ T5883] free:1337586 free_pcp:9135 free_cma:0 [ 97.897322][ T969] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 97.982033][ T5883] Node 0 active_anon:107288kB inactive_anon:0kB active_file:42300kB inactive_file:159608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96756kB dirty:6904kB writeback:0kB shmem:89856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10380kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no [ 98.056604][ T5883] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 98.123583][ T5883] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.244198][ T5883] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 98.261754][ T5883] Node 0 DMA32 free:1450936kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:102432kB inactive_anon:0kB active_file:42368kB inactive_file:158784kB unevictable:1536kB writepending:6928kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:19932kB local_pcp:6468kB free_cma:0kB [ 98.377408][ T969] usb 1-1: device not accepting address 4, error -71 [ 98.391515][ T5883] lowmem_reserve[]: 0 0 0 0 0 [ 98.396310][ T5883] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:8kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 98.474629][ T5883] lowmem_reserve[]: 0 0 0 0 0 [ 98.534287][ T5883] Node 1 Normal free:3882660kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24164kB local_pcp:9536kB free_cma:0kB [ 98.608462][ T5883] lowmem_reserve[]: 0 0 0 0 0 [ 98.613399][ T5883] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 98.668190][ T5883] Node 0 DMA32: 84*4kB (UME) 463*8kB (UME) 89*16kB (UME) 41*32kB (UME) 37*64kB (UME) 26*128kB (ME) 15*256kB (UM) 7*512kB (M) 1*1024kB (M) 0*2048kB 354*4096kB (ME) = 1470904kB [ 98.717152][ T5883] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 98.737123][ T5883] Node 1 Normal: 145*4kB (UM) 30*8kB (UM) 21*16kB (UME) 29*32kB (UME) 12*64kB (UE) 5*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 946*4096kB (M) = 3882660kB [ 98.789420][ T5883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.808788][ T5902] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 98.816964][ T5883] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.876576][ T5883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.927297][ T5883] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.966062][ T5883] 64241 total pagecache pages [ 98.994160][ T5883] 0 pages in swap cache [ 99.016586][ T5883] Free swap = 124996kB [ 99.031545][ T5883] Total swap = 124996kB [ 99.036809][ T5883] 2097051 pages RAM [ 99.084483][ T5883] 0 pages HighMem/MovableOnly [ 99.103916][ T5883] 416965 pages reserved [ 99.127128][ T5883] 0 pages cma reserved [ 101.000734][ T5928] fuse: Unknown parameter '00000000000000000005xC(t TIHo_00000000000000000000005I' [ 101.257712][ T5841] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 101.417232][ T5841] usb 4-1: device descriptor read/64, error -71 [ 101.699780][ T5841] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 101.838740][ T5956] FAULT_INJECTION: forcing a failure. [ 101.838740][ T5956] name failslab, interval 1, probability 0, space 0, times 0 [ 101.867739][ T5841] usb 4-1: device descriptor read/64, error -71 [ 101.910373][ T5956] CPU: 0 PID: 5956 Comm: syz.1.31 Not tainted syzkaller #0 [ 101.917669][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.927782][ T5956] Call Trace: [ 101.931113][ T5956] [ 101.934086][ T5956] dump_stack_lvl+0x18c/0x250 [ 101.938919][ T5956] ? show_regs_print_info+0x20/0x20 [ 101.944178][ T5956] ? load_image+0x420/0x420 [ 101.948742][ T5956] ? __lock_acquire+0x7d80/0x7d80 [ 101.953921][ T5956] should_fail_ex+0x394/0x4c0 [ 101.958665][ T5956] should_failslab+0x9/0x20 [ 101.963229][ T5956] slab_pre_alloc_hook+0x59/0x300 [ 101.968336][ T5956] kmem_cache_alloc_node+0x5e/0x310 [ 101.973601][ T5956] ? alloc_vmap_area+0x6f7/0x1e50 [ 101.978685][ T5956] alloc_vmap_area+0x6f7/0x1e50 [ 101.983617][ T5956] ? vm_map_ram+0xcf0/0xcf0 [ 101.988175][ T5956] ? rcu_is_watching+0x15/0xb0 [ 101.993004][ T5956] __get_vm_area_node+0x162/0x370 [ 101.998097][ T5956] __vmalloc_node_range+0x36f/0x1320 [ 102.003444][ T5956] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 102.009047][ T5956] ? __stack_depot_save+0x1f/0x660 [ 102.014227][ T5956] ? kasan_set_track+0x5f/0x70 [ 102.019060][ T5956] ? do_syscall_64+0x55/0xb0 [ 102.023728][ T5956] ? free_vm_area+0x50/0x50 [ 102.028306][ T5956] ? __asan_memset+0x22/0x40 [ 102.032964][ T5956] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 102.038574][ T5956] __vmalloc+0x7a/0x90 [ 102.042711][ T5956] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 102.048324][ T5956] bpf_prog_alloc_no_stats+0x46/0x430 [ 102.053769][ T5956] bpf_prog_alloc+0x3d/0x1a0 [ 102.058421][ T5956] ? bpf_prepare_filter+0x12b1/0x1320 [ 102.063866][ T5956] bpf_prog_create_from_user+0xa6/0x420 [ 102.069492][ T5956] ? seccomp_notify_detach+0x220/0x220 [ 102.075019][ T5956] do_seccomp+0x794/0xdc0 [ 102.079423][ T5956] ? prctl_set_seccomp+0x60/0x60 [ 102.084428][ T5956] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 102.090477][ T5956] ? lockdep_hardirqs_on+0x98/0x150 [ 102.095734][ T5956] do_syscall_64+0x55/0xb0 [ 102.100212][ T5956] ? clear_bhb_loop+0x40/0x90 [ 102.104953][ T5956] ? clear_bhb_loop+0x40/0x90 [ 102.109724][ T5956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.115675][ T5956] RIP: 0033:0x7ff31bd9e159 [ 102.120140][ T5956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.139889][ T5956] RSP: 002b:00007ff31cc3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 102.148361][ T5956] RAX: ffffffffffffffda RBX: 00007ff31c025fa0 RCX: 00007ff31bd9e159 [ 102.156398][ T5956] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 102.164416][ T5956] RBP: 00007ff31be3506b R08: 0000000000000000 R09: 0000000000000000 [ 102.172432][ T5956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.180467][ T5956] R13: 00007ff31c026038 R14: 00007ff31c025fa0 R15: 00007ffe10cdb4b8 [ 102.188504][ T5956] [ 102.216369][ T5841] usb usb4-port1: attempt power cycle [ 102.643939][ T5841] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 102.778263][ T5841] usb 4-1: device descriptor read/8, error -71 [ 102.889290][ T5979] fuse: Unknown parameter '00000000000000000005xC(t TIHo_00000000000000000000005I' [ 104.357222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.400138][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.547385][ T5868] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 105.620757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.707278][ T5868] usb 2-1: device descriptor read/64, error -71 [ 106.017163][ T5868] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 106.112929][ T6029] Bluetooth: MGMT ver 1.22 [ 106.207331][ T5868] usb 2-1: device descriptor read/64, error -71 [ 106.351504][ T5868] usb usb2-port1: attempt power cycle [ 106.758500][ T6046] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 106.807199][ T5868] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 106.864744][ T5868] usb 2-1: device descriptor read/8, error -71 [ 107.147205][ T5868] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 107.437138][ T5868] usb 2-1: device not accepting address 5, error -71 [ 107.472279][ T5868] usb usb2-port1: unable to enumerate USB device [ 108.317582][ T5784] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 108.318802][ T5780] Bluetooth: hci0: command 0x0c24 tx timeout [ 108.947368][ T5868] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 109.277434][ T5868] usb 4-1: device descriptor read/64, error -71 [ 111.147158][ T5868] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 112.242388][ T6123] fuse: Unknown parameter '00000000000000000005xC(t TIHo_00000000000000000000005I' [ 112.735657][ T6130] Zero length message leads to an empty skb [ 113.107052][ C0] sched: RT throttling activated [ 115.757187][ T5841] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 115.967220][ T5841] usb 2-1: device descriptor read/64, error -71 [ 116.257479][ T5841] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 116.427187][ T5841] usb 2-1: device descriptor read/64, error -71 [ 116.553019][ T5841] usb usb2-port1: attempt power cycle [ 116.803009][ T6180] fuse: Unknown parameter '00000000000000000005xC(t TIHo_00000000000000000000005I' [ 119.124824][ T6213] fuse: Unknown parameter '00000000000000000005xC(t TIHo_00000000000000000000005I' [ 121.667127][ T969] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 121.965872][ T6248] process 'syz.1.123' launched './file0' with NULL argv: empty string added [ 122.259795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.381401][ T6253] fuse: Unknown parameter '00000000000000000004xC(t TIHo_00000000000000000000004I' [ 124.088772][ T6284] fuse: Unknown parameter '00000000000000000004xC(t TIHo_00000000000000000000004I' [ 125.055428][ T969] usb 1-1: device descriptor read/64, error -71 [ 125.287858][ T6296] syz.1.137[6296]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 126.891348][ T6296] loop1: detected capacity change from 0 to 32768 [ 127.015196][ T6296] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.228086][ T6296] XFS (loop1): Ending clean mount [ 127.297253][ T5780] Bluetooth: hci0: command 0x0c24 tx timeout [ 127.297298][ T6295] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 127.305230][ T6296] overlayfs: failed to resolve '/zhTɖ>JvwG9[89l4ah/(`ï[q/sys/devices/system/cpu/cpu1/hotplug/target': -2 [ 127.423388][ T6332] fuse: Unknown parameter '00000000000000000004xC(t TIHo_00000000000000000000004I' [ 127.454147][ T6295] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 127.466374][ T6295] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 127.474695][ T6295] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.481066][ T6295] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 127.490540][ T6295] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 127.500968][ T6295] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.512222][ T6295] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 127.520936][ T6295] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 127.550496][ T6295] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.562007][ T6295] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 127.572638][ T6295] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 127.652538][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.377321][ T5780] Bluetooth: hci0: command 0x0c24 tx timeout [ 129.453366][ T6357] loop0: detected capacity change from 0 to 32768 [ 129.499976][ T6357] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.538438][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.545614][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.677274][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.656113][ T6357] XFS (loop0): Ending clean mount [ 130.698524][ T6357] overlayfs: failed to resolve '/zhTɖ>JvwG9[89l4ah/(`ï[q/sys/devices/system/cpu/cpu1/hotplug/target': -2 [ 130.848141][ T6356] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.868672][ T6356] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.895559][ T6356] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.908893][ T6356] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.995726][ T5785] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.141861][ T6384] fuse: Unknown parameter '00000000000000000004xC(t TIHo_00000000000000000000004I' [ 131.231587][ T969] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 132.907292][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.913446][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.964335][ T6404] loop1: detected capacity change from 0 to 32768 [ 133.650355][ T6411] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 134.562477][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.657495][ T5086] Bluetooth: hci0: command 0x0c24 tx timeout [ 134.664165][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.676189][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.706361][ T6403] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 134.757186][ T969] usb 4-1: device descriptor read/64, error -71 [ 134.776791][ T6404] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.904401][ T6404] XFS (loop1): Ending clean mount [ 134.977506][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.997904][ T6404] overlayfs: failed to resolve '/zhTɖ>JvwG9[89l4ah/(`ï[q/sys/devices/system/cpu/cpu1/hotplug/target': -2 [ 135.154734][ T6403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.173705][ T6403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.193836][ T6403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.268036][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.397173][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.621418][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.653087][ T5819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.700796][ T5819] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 136.757099][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.818407][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.882380][ T5819] metro_usb 3-1:1.0: Metrologic USB to Serial converter detected [ 136.976597][ T5819] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 137.083122][ T6428] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 137.151492][ T5868] usb 3-1: USB disconnect, device number 2 [ 137.183168][ T5868] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 137.203530][ T5868] metro_usb 3-1:1.0: device disconnected [ 137.227837][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.228152][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.388353][ T6446] fuse: Unknown parameter '00000000000000000004xC(t TIHo_00000000000000000000004I' [ 137.637221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 138.147334][ T5819] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 138.347438][ T5819] usb 4-1: device descriptor read/64, error -71 [ 138.647225][ T5819] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 139.347088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.557089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.627078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.787326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 139.857073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.877078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 139.917078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 140.247337][ T5819] usb 4-1: device descriptor read/64, error -71 [ 140.347282][ T5086] Bluetooth: hci0: command 0x0c24 tx timeout [ 140.356842][ T6455] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 140.383769][ T5819] usb usb4-port1: attempt power cycle [ 140.553375][ T6456] loop0: detected capacity change from 0 to 32768 [ 140.660993][ T6456] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.774327][ T6456] XFS (loop0): Ending clean mount [ 140.809897][ T6456] overlayfs: failed to resolve '/zhTɖ>JvwG9[89l4ah/(`ï[q/sys/devices/system/cpu/cpu1/hotplug/target': -2 [ 140.969022][ T6455] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.983506][ T6455] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.003006][ T6455] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.169858][ T5785] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 141.378594][ T6488] fuse: Unknown parameter '00000000000000000004xC(t TIHo_00000000000000000000004I' [ 142.381764][ T6497] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 142.757190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 143.296164][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.302466][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.308651][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.255286][ T27] audit: type=1800 audit(1790551346.614:2): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.195" name="UDC" dev="configfs" ino=9103 res=0 errno=0 [ 145.342864][ T6513] configfs-gadget.g1 gadget.0: HOST MAC d6:51:f0:7e:85:1f [ 145.361928][ T6513] configfs-gadget.g1 gadget.0: MAC 3a:ba:d6:28:28:33 [ 145.647237][ T5821] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.848782][ T5821] usb 1-1: Dual-Role OTG device on HNP port [ 145.880764][ T5821] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 145.914051][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.093441][ T5821] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, d6:51:f0:7e:85:1f [ 146.367871][ T6528] fuse: Unknown parameter '00000000000000000004xC(t TIHo_00000000000000000000004I' [ 146.534929][ T6511] loop3: detected capacity change from 0 to 32768 [ 146.597593][ T6511] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.796934][ T6511] XFS (loop3): Ending clean mount [ 146.856758][ T6511] overlayfs: failed to resolve '/zhTɖ>JvwG9[89l4ah/(`ï[q/sys/devices/system/cpu/cpu1/hotplug/target': -2 [ 147.029330][ T6510] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.041599][ T6510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.071739][ T6510] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.089667][ T6510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.103709][ T6548] xt_hashlimit: size too large, truncated to 1048576 [ 147.218540][ T5784] Bluetooth: hci0: command 0x0c24 tx timeout [ 147.324205][ T5786] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.247578][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.253683][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.259773][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.946052][ T6594] comedi comedi3: Buffer allocation failed [ 155.234635][ T6593] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.318233][ T6593] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.324622][ T6593] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.347571][ T6593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.708017][ T787] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 155.917152][ T787] usb 2-1: device descriptor read/64, error -71 [ 156.017573][ T5780] Bluetooth: hci0: command 0x0c24 tx timeout [ 156.187715][ T787] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 156.367285][ T787] usb 2-1: device descriptor read/64, error -71 [ 156.487500][ T787] usb usb2-port1: attempt power cycle [ 156.819434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 156.907149][ T787] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 156.967894][ T787] usb 2-1: device descriptor read/8, error -71 [ 157.267465][ T787] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 157.377310][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.383621][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.389943][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.625845][ T787] usb 2-1: device descriptor read/8, error -71 [ 157.795273][ T787] usb usb2-port1: unable to enumerate USB device [ 158.944828][ T6657] fuse: Unknown parameter '00000000000000000004xC(t TIHo_00000000000000000000004I' [ 161.030664][ T6670] loop1: detected capacity change from 0 to 32768 [ 161.114333][ T6670] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 161.137977][ T5780] Bluetooth: hci0: command 0x0c24 tx timeout [ 161.144200][ T6663] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 161.320346][ T6670] XFS (loop1): Ending clean mount [ 161.409785][ T6670] overlayfs: failed to resolve '/zhTɖ>JvwG9[89l4ah/(`ï[q/sys/devices/system/cpu/cpu1/hotplug/target': -2 [ 161.595342][ T6663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.607927][ T6663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.657462][ T6663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.708128][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.757926][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.849453][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.103634][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.129739][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.218178][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.618040][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.698488][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.848579][ T6754] program syz.1.240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.497754][ T5780] Bluetooth: hci0: command 0x0c24 tx timeout [ 166.521106][ T6740] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 166.792518][ T6742] loop2: detected capacity change from 0 to 32768 [ 166.911847][ T6742] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 167.311946][ T6740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.357933][ T6740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.437449][ T6740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.450871][ T6742] XFS (loop2): Ending clean mount [ 167.547140][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.698178][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.909648][ T5776] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 168.658212][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.980369][ T969] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 169.212806][ T969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.227183][ T969] usb 2-1: config 0 has no interfaces? [ 169.267727][ T969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 169.317667][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.346758][ T969] usb 2-1: SerialNumber: syz [ 169.370500][ T969] usb 2-1: config 0 descriptor?? [ 169.377444][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.457551][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.298046][ T5819] usb 2-1: USB disconnect, device number 13 [ 172.977799][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.057526][ T5784] Bluetooth: hci0: command 0x0c24 tx timeout [ 175.063821][ T6822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 175.282432][ T6822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.330845][ T6822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.413877][ T6822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.887280][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 176.079502][ T9] usb 3-1: device descriptor read/64, error -71 [ 176.367977][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 176.547139][ T9] usb 3-1: device descriptor read/64, error -71 [ 176.693159][ T9] usb usb3-port1: attempt power cycle [ 177.147518][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 177.207156][ T5868] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 177.227153][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.337162][ T9] usb 3-1: device descriptor read/8, error -71 [ 177.387176][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.457610][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.591351][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.627453][ T5868] usb 2-1: config 0 has no interfaces? [ 177.654354][ T5868] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 177.687948][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.707761][ T5868] usb 2-1: SerialNumber: syz [ 177.763077][ T5868] usb 2-1: config 0 descriptor?? [ 179.628224][ T6878] binder: 6877:6878 unknown command 1074553619 [ 179.634462][ T6878] binder: 6877:6878 ioctl c0306201 200000000040 returned -22 [ 179.675201][ T5821] usb 2-1: USB disconnect, device number 14 [ 179.791708][ T6888] binder: 6877:6888 unknown command 1074553620 [ 179.927395][ T6888] binder: 6877:6888 ioctl c0306201 200000000640 returned -22 [ 183.474896][ T6936] fuse: Unknown parameter '00000000000000000004xC(t TIHo_00000000000000000000004I' [ 183.518054][ T6922] loop3: detected capacity change from 0 to 32768 [ 183.642363][ T6922] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 183.845698][ T6922] XFS (loop3): Ending clean mount [ 183.897871][ T6922] overlayfs: failed to resolve '/zhTɖ>JvwG9[89l4ah/(`ï[q/sys/devices/system/cpu/cpu1/hotplug/target': -2 [ 184.082654][ T6919] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 184.107461][ T5784] Bluetooth: hci0: command 0x0c24 tx timeout [ 184.117524][ T6919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.172631][ T6919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 184.189656][ T6919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 184.371159][ T5786] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 184.621940][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.678343][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.707201][ T5766] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 184.867236][ T5766] usb 3-1: device descriptor read/64, error -71 [ 185.867928][ T5766] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 186.107224][ T5766] usb 3-1: device descriptor read/64, error -71 [ 186.177797][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.178227][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.227472][ T5766] usb usb3-port1: attempt power cycle [ 186.257283][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.677198][ T5766] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 187.355834][ T5766] usb 3-1: device descriptor read/8, error -71 [ 187.611245][ T6970] FAULT_INJECTION: forcing a failure. [ 187.611245][ T6970] name failslab, interval 1, probability 0, space 0, times 0 [ 187.667205][ T6970] CPU: 1 PID: 6970 Comm: syz.3.281 Not tainted syzkaller #0 [ 187.674583][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.684689][ T6970] Call Trace: [ 187.688011][ T6970] [ 187.690982][ T6970] dump_stack_lvl+0x18c/0x250 [ 187.695747][ T6970] ? show_regs_print_info+0x20/0x20 [ 187.701006][ T6970] ? load_image+0x420/0x420 [ 187.705570][ T6970] ? __might_sleep+0xe0/0xe0 [ 187.710218][ T6970] ? __lock_acquire+0x7d80/0x7d80 [ 187.715293][ T6970] ? do_syscall_64+0x55/0xb0 [ 187.719950][ T6970] should_fail_ex+0x394/0x4c0 [ 187.724688][ T6970] should_failslab+0x9/0x20 [ 187.729259][ T6970] slab_pre_alloc_hook+0x59/0x300 [ 187.734349][ T6970] ? vhost_worker_create+0xbf/0x350 [ 187.739600][ T6970] __kmem_cache_alloc_node+0x53/0x250 [ 187.745035][ T6970] ? vhost_worker_create+0xbf/0x350 [ 187.750296][ T6970] kmalloc_trace+0x2a/0xe0 [ 187.754778][ T6970] vhost_worker_create+0xbf/0x350 [ 187.759856][ T6970] ? vhost_dev_set_owner+0x9b0/0x9b0 [ 187.765187][ T6970] ? __kmem_cache_alloc_node+0x194/0x250 [ 187.770877][ T6970] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 187.776213][ T6970] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 187.781549][ T6970] ? __kmalloc+0xe5/0x240 [ 187.785938][ T6970] vhost_dev_set_owner+0x5c8/0x9b0 [ 187.791113][ T6970] vhost_dev_ioctl+0xa9/0xc00 [ 187.795881][ T6970] ? vhost_vsock_dev_ioctl+0x230/0xdd0 [ 187.801395][ T6970] ? mutex_lock_nested+0x20/0x20 [ 187.806391][ T6970] ? vhost_init_device_iotlb+0x200/0x200 [ 187.812092][ T6970] vhost_vsock_dev_ioctl+0x23e/0xdd0 [ 187.817448][ T6970] ? vhost_vsock_chr_poll+0x50/0x50 [ 187.822707][ T6970] ? bpf_lsm_file_ioctl+0x9/0x10 [ 187.827693][ T6970] ? security_file_ioctl+0x80/0xa0 [ 187.832866][ T6970] ? vhost_vsock_chr_poll+0x50/0x50 [ 187.838152][ T6970] __se_sys_ioctl+0xfd/0x170 [ 187.842831][ T6970] do_syscall_64+0x55/0xb0 [ 187.847298][ T6970] ? clear_bhb_loop+0x40/0x90 [ 187.852033][ T6970] ? clear_bhb_loop+0x40/0x90 [ 187.856801][ T6970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.862750][ T6970] RIP: 0033:0x7f90a4b9e159 [ 187.867236][ T6970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.886908][ T6970] RSP: 002b:00007f90a5b48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.895395][ T6970] RAX: ffffffffffffffda RBX: 00007f90a4e25fa0 RCX: 00007f90a4b9e159 [ 187.903417][ T6970] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 187.911440][ T6970] RBP: 00007f90a4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 187.919459][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.927482][ T6970] R13: 00007f90a4e26038 R14: 00007f90a4e25fa0 R15: 00007fff3ec55768 [ 187.935524][ T6970] [ 187.938597][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.956133][ T6987] loop1: detected capacity change from 0 to 32768 [ 191.082823][ T6987] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 191.217385][ T5784] Bluetooth: hci0: command 0x0c24 tx timeout [ 191.224254][ T6986] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 191.365866][ T6987] XFS (loop1): Ending clean mount [ 191.469419][ T6987] overlayfs: failed to resolve '/zhTɖ>JvwG9[89l4ah/(`ï[q/sys/devices/system/cpu/cpu1/hotplug/target': -2 [ 191.643734][ T6986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.677203][ T6986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.718184][ T6986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.580863][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.587277][ T969] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 193.700539][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.734949][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.777100][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.918144][ T969] usb 4-1: device descriptor read/all, error -71 [ 194.520858][ T7021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.583432][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.589933][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.607694][ T7021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.777153][ T5819] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 196.977368][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 196.984946][ T5819] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 197.005785][ T5819] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 197.037445][ T5819] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 197.280476][ T5819] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 197.297222][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.305284][ T5819] usb 3-1: Product: syz [ 197.319526][ T5819] usb 3-1: Manufacturer: syz [ 197.324192][ T5819] usb 3-1: SerialNumber: syz [ 197.355675][ T5819] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 197.389844][ T5819] imon 3-1:155.0: unable to initialize intf0, err -19 [ 197.396723][ T5819] imon:imon_probe: failed to initialize context! [ 197.447144][ T5819] imon 3-1:155.0: unable to register, err -19 [ 198.260664][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 198.643210][ T7046] loop0: detected capacity change from 0 to 32768 [ 198.726141][ T7046] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.854290][ T7046] XFS (loop0): Ending clean mount [ 198.889956][ T7046] overlayfs: failed to resolve '/zhTɖ>JvwG9[89l4ah/(`ï[q/sys/devices/system/cpu/cpu1/hotplug/target': -2 [ 198.907652][ T7045] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 198.914039][ T5784] Bluetooth: hci0: command 0x0c24 tx timeout [ 199.053529][ T7045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.342519][ T7045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.572275][ T7045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.678628][ T5785] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.867263][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 200.278854][ T9] usb 2-1: device not accepting address 15, error -71 [ 200.321812][ T7075] fuse: Unknown parameter '00000000000000000003xC(t TIHo_00000000000000000000003I' [ 200.983047][ T5784] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.262585][ T787] usb 3-1: USB disconnect, device number 11 [ 201.377255][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.617771][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.697567][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 201.867146][ T9] usb 2-1: device descriptor read/64, error -71 [ 202.158355][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 202.382525][ T9] usb 2-1: device descriptor read/64, error -71 [ 202.542676][ T9] usb usb2-port1: attempt power cycle [ 203.137160][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 203.260518][ T9] usb 2-1: device descriptor read/8, error -71 [ 204.507197][ T5784] Bluetooth: hci0: command 0x0c24 tx timeout [ 204.517217][ T7099] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 205.090123][ T7100] loop0: detected capacity change from 0 to 32768 [ 205.199289][ T7100] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.296326][ T7099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.303136][ T7099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.418802][ T7099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.483854][ T7100] XFS (loop0): Ending clean mount [ 205.628313][ T5785] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.697871][ T5819] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 205.717747][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 205.977132][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 205.985700][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.008055][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.017761][ T5819] usb 2-1: config 0 has no interfaces? [ 206.028540][ T5819] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 206.047069][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 206.067067][ T5819] usb 2-1: SerialNumber: syz [ 206.077129][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.108365][ T5819] usb 2-1: config 0 descriptor?? [ 206.127096][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.187429][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.237237][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.278604][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.577313][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.390235][ T5780] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.457203][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.626940][ T5821] usb 2-1: USB disconnect, device number 21 [ 207.671876][ T7130] fuse: Unknown parameter '00000000000000000003xC(t TIHo_00000000000000000000003I' [ 207.927327][ T9] usb 3-1: usb_control_msg returned -71 [ 207.933050][ T9] usbtmc 3-1:16.0: can't read capabilities [ 208.037652][ T9] usb 3-1: USB disconnect, device number 12 [ 208.337257][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.447432][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.327226][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.360287][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.546514][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.676244][ T7146] block nbd1: NBD_DISCONNECT [ 210.587365][ T969] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 210.667137][ T5819] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 210.790053][ T969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.813430][ T969] usb 2-1: config 0 has no interfaces? [ 210.841754][ T969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 210.867429][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.875721][ T969] usb 2-1: SerialNumber: syz [ 210.917310][ T5819] usb 3-1: device descriptor read/64, error -71 [ 210.928274][ T969] usb 2-1: config 0 descriptor?? [ 211.267289][ T5819] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 212.857107][ T5819] usb 3-1: device descriptor read/64, error -71 [ 212.988424][ T5819] usb usb3-port1: attempt power cycle [ 213.217236][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.303946][ T23] usb 2-1: USB disconnect, device number 22 [ 216.557372][ T5868] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 216.800326][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 216.840938][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.856723][ T7191] gfs2: not a GFS2 filesystem [ 216.875156][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.909870][ T5868] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 216.929503][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.964918][ T5868] usb 3-1: config 0 descriptor?? [ 217.097493][ T27] audit: type=1800 audit(1790551418.464:3): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.336" name="sub_compatible_id" dev="configfs" ino=9940 res=0 errno=0 [ 217.399043][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.423065][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 217.447977][ T5868] usbhid 3-1:0.0: can't add hid device: -71 [ 217.464405][ T5868] usbhid: probe of 3-1:0.0 failed with error -71 [ 217.481839][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.505274][ T5868] usb 3-1: USB disconnect, device number 16 [ 219.697185][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.967270][ T969] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 221.739985][ T969] usb 2-1: device descriptor read/64, error -71 [ 222.047175][ T969] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 223.407801][ T7224] FAULT_INJECTION: forcing a failure. [ 223.407801][ T7224] name fail_futex, interval 1, probability 0, space 0, times 1 [ 223.654328][ T7224] CPU: 0 PID: 7224 Comm: syz.2.347 Not tainted syzkaller #0 [ 223.661711][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.671803][ T7224] Call Trace: [ 223.675199][ T7224] [ 223.678158][ T7224] dump_stack_lvl+0x18c/0x250 [ 223.682967][ T7224] ? show_regs_print_info+0x20/0x20 [ 223.688307][ T7224] ? load_image+0x420/0x420 [ 223.692847][ T7224] ? min_deadline_cb_rotate+0x150/0x150 [ 223.698429][ T7224] should_fail_ex+0x394/0x4c0 [ 223.703153][ T7224] get_futex_key+0x136/0x1030 [ 223.707869][ T7224] ? futex_setup_timer+0xc0/0xc0 [ 223.712838][ T7224] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 223.718854][ T7224] ? __lock_acquire+0x7d80/0x7d80 [ 223.723911][ T7224] ? lock_chain_count+0x20/0x20 [ 223.728802][ T7224] futex_wait_setup+0xbc/0x270 [ 223.733621][ T7224] ? futex_wait_multiple+0x920/0x920 [ 223.738933][ T7224] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 223.744861][ T7224] ? _raw_spin_unlock+0x40/0x40 [ 223.749750][ T7224] futex_wait+0x1bc/0x5c0 [ 223.754120][ T7224] ? futex_wait_setup+0x270/0x270 [ 223.759206][ T7224] do_futex+0x2ff/0x3e0 [ 223.763402][ T7224] ? __ia32_sys_get_robust_list+0x110/0x110 [ 223.769334][ T7224] ? do_seccomp+0x3d0/0xdc0 [ 223.773882][ T7224] __se_sys_futex+0x3a9/0x440 [ 223.778600][ T7224] ? __x64_sys_futex+0xf0/0xf0 [ 223.783400][ T7224] ? __x64_sys_futex+0x21/0xf0 [ 223.788194][ T7224] do_syscall_64+0x55/0xb0 [ 223.792642][ T7224] ? clear_bhb_loop+0x40/0x90 [ 223.797353][ T7224] ? clear_bhb_loop+0x40/0x90 [ 223.802074][ T7224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.808004][ T7224] RIP: 0033:0x7f851a79e159 [ 223.812486][ T7224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.832164][ T7224] RSP: 002b:00007f851b6d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 223.840621][ T7224] RAX: ffffffffffffffda RBX: 00007f851aa25fa8 RCX: 00007f851a79e159 [ 223.848631][ T7224] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f851aa25fa8 [ 223.856628][ T7224] RBP: 00007f851aa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 223.864624][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.872627][ T7224] R13: 00007f851aa26038 R14: 00007ffc71d469c0 R15: 00007ffc71d46aa8 [ 223.880652][ T7224] [ 225.304849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.387248][ T969] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 225.601316][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 225.613201][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.657108][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.695999][ T969] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 225.767185][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.832737][ T969] usb 2-1: config 0 descriptor?? [ 226.287238][ T969] usbhid 2-1:0.0: can't add hid device: -71 [ 226.293662][ T969] usbhid: probe of 2-1:0.0 failed with error -71 [ 226.349530][ T969] usb 2-1: USB disconnect, device number 25 [ 226.578765][ T971] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 226.767887][ T7248] FAULT_INJECTION: forcing a failure. [ 226.767887][ T7248] name failslab, interval 1, probability 0, space 0, times 0 [ 226.819300][ T7248] CPU: 1 PID: 7248 Comm: syz.0.355 Not tainted syzkaller #0 [ 226.821469][ T971] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.826650][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.826692][ T7248] Call Trace: [ 226.826702][ T7248] [ 226.826712][ T7248] dump_stack_lvl+0x18c/0x250 [ 226.826753][ T7248] ? show_regs_print_info+0x20/0x20 [ 226.826784][ T7248] ? load_image+0x420/0x420 [ 226.826811][ T7248] ? __lock_acquire+0x7d80/0x7d80 [ 226.826838][ T7248] ? verify_lock_unused+0x140/0x140 [ 226.826868][ T7248] should_fail_ex+0x394/0x4c0 [ 226.826905][ T7248] should_failslab+0x9/0x20 [ 226.826938][ T7248] slab_pre_alloc_hook+0x59/0x300 [ 226.826970][ T7248] ? verify_lock_unused+0x140/0x140 [ 226.827000][ T7248] kmem_cache_alloc_lru+0x4d/0x2b0 [ 226.827048][ T7248] ? __d_alloc+0x31/0x710 [ 226.827075][ T7248] __d_alloc+0x31/0x710 [ 226.827101][ T7248] d_alloc_parallel+0xe0/0x1590 [ 226.827128][ T7248] ? __d_lookup+0x8f/0x7c0 [ 226.827152][ T7248] ? __lock_acquire+0x7d80/0x7d80 [ 226.827188][ T7248] ? __d_lookup+0x8f/0x7c0 [ 226.827211][ T7248] ? d_hash_and_lookup+0x1b0/0x1b0 [ 226.827252][ T7248] path_openat+0x955/0x3270 [ 226.827301][ T7248] ? do_sys_openat2+0xda/0x1d0 [ 226.827337][ T7248] ? do_filp_open+0x430/0x430 [ 226.827382][ T7248] do_filp_open+0x1f2/0x430 [ 226.827412][ T7248] ? vfs_tmpfile+0x620/0x620 [ 226.827446][ T7248] ? noop_direct_IO+0x20/0x20 [ 226.827482][ T7248] ? _raw_spin_unlock+0x28/0x40 [ 226.827507][ T7248] ? alloc_fd+0x590/0x640 [ 226.827546][ T7248] do_sys_openat2+0x134/0x1d0 [ 226.917245][ T971] usb 3-1: config 0 has no interfaces? [ 226.921351][ T7248] ? do_sys_open+0xe0/0xe0 [ 226.921389][ T7248] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 226.921422][ T7248] ? lock_chain_count+0x20/0x20 [ 226.921454][ T7248] __x64_sys_openat+0x139/0x160 [ 226.921490][ T7248] do_syscall_64+0x55/0xb0 [ 227.008094][ T7248] ? clear_bhb_loop+0x40/0x90 [ 227.012845][ T7248] ? clear_bhb_loop+0x40/0x90 [ 227.017594][ T7248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.023563][ T7248] RIP: 0033:0x7fe52555e98e [ 227.028030][ T7248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 227.047701][ T7248] RSP: 002b:00007fe52653aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 227.056183][ T7248] RAX: ffffffffffffffda RBX: 00007fe52653b6c0 RCX: 00007fe52555e98e [ 227.064218][ T7248] RDX: 0000000000000002 RSI: 00007fe52653af90 RDI: ffffffffffffff9c [ 227.072341][ T7248] RBP: 00007fe52563506b R08: 0000000000000000 R09: 0000000000000000 [ 227.080377][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.088524][ T7248] R13: 00007fe525826038 R14: 00007fe525825fa0 R15: 00007ffc22373c68 [ 227.096568][ T7248] [ 227.107282][ T971] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 227.116597][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 227.207110][ T971] usb 3-1: SerialNumber: syz [ 227.240681][ T971] usb 3-1: config 0 descriptor?? [ 227.410762][ T7252] FAULT_INJECTION: forcing a failure. [ 227.410762][ T7252] name fail_futex, interval 1, probability 0, space 0, times 0 [ 227.425373][ T7252] CPU: 1 PID: 7252 Comm: syz.1.356 Not tainted syzkaller #0 [ 227.432724][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.442830][ T7252] Call Trace: [ 227.446155][ T7252] [ 227.449125][ T7252] dump_stack_lvl+0x18c/0x250 [ 227.453883][ T7252] ? show_regs_print_info+0x20/0x20 [ 227.459153][ T7252] ? load_image+0x420/0x420 [ 227.463703][ T7252] ? search_extable+0x90/0xd0 [ 227.468433][ T7252] ? trim_init_extable+0x6f0/0x6f0 [ 227.473686][ T7252] should_fail_ex+0x394/0x4c0 [ 227.478430][ T7252] get_futex_key+0x136/0x1030 [ 227.483161][ T7252] ? futex_wait+0x4a7/0x5c0 [ 227.487759][ T7252] ? futex_setup_timer+0xc0/0xc0 [ 227.492758][ T7252] futex_wake+0x127/0x4f0 [ 227.497155][ T7252] ? futex_wake_mark+0x150/0x150 [ 227.502184][ T7252] ? exc_page_fault+0x8c/0x100 [ 227.507013][ T7252] do_futex+0x35d/0x3e0 [ 227.511222][ T7252] ? __ia32_sys_get_robust_list+0x110/0x110 [ 227.517162][ T7252] ? do_seccomp+0x3d0/0xdc0 [ 227.521821][ T7252] __se_sys_futex+0x3a9/0x440 [ 227.526568][ T7252] ? __x64_sys_futex+0xf0/0xf0 [ 227.531395][ T7252] ? __x64_sys_futex+0x21/0xf0 [ 227.536224][ T7252] do_syscall_64+0x55/0xb0 [ 227.540695][ T7252] ? clear_bhb_loop+0x40/0x90 [ 227.545454][ T7252] ? clear_bhb_loop+0x40/0x90 [ 227.550204][ T7252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.556244][ T7252] RIP: 0033:0x7ff31bd9e159 [ 227.560711][ T7252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.580379][ T7252] RSP: 002b:00007ff31cc3d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.588954][ T7252] RAX: ffffffffffffffda RBX: 00007ff31c025fa8 RCX: 00007ff31bd9e159 [ 227.596969][ T7252] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff31c025fac [ 227.604995][ T7252] RBP: 00007ff31c025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 227.613017][ T7252] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 227.621042][ T7252] R13: 00007ff31c026038 R14: 00007ffe10cdb3d0 R15: 00007ffe10cdb4b8 [ 227.629075][ T7252] [ 229.287414][ T5819] usb 3-1: USB disconnect, device number 17 [ 229.777481][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 231.017264][ T5821] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 231.237276][ T5821] usb 2-1: device descriptor read/64, error -71 [ 231.637353][ T5821] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 231.718692][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.747911][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.797538][ T5821] usb 2-1: device descriptor read/64, error -71 [ 231.927568][ T5821] usb usb2-port1: attempt power cycle [ 232.397239][ T5821] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 232.651468][ T5821] usb 2-1: device not accepting address 28, error -71 [ 232.939365][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 232.979807][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.366'. [ 234.177528][ T5821] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 234.389754][ T5821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.415558][ T5821] usb 2-1: config 0 has no interfaces? [ 234.426957][ T5821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 234.466555][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.505672][ T5821] usb 2-1: SerialNumber: syz [ 234.544936][ T5821] usb 2-1: config 0 descriptor?? [ 236.721006][ T971] usb 2-1: USB disconnect, device number 30 [ 236.897402][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 236.927168][ T23] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 237.087174][ T23] usb 4-1: device descriptor read/64, error -71 [ 237.367195][ T23] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 237.542988][ T23] usb 4-1: device descriptor read/64, error -71 [ 237.857311][ T23] usb usb4-port1: attempt power cycle [ 238.307157][ T23] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 238.669747][ T23] usb 4-1: device descriptor read/8, error -71 [ 239.364016][ T5819] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 239.557325][ T5821] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 239.574888][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.585600][ T5819] usb 3-1: config 0 has no interfaces? [ 239.612841][ T5819] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 239.626084][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 239.655583][ T5819] usb 3-1: SerialNumber: syz [ 239.675084][ T5819] usb 3-1: config 0 descriptor?? [ 239.749455][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 239.759858][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.791436][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.817287][ T5821] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 239.846668][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.888628][ T5821] usb 2-1: config 0 descriptor?? [ 240.394571][ T5821] usbhid 2-1:0.0: can't add hid device: -71 [ 240.429488][ T5821] usbhid: probe of 2-1:0.0 failed with error -71 [ 240.478256][ T5821] usb 2-1: USB disconnect, device number 31 [ 241.260278][ T5784] ------------[ cut here ]------------ [ 241.266752][ T5784] WARNING: CPU: 1 PID: 5784 at net/bluetooth/hci_conn.c:579 hci_conn_timeout+0xf9/0x290 [ 241.276886][ T5784] Modules linked in: [ 241.280870][ T5784] CPU: 1 PID: 5784 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 241.288598][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.298879][ T5784] Workqueue: hci3 hci_conn_timeout [ 241.304066][ T5784] RIP: 0010:hci_conn_timeout+0xf9/0x290 [ 241.309813][ T5784] Code: f7 48 89 df e8 a8 ee 08 00 eb 07 e8 a1 6b f7 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 cc e2 fe ff e8 87 6b f7 f7 <0f> 0b eb 8e 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 4c [ 241.329762][ T5784] RSP: 0018:ffffc90004607b90 EFLAGS: 00010293 [ 241.335894][ T5784] RAX: ffffffff89901fc9 RBX: ffff888052d76000 RCX: ffff88802f819e00 [ 241.344109][ T5784] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 241.352195][ T5784] RBP: 00000000ffffffff R08: ffff888052d76013 R09: 1ffff1100a5aec02 [ 241.360262][ T5784] R10: dffffc0000000000 R11: ffffed100a5aec03 R12: dffffc0000000000 [ 241.369102][ T5784] R13: 0000000000000001 R14: ffff888052d76350 R15: ffff888052d76010 [ 241.377301][ T5784] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 241.386279][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.392981][ T5784] CR2: 00007f90a5b26ff8 CR3: 000000002545f000 CR4: 00000000003506e0 [ 241.401066][ T5784] Call Trace: [ 241.404389][ T5784] [ 241.407471][ T5784] ? process_scheduled_works+0x975/0x1600 [ 241.413260][ T5784] process_scheduled_works+0xa60/0x1600 [ 241.419003][ T5784] ? worker_attach_to_pool+0x370/0x370 [ 241.424527][ T5784] ? assign_work+0x3cc/0x5d0 [ 241.429243][ T5784] worker_thread+0xa5e/0xfe0 [ 241.433902][ T5784] ? _raw_spin_unlock+0x40/0x40 [ 241.438900][ T5784] ? __kthread_parkme+0x71/0x1c0 [ 241.443906][ T5784] kthread+0x2fa/0x390 [ 241.448101][ T5784] ? pr_cont_work+0x550/0x550 [ 241.452839][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 241.457570][ T5784] ret_from_fork+0x48/0x80 [ 241.462055][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 241.466700][ T5784] ret_from_fork_asm+0x11/0x20 [ 241.472369][ T5784] [ 241.475438][ T5784] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 241.482755][ T5784] CPU: 1 PID: 5784 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 241.490340][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.500459][ T5784] Workqueue: hci3 hci_conn_timeout [ 241.505629][ T5784] Call Trace: [ 241.508941][ T5784] [ 241.511919][ T5784] dump_stack_lvl+0x18c/0x250 [ 241.516655][ T5784] ? show_regs_print_info+0x20/0x20 [ 241.521903][ T5784] ? load_image+0x420/0x420 [ 241.526478][ T5784] panic+0x2ca/0x720 [ 241.530427][ T5784] ? bpf_jit_dump+0xd0/0xd0 [ 241.534993][ T5784] ? ret_from_fork_asm+0x11/0x20 [ 241.540003][ T5784] __warn+0x2e0/0x470 [ 241.544034][ T5784] ? hci_conn_timeout+0xf9/0x290 [ 241.549033][ T5784] ? hci_conn_timeout+0xf9/0x290 [ 241.554024][ T5784] report_bug+0x2be/0x4f0 [ 241.558405][ T5784] ? hci_conn_timeout+0xf9/0x290 [ 241.563397][ T5784] ? hci_conn_timeout+0xf9/0x290 [ 241.568386][ T5784] ? hci_conn_timeout+0xfb/0x290 [ 241.573378][ T5784] handle_bug+0xcf/0x120 [ 241.577675][ T5784] exc_invalid_op+0x1a/0x50 [ 241.582230][ T5784] asm_exc_invalid_op+0x1a/0x20 [ 241.587145][ T5784] RIP: 0010:hci_conn_timeout+0xf9/0x290 [ 241.592833][ T5784] Code: f7 48 89 df e8 a8 ee 08 00 eb 07 e8 a1 6b f7 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 cc e2 fe ff e8 87 6b f7 f7 <0f> 0b eb 8e 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 4c [ 241.612695][ T5784] RSP: 0018:ffffc90004607b90 EFLAGS: 00010293 [ 241.618813][ T5784] RAX: ffffffff89901fc9 RBX: ffff888052d76000 RCX: ffff88802f819e00 [ 241.626835][ T5784] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 241.634862][ T5784] RBP: 00000000ffffffff R08: ffff888052d76013 R09: 1ffff1100a5aec02 [ 241.642876][ T5784] R10: dffffc0000000000 R11: ffffed100a5aec03 R12: dffffc0000000000 [ 241.650899][ T5784] R13: 0000000000000001 R14: ffff888052d76350 R15: ffff888052d76010 [ 241.658927][ T5784] ? hci_conn_timeout+0xf9/0x290 [ 241.664086][ T5784] ? process_scheduled_works+0x975/0x1600 [ 241.669868][ T5784] process_scheduled_works+0xa60/0x1600 [ 241.675496][ T5784] ? worker_attach_to_pool+0x370/0x370 [ 241.681031][ T5784] ? assign_work+0x3cc/0x5d0 [ 241.685680][ T5784] worker_thread+0xa5e/0xfe0 [ 241.690336][ T5784] ? _raw_spin_unlock+0x40/0x40 [ 241.695235][ T5784] ? __kthread_parkme+0x71/0x1c0 [ 241.700237][ T5784] kthread+0x2fa/0x390 [ 241.704351][ T5784] ? pr_cont_work+0x550/0x550 [ 241.709088][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 241.713733][ T5784] ret_from_fork+0x48/0x80 [ 241.718199][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 241.722837][ T5784] ret_from_fork_asm+0x11/0x20 [ 241.727675][ T5784] [ 241.731306][ T5784] Kernel Offset: disabled [ 241.735731][ T5784] Rebooting in 86400 seconds..