last executing test programs: 2m5.808518434s ago: executing program 2 (id=238): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d03000000"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000020c0), 0x802, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) eventfd2(0x0, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) 2m1.90535305s ago: executing program 2 (id=252): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x4000) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) 2m0.247884007s ago: executing program 2 (id=257): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2002, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) 2m0.0914721s ago: executing program 2 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m57.051918058s ago: executing program 2 (id=265): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) 1m56.395870172s ago: executing program 2 (id=268): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m55.071123192s ago: executing program 32 (id=268): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 8.855418393s ago: executing program 0 (id=597): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, 0x0}, 0x40000010) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48', 0x8) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.635512481s ago: executing program 0 (id=603): syz_usbip_server_init(0x1) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0xa, &(0x7f0000000180)={0x26, 0x6, 0x50}) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f00000018c0)={&(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) gettimeofday(0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000090) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='hugetlb.1GB.usage_in_bytes\x00', &(0x7f0000000240)='hugetlb.1GB.usage_in_bytes\x00', 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x2002724) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 7.372079656s ago: executing program 1 (id=606): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) 6.7666567s ago: executing program 4 (id=609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000140001002abd70004700000064010100000000000000000000000000e00000010000000000000000000000004e2100044e230003020020e084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b8eb199d6a"], 0x64}, 0x1, 0x0, 0x0, 0x24000884}, 0x4048010) 6.526471985s ago: executing program 1 (id=610): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r0, &(0x7f0000004b40)=[{&(0x7f0000003700)=""/160, 0xa0}, {0x0}, {&(0x7f00000038c0)=""/143, 0x8f}, {&(0x7f0000003980)=""/145, 0x91}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000003b00)=""/51, 0x33}, {&(0x7f0000004c00)=""/4110, 0x100e}], 0x8, 0xfffffffb, 0x1, 0x12) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x141081) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$bind(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000200), 0x4, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) getsockopt$llc_int(r4, 0x10c, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{&(0x7f0000000540)=@rc={0x1f, @fixed}, 0x80, 0x0}}], 0x1, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x24000800) 6.439916857s ago: executing program 4 (id=611): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$kcm(0x29, 0x7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 5.469562799s ago: executing program 1 (id=612): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) 4.806409953s ago: executing program 0 (id=613): sched_setscheduler(0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r1, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x8200, 0x200, 0xa, [0x40]}}}}, 0x17) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$team(&(0x7f0000000200), r2) 4.619916367s ago: executing program 4 (id=614): open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x182) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000001603000003"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_init() r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.474968121s ago: executing program 4 (id=616): unshare(0x28000600) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x34}, 0x94) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) syz_usb_connect$uac1(0x3, 0x79, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 4.131903338s ago: executing program 1 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x94, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f00005a7000/0x4000)=nil, 0x4000, 0x280000f, 0x28011, r6, 0xd9979000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.353117965s ago: executing program 3 (id=619): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x76, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 3.183913069s ago: executing program 3 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 3.183585209s ago: executing program 0 (id=621): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000080)=0x9, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x400, {r6, r7/1000+60000}, {0x0, 0x2, 0x0, 0x4, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r8}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r4, 0x5501) 3.102767071s ago: executing program 3 (id=622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.830617039s ago: executing program 0 (id=623): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/233, 0xe9}], 0x1}, 0x7fffffff}], 0x1, 0x0, 0x0) 1.663902223s ago: executing program 1 (id=624): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x110, 0x1000000, 0xffffffff, 0x110, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x110, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x1, 0x4, 0x2, 0x0, 0x2, 0x4], 0x5, 0x1}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x310) 1.534923835s ago: executing program 3 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(0x0, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0xee00, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000005100850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, 0x0}, 0x20) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 1.097184816s ago: executing program 4 (id=626): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x4b) 204.018205ms ago: executing program 3 (id=627): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000340)={0xd, {{0x2, 0x4e24, @broadcast}}}, 0x88) 186.232225ms ago: executing program 1 (id=628): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x8}, 0x50) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r2, &(0x7f0000000300)=""/74, 0x4a) socket(0x1e, 0x4, 0x0) 131.940557ms ago: executing program 0 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, 0x0, 0x0, 0x40010001, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x200) 61.722368ms ago: executing program 3 (id=630): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="002ea6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 0s ago: executing program 4 (id=631): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000001880)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x40, 0xe, {0x8, 0xb, 0x2, 0x1, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa, 0xffff0001}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x5, 0x6, {0xa, 0x25, 0x25, 0x3e6, 0x89, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfc, 0x9, 0x7, {0xa, 0x25, 0x25, 0x5, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) kernel console output (not intermixed with test programs): T5775] bridge_slave_1: entered allmulticast mode [ 83.518090][ T5775] bridge_slave_1: entered promiscuous mode [ 83.536112][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.543511][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.550913][ T5773] bridge_slave_0: entered allmulticast mode [ 83.557936][ T5773] bridge_slave_0: entered promiscuous mode [ 83.587333][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.594584][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.620962][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.633272][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.641161][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.648360][ T5773] bridge_slave_1: entered allmulticast mode [ 83.656296][ T5773] bridge_slave_1: entered promiscuous mode [ 83.684785][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.692063][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.718195][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.743638][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.755865][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.792152][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.807534][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.830565][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.843895][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.918235][ T5775] team0: Port device team_slave_0 added [ 83.939463][ T5774] team0: Port device team_slave_0 added [ 83.951937][ T5776] hsr_slave_0: entered promiscuous mode [ 83.958403][ T5776] hsr_slave_1: entered promiscuous mode [ 83.967130][ T5775] team0: Port device team_slave_1 added [ 83.995232][ T5773] team0: Port device team_slave_0 added [ 84.003154][ T5774] team0: Port device team_slave_1 added [ 84.024523][ T5773] team0: Port device team_slave_1 added [ 84.065738][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.072863][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.099269][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.124030][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.131318][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.157941][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.171441][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.178465][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.204487][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.224705][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.231957][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.257946][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.331634][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.338648][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.365151][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.402470][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.413221][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.439305][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.451093][ T5782] Bluetooth: hci1: command tx timeout [ 84.451480][ T5778] Bluetooth: hci3: command tx timeout [ 84.457012][ T5782] Bluetooth: hci2: command tx timeout [ 84.463732][ T5786] Bluetooth: hci0: command tx timeout [ 84.520565][ T5774] hsr_slave_0: entered promiscuous mode [ 84.527320][ T5774] hsr_slave_1: entered promiscuous mode [ 84.534896][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.543001][ T5774] Cannot create hsr debugfs directory [ 84.583595][ T5775] hsr_slave_0: entered promiscuous mode [ 84.590868][ T5775] hsr_slave_1: entered promiscuous mode [ 84.598014][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.605702][ T5775] Cannot create hsr debugfs directory [ 84.718578][ T5773] hsr_slave_0: entered promiscuous mode [ 84.725170][ T5773] hsr_slave_1: entered promiscuous mode [ 84.731914][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.739634][ T5773] Cannot create hsr debugfs directory [ 85.043079][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.065421][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.076524][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.087818][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.171520][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.193853][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.206108][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.219634][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.325496][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.336850][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.350441][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.381520][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.460164][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.471127][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.500852][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.530930][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.537965][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.577350][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.611666][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.619220][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.643801][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.651008][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.757805][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.856619][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.895361][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.908426][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.926487][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.933705][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.976861][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.984154][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.008331][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.043787][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.051060][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.084353][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.116564][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.123769][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.146992][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.154245][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.186800][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.194023][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.221023][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.420703][ T5776] veth0_vlan: entered promiscuous mode [ 86.448606][ T5776] veth1_vlan: entered promiscuous mode [ 86.532632][ T5786] Bluetooth: hci2: command tx timeout [ 86.538113][ T5786] Bluetooth: hci1: command tx timeout [ 86.539585][ T5778] Bluetooth: hci0: command tx timeout [ 86.546523][ T5786] Bluetooth: hci3: command tx timeout [ 86.612732][ T5776] veth0_macvtap: entered promiscuous mode [ 86.634341][ T5776] veth1_macvtap: entered promiscuous mode [ 86.691808][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.732641][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.776335][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.800307][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.819353][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.828134][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.950391][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.994878][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.011489][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.175687][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.194919][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.225421][ T5774] veth0_vlan: entered promiscuous mode [ 87.240820][ T5775] veth0_vlan: entered promiscuous mode [ 87.307146][ T5773] veth0_vlan: entered promiscuous mode [ 87.335376][ T5775] veth1_vlan: entered promiscuous mode [ 87.362985][ T5773] veth1_vlan: entered promiscuous mode [ 87.377046][ T5774] veth1_vlan: entered promiscuous mode [ 87.396731][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.423503][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.482340][ T5775] veth0_macvtap: entered promiscuous mode [ 87.511340][ T5775] veth1_macvtap: entered promiscuous mode [ 87.544228][ T5773] veth0_macvtap: entered promiscuous mode [ 87.594034][ T5773] veth1_macvtap: entered promiscuous mode [ 87.622191][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.668726][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.700864][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.708848][ T5774] veth0_macvtap: entered promiscuous mode [ 87.747865][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.765786][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.776297][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.788345][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.801416][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.811308][ T5837] Zero length message leads to an empty skb [ 87.820266][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.849326][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.863604][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.876534][ T5774] veth1_macvtap: entered promiscuous mode [ 87.895306][ T5837] tipc: Started in network mode [ 87.907826][ T5837] tipc: Node identity ac1414aa, cluster identity 4711 [ 87.916184][ T5837] tipc: New replicast peer: 172.20.20.187 [ 87.932228][ T5837] tipc: Enabled bearer , priority 10 [ 87.952023][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.978181][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.015326][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.050695][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.065460][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.082061][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.094491][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.103857][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.114665][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.137209][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.147025][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.156522][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.165620][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.195549][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.212181][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.224199][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.236114][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.246755][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.257660][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.271006][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.282800][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.294557][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.306467][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.318223][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.329451][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.341656][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.361016][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.405968][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.419418][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.428185][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.442329][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.609696][ T5786] Bluetooth: hci0: command tx timeout [ 88.609715][ T5778] Bluetooth: hci1: command tx timeout [ 88.615188][ T5786] Bluetooth: hci2: command tx timeout [ 88.622363][ T51] Bluetooth: hci3: command tx timeout [ 88.679812][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.687701][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.738403][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.773025][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.837522][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.870946][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.963902][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.980712][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.053401][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.054080][ T5845] tipc: Node number set to 2886997162 [ 89.090180][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.153390][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.216562][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.690811][ T5778] Bluetooth: hci2: command tx timeout [ 90.696457][ T5778] Bluetooth: hci0: command tx timeout [ 90.702394][ T5778] Bluetooth: hci1: command tx timeout [ 90.708460][ T5778] Bluetooth: hci3: command tx timeout [ 92.519101][ T9] cfg80211: failed to load regulatory.db [ 93.224342][ T5876] warning: `syz.2.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.754342][ T5886] ubi0: attaching mtd0 [ 93.770167][ T5886] ubi0: scanning is finished [ 93.774888][ T5886] ubi0: empty MTD device detected [ 94.244018][ T5886] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 94.656709][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 94.667796][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 94.675233][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.685428][ T51] Workqueue: hci2 hci_rx_work [ 94.690189][ T51] Call Trace: [ 94.693514][ T51] [ 94.696481][ T51] dump_stack_lvl+0x18c/0x250 [ 94.701239][ T51] ? show_regs_print_info+0x20/0x20 [ 94.706496][ T51] ? load_image+0x420/0x420 [ 94.711064][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 94.716509][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 94.721587][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 94.726320][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 94.731582][ T51] kobject_add_internal+0x617/0xc90 [ 94.736849][ T51] kobject_add+0x164/0x240 [ 94.741329][ T51] ? kobject_init+0x1d0/0x1d0 [ 94.746075][ T51] ? get_device_parent+0x366/0x390 [ 94.751245][ T51] device_add+0x3fa/0xc40 [ 94.755643][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 94.760664][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 94.766118][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 94.772519][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 94.778221][ T51] ? mutex_unlock+0x10/0x10 [ 94.782787][ T51] ? skb_pull_data+0xf0/0x1f0 [ 94.787526][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 94.793227][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 94.799379][ T51] hci_event_packet+0x7b4/0x1280 [ 94.804385][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 94.809467][ T51] ? lock_chain_count+0x20/0x20 [ 94.814372][ T51] ? bis_list+0x290/0x290 [ 94.818764][ T51] ? kcov_remote_start+0x513/0x810 [ 94.823937][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 94.829201][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 94.834463][ T51] hci_rx_work+0x43a/0xd60 [ 94.838944][ T51] ? process_scheduled_works+0x975/0x1600 [ 94.844720][ T51] process_scheduled_works+0xa60/0x1600 [ 94.850409][ T51] ? worker_attach_to_pool+0x370/0x370 [ 94.855927][ T51] ? assign_work+0x3cc/0x5d0 [ 94.860589][ T51] worker_thread+0xa5e/0xfe0 [ 94.865269][ T51] kthread+0x2fa/0x390 [ 94.869385][ T51] ? pr_cont_work+0x550/0x550 [ 94.874114][ T51] ? kthread_blkcg+0xd0/0xd0 [ 94.878752][ T51] ret_from_fork+0x48/0x80 [ 94.883224][ T51] ? kthread_blkcg+0xd0/0xd0 [ 94.888136][ T51] ret_from_fork_asm+0x11/0x20 [ 94.892981][ T51] [ 94.900370][ T51] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.915174][ T51] Bluetooth: hci2: failed to register connection device [ 94.966636][ T5907] autofs4:pid:5907:autofs_fill_super: called with bogus options [ 98.472145][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.458550][ T5948] affs: No valid root block on device nullb0 [ 101.252372][ T5952] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 102.858973][ T28] audit: type=1804 audit(1788747635.577:2): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.45" name="bus" dev="ramfs" ino=6777 res=1 errno=0 [ 102.933204][ T28] audit: type=1804 audit(1788747635.607:3): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.45" name="bus" dev="ramfs" ino=6777 res=1 errno=0 [ 103.537466][ T5974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.983867][ T5845] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.042211][ T5996] binder: 5994:5996 ioctl 4018620d 0 returned -22 [ 104.211490][ T6000] syz.2.54 uses obsolete (PF_INET,SOCK_PACKET) [ 104.216568][ T5845] usb 1-1: Using ep0 maxpacket: 32 [ 104.238512][ T5845] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.248837][ T5845] usb 1-1: config 0 has no interface number 0 [ 104.258618][ T6004] size and base must be multiples of 4 kiB [ 104.267255][ T6004] CPU: 1 PID: 6004 Comm: syz.3.56 Not tainted syzkaller #0 [ 104.274564][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.284668][ T6004] Call Trace: [ 104.287997][ T6004] [ 104.290974][ T6004] dump_stack_lvl+0x18c/0x250 [ 104.295738][ T6004] ? show_regs_print_info+0x20/0x20 [ 104.300994][ T6004] ? load_image+0x420/0x420 [ 104.304524][ T5845] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 104.305627][ T6004] ? __might_fault+0xaa/0x120 [ 104.305657][ T6004] ? __might_fault+0xc6/0x120 [ 104.324135][ T6004] mtrr_add+0xd0/0x100 [ 104.328270][ T6004] mtrr_ioctl+0xc96/0x13a0 [ 104.332756][ T6004] ? mtrr_close+0x200/0x200 [ 104.337382][ T6004] ? __fget_files+0x28/0x460 [ 104.340242][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.342025][ T6004] ? mtrr_close+0x200/0x200 [ 104.354650][ T6004] proc_reg_unlocked_ioctl+0x1d2/0x2c0 [ 104.360206][ T6004] ? proc_reg_poll+0x290/0x290 [ 104.365028][ T6004] __se_sys_ioctl+0xfd/0x170 [ 104.369766][ T6004] do_syscall_64+0x55/0xb0 [ 104.372821][ T5845] usb 1-1: Product: syz [ 104.374213][ T6004] ? clear_bhb_loop+0x40/0x90 [ 104.378386][ T5845] usb 1-1: Manufacturer: syz [ 104.383061][ T6004] ? clear_bhb_loop+0x40/0x90 [ 104.383091][ T6004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.383117][ T6004] RIP: 0033:0x7f5a90f9e159 [ 104.383148][ T6004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.383166][ T6004] RSP: 002b:00007f5a91f58028 EFLAGS: 00000246 [ 104.394648][ T5845] usb 1-1: SerialNumber: syz [ 104.398547][ T6004] ORIG_RAX: 0000000000000010 [ 104.398559][ T6004] RAX: ffffffffffffffda RBX: 00007f5a91225fa0 RCX: 00007f5a90f9e159 [ 104.398576][ T6004] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 104.398592][ T6004] RBP: 00007f5a91035024 R08: 0000000000000000 R09: 0000000000000000 [ 104.438418][ T5845] usb 1-1: config 0 descriptor?? [ 104.446288][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.446308][ T6004] R13: 00007f5a91226038 R14: 00007f5a91225fa0 R15: 00007ffe9f8b0bc8 [ 104.446341][ T6004] [ 104.536111][ T5845] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 104.552075][ T5845] usb 1-1: selecting invalid altsetting 1 [ 104.557898][ T5845] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 104.573888][ T5845] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.585958][ T5845] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 104.609841][ T5845] usb 1-1: media controller created [ 104.642467][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.767315][ T6013] netlink: 228 bytes leftover after parsing attributes in process `syz.2.58'. [ 104.961589][ T5845] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 105.669351][ T5845] usb 1-1: USB disconnect, device number 2 [ 105.939629][ T6026] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 106.068080][ T6035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.719047][ T5817] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.929653][ T5817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.988172][ T5817] usb 3-1: config 4 has an invalid interface number: 73 but max is 0 [ 108.080741][ T5817] usb 3-1: config 4 has no interface number 0 [ 108.163169][ T5817] usb 3-1: config 4 interface 73 altsetting 3 endpoint 0xF has an invalid bInterval 129, changing to 11 [ 108.292828][ T5817] usb 3-1: config 4 interface 73 has no altsetting 0 [ 108.747675][ T5817] usb 3-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=8e.c5 [ 108.761656][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.773529][ T5817] usb 3-1: Product: syz [ 108.781012][ T5817] usb 3-1: Manufacturer: syz [ 108.785759][ T5817] usb 3-1: SerialNumber: syz [ 108.991039][ T6081] 9pnet_fd: p9_fd_create_unix (6081): problem connecting socket: ./file0: -91 [ 109.038764][ T5817] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 109.052675][ T6079] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 109.085096][ T5817] usb 3-1: USB disconnect, device number 2 [ 109.107415][ T6082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 109.114325][ T6082] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 109.130882][ T6082] vhci_hcd vhci_hcd.0: Device attached [ 109.211511][ T6083] vhci_hcd: connection closed [ 109.213783][ T62] vhci_hcd: stop threads [ 109.238837][ T62] vhci_hcd: release socket [ 109.243881][ T62] vhci_hcd: disconnect device [ 109.556141][ T28] audit: type=1800 audit(1788747642.277:4): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.83" name="file2" dev="sda1" ino=2043 res=0 errno=0 [ 109.959842][ T28] audit: type=1326 audit(1788747642.677:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.87" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff13199e159 code=0x0 [ 111.740445][ T6096] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 111.747519][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 112.389055][ T5783] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.588992][ T5783] usb 2-1: Using ep0 maxpacket: 32 [ 112.658246][ T5783] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.678470][ T5783] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 112.694286][ T5783] usb 2-1: can't read configurations, error -71 [ 115.492679][ T6199] netlink: 44 bytes leftover after parsing attributes in process `syz.3.118'. [ 115.508649][ T6199] netlink: 43 bytes leftover after parsing attributes in process `syz.3.118'. [ 115.517737][ T6199] netlink: 'syz.3.118': attribute type 5 has an invalid length. [ 115.565499][ T6199] netlink: 43 bytes leftover after parsing attributes in process `syz.3.118'. [ 115.939830][ T5783] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.234720][ T5783] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.051856][ T6223] Invalid ELF header magic: != ELF [ 117.661800][ T5783] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 117.672732][ T5783] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.685791][ T5783] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 117.694924][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.142282][ T6231] block device autoloading is deprecated and will be removed. [ 118.156332][ T6231] syz.2.128: attempt to access beyond end of device [ 118.156332][ T6231] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 118.642773][ T28] audit: type=1800 audit(1788747651.087:6): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.127" name="file0" dev="overlay" ino=216 res=0 errno=0 [ 118.776789][ T6229] syzkaller0: entered promiscuous mode [ 118.818442][ T6229] syzkaller0: entered allmulticast mode [ 118.946596][ T5783] qmi_wwan: probe of 4-1:1.0 failed with error -22 [ 118.986259][ T5783] usb 4-1: USB disconnect, device number 2 [ 119.418362][ T6246] binder: 6245:6246 ioctl 4018620d 0 returned -22 [ 120.372044][ T6251] bridge_slave_0: left allmulticast mode [ 120.419945][ T6251] bridge_slave_0: left promiscuous mode [ 120.454263][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.498888][ C1] sched: RT throttling activated [ 120.658116][ T6251] bridge_slave_1: left allmulticast mode [ 120.675797][ T6251] bridge_slave_1: left promiscuous mode [ 120.711742][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.761551][ T6251] bond0: (slave bond_slave_0): Releasing backup interface [ 120.800293][ T6251] bond0: (slave bond_slave_1): Releasing backup interface [ 120.960264][ T6251] team0: Port device team_slave_0 removed [ 121.332980][ T6251] team0: Port device team_slave_1 removed [ 121.468799][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.621478][ T6251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.851576][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.895296][ T6251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.969062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.867846][ T6287] FAULT_INJECTION: forcing a failure. [ 124.867846][ T6287] name failslab, interval 1, probability 0, space 0, times 1 [ 124.919154][ T6287] CPU: 1 PID: 6287 Comm: syz.1.146 Not tainted syzkaller #0 [ 124.926538][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.936637][ T6287] Call Trace: [ 124.939948][ T6287] [ 124.942903][ T6287] dump_stack_lvl+0x18c/0x250 [ 124.947637][ T6287] ? show_regs_print_info+0x20/0x20 [ 124.952869][ T6287] ? load_image+0x420/0x420 [ 124.957404][ T6287] ? __might_sleep+0xe0/0xe0 [ 124.962026][ T6287] ? __lock_acquire+0x7d80/0x7d80 [ 124.967079][ T6287] should_fail_ex+0x394/0x4c0 [ 124.971792][ T6287] should_failslab+0x9/0x20 [ 124.976339][ T6287] slab_pre_alloc_hook+0x59/0x300 [ 124.981427][ T6287] ? __kernfs_new_node+0xaa/0x7f0 [ 124.986509][ T6287] ? rcu_is_watching+0x15/0xb0 [ 124.991310][ T6287] kmem_cache_alloc+0x5a/0x2c0 [ 124.996111][ T6287] ? __kernfs_new_node+0xe5/0x7f0 [ 125.001191][ T6287] __kernfs_new_node+0xe5/0x7f0 [ 125.006083][ T6287] ? kernfs_new_node+0x260/0x260 [ 125.011068][ T6287] ? snprintf+0xe9/0x140 [ 125.015352][ T6287] ? vscnprintf+0x80/0x80 [ 125.019720][ T6287] kernfs_new_node+0x14c/0x260 [ 125.024523][ T6287] __kernfs_create_file+0x4b/0x2e0 [ 125.029666][ T6287] cgroup_addrm_files+0x810/0xd60 [ 125.034740][ T6287] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 125.040951][ T6287] ? cpuset_css_online+0x838/0x900 [ 125.046090][ T6287] ? __lock_acquire+0x7d80/0x7d80 [ 125.051184][ T6287] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.056414][ T6287] css_populate_dir+0x121/0x380 [ 125.061305][ T6287] cgroup_apply_control_enable+0x641/0xb00 [ 125.067159][ T6287] cgroup_mkdir+0xc83/0xe70 [ 125.071707][ T6287] ? css_task_iter_end+0x2c0/0x2c0 [ 125.076861][ T6287] ? kernfs_iop_permission+0x2c4/0x3b0 [ 125.082443][ T6287] ? css_task_iter_end+0x2c0/0x2c0 [ 125.087592][ T6287] kernfs_iop_mkdir+0x241/0x3e0 [ 125.092479][ T6287] vfs_mkdir+0x2a5/0x470 [ 125.096758][ T6287] do_mkdirat+0x1dc/0x450 [ 125.101135][ T6287] ? vfs_mkdir+0x470/0x470 [ 125.105602][ T6287] __x64_sys_mkdirat+0x89/0xa0 [ 125.110396][ T6287] do_syscall_64+0x55/0xb0 [ 125.114844][ T6287] ? clear_bhb_loop+0x40/0x90 [ 125.119550][ T6287] ? clear_bhb_loop+0x40/0x90 [ 125.124253][ T6287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.130192][ T6287] RIP: 0033:0x7ff13199e159 [ 125.134644][ T6287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.154309][ T6287] RSP: 002b:00007ff13282f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 125.162757][ T6287] RAX: ffffffffffffffda RBX: 00007ff131c26090 RCX: 00007ff13199e159 [ 125.170764][ T6287] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 125.178771][ T6287] RBP: 00007ff131a35024 R08: 0000000000000000 R09: 0000000000000000 [ 125.186778][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.194778][ T6287] R13: 00007ff131c26128 R14: 00007ff131c26090 R15: 00007ffcab9f1518 [ 125.202797][ T6287] [ 125.222258][ T6287] cgroup: cgroup_addrm_files: failed to add effective_mems, err=-12 [ 125.572874][ T5763] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.369042][ T6297] syz.1.151[6297]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 126.489195][ T5763] usb 3-1: Using ep0 maxpacket: 8 [ 126.497587][ T5763] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 126.518050][ T5763] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 126.555644][ T5763] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.598123][ T5763] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 126.629954][ T5763] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 126.659811][ T5763] usb 3-1: config 168 interface 0 has no altsetting 0 [ 126.669246][ T5763] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 126.676725][ T5763] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 126.692194][ T5763] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.705216][ T5763] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 126.721151][ T5763] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 126.746447][ T5763] usb 3-1: config 168 interface 0 has no altsetting 0 [ 126.757282][ T5763] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 126.770083][ T5763] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 126.791584][ T5763] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.805811][ T5763] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 126.845050][ T5763] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 126.878159][ T5763] usb 3-1: config 168 interface 0 has no altsetting 0 [ 126.915499][ T5763] usb 3-1: string descriptor 0 read error: -22 [ 126.922002][ T5763] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 126.943183][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.379339][ T5763] usb 3-1: can't set config #168, error -71 [ 128.405464][ T5763] usb 3-1: USB disconnect, device number 3 [ 133.099214][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.108141][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.339003][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.571558][ T23] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.590361][ T23] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.644671][ T23] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 133.701545][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.985501][ T23] usb 1-1: Product: syz [ 134.012544][ T23] usb 1-1: Manufacturer: syz [ 134.020382][ T6366] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 134.029180][ T6366] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 134.037719][ T6366] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 134.067783][ T23] usb 1-1: SerialNumber: syz [ 134.198786][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.217982][ T6311] IPVS: starting estimator thread 0... [ 134.264605][ T23] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 134.349468][ T6369] IPVS: using max 16 ests per chain, 38400 per kthread [ 134.495837][ T23] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 134.517252][ T27] usb 2-1: config 9 has an invalid interface number: 175 but max is 0 [ 134.543714][ T27] usb 2-1: config 9 has no interface number 0 [ 134.570648][ T23] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 134.586267][ T27] usb 2-1: New USB device found, idVendor=10c4, idProduct=85f8, bcdDevice=2b.8f [ 134.604020][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.649017][ T27] usb 2-1: Product: syz [ 134.659223][ T27] usb 2-1: Manufacturer: syz [ 134.665926][ T27] usb 2-1: SerialNumber: syz [ 136.118909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 136.359507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 136.769032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 136.918912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.948912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.093083][ T5763] usb 1-1: USB disconnect, device number 3 [ 137.144431][ T5763] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 137.188085][ T5763] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 137.210402][ T27] cp210x 2-1:9.175: cp210x converter detected [ 137.219835][ T27] cp210x 2-1:9.175: failed to get vendor val 0x370b size 1: -71 [ 137.227561][ T27] cp210x 2-1:9.175: querying part number failed [ 137.234105][ T5763] ti_usb_3410_5052 1-1:2.0: device disconnected [ 137.339710][ T27] usb 2-1: cp210x converter now attached to ttyUSB0 [ 137.379920][ T27] usb 2-1: USB disconnect, device number 4 [ 137.423870][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.459847][ T27] cp210x 2-1:9.175: device disconnected [ 138.380649][ T6391] tipc: Started in network mode [ 138.414703][ T6391] tipc: Node identity f6ca9bc92f36, cluster identity 4711 [ 138.432718][ T6391] tipc: Enabled bearer , priority 0 [ 138.458454][ T6391] syzkaller0: entered promiscuous mode [ 138.487010][ T6391] syzkaller0: entered allmulticast mode [ 138.564720][ T6391] tipc: Resetting bearer [ 138.584691][ T6389] tipc: Resetting bearer [ 138.657019][ T6389] tipc: Disabling bearer [ 143.601031][ T6438] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.665023][ T6438] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.338968][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.539054][ T23] usb 1-1: device descriptor read/64, error -71 [ 144.770992][ T6450] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 144.819038][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.999227][ T23] usb 1-1: device descriptor read/64, error -71 [ 145.129355][ T23] usb usb1-port1: attempt power cycle [ 147.499116][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.722924][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 147.797541][ T27] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 147.963237][ T27] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 148.069956][ T27] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 148.329861][ T27] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 148.417917][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.468054][ T27] usb 3-1: Product: syz [ 148.488986][ T27] usb 3-1: Manufacturer: syz [ 148.509349][ T27] usb 3-1: SerialNumber: syz [ 148.653983][ T27] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 148.712475][ T27] imon 3-1:155.0: unable to initialize intf0, err -19 [ 148.758332][ T27] imon:imon_probe: failed to initialize context! [ 148.791388][ T27] imon 3-1:155.0: unable to register, err -19 [ 151.588450][ T27] usb 3-1: USB disconnect, device number 4 [ 151.884268][ T6487] hub 1-0:1.0: USB hub found [ 151.910250][ T6487] hub 1-0:1.0: 1 port detected [ 152.036841][ T6487] syz.3.197 (6487) used greatest stack depth: 19592 bytes left [ 153.635552][ T6504] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.210' sets config #0 [ 154.070268][ T5763] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.298508][ T5763] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 154.318827][ T5763] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 154.339510][ T5763] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 154.359333][ T5763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.379445][ T5763] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.400950][ T5763] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 154.410824][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.438642][ T6506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.454739][ T6506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.463564][ T6506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 154.480901][ T5763] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 156.039236][ T5763] usb 3-1: mos7720: usb_control_msg() failed: -71 [ 156.069361][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.079807][ T5763] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 156.114975][ T5763] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 156.132294][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 156.148480][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 156.157837][ T5778] Bluetooth: hci2: hardware error 0x00 [ 156.237162][ T5763] usb 3-1: USB disconnect, device number 5 [ 156.243147][ C0] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 156.279473][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 156.290027][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 156.303306][ T23] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 156.319057][ T23] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 156.327893][ T23] usb 2-1: Product: syz [ 156.332990][ T23] usb 2-1: Manufacturer: syz [ 156.337642][ T23] usb 2-1: SerialNumber: syz [ 156.344922][ T23] usb 2-1: config 0 descriptor?? [ 156.357284][ T6532] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.373132][ T5763] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 156.438315][ T5763] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 156.455098][ T5763] mos7720 3-1:1.0: device disconnected [ 156.881417][ T5763] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.096774][ T5763] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 157.111256][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.128967][ T5763] usb 3-1: Product: syz [ 157.138067][ T5763] usb 3-1: Manufacturer: syz [ 157.154086][ T5763] usb 3-1: SerialNumber: syz [ 157.266604][ T5817] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 157.629698][ T6545] program syz.0.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.761695][ T23] usb 3-1: USB disconnect, device number 6 [ 158.289150][ T5778] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 158.676105][ T5817] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 158.685122][ T5817] ath9k_htc: Failed to initialize the device [ 158.695462][ T23] usb 3-1: ath9k_htc: USB layer deinitialized [ 159.809410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 160.219142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 160.688825][ T5763] usb 2-1: USB disconnect, device number 5 [ 160.764508][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.229'. [ 161.204430][ T5778] Bluetooth: hci0: unexpected cc 0x0c47 length: 2 > 1 [ 161.211702][ T5778] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 161.893630][ T5862] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 162.230127][ T5862] usb 3-1: no configurations [ 162.278227][ T5862] usb 3-1: can't read configurations, error -22 [ 162.579445][ T5862] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 162.833462][ T6595] input: syz1 as /devices/virtual/input/input6 [ 162.888069][ T5862] usb 3-1: no configurations [ 162.893141][ T5862] usb 3-1: can't read configurations, error -22 [ 162.915754][ T5862] usb usb3-port1: attempt power cycle [ 163.147368][ T6599] input: syz0 as /devices/virtual/input/input7 [ 164.203931][ T6602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.509343][ T5862] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 164.849022][ T5862] usb 3-1: device not accepting address 9, error -71 [ 165.484257][ T5763] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.530671][ T5763] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.651753][ T6622] CacheFiles: Failed to register: -95 [ 167.009422][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 167.060803][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 167.823729][ T6645] ======================================================= [ 167.823729][ T6645] WARNING: The mand mount option has been deprecated and [ 167.823729][ T6645] and is ignored by this kernel. Remove the mand [ 167.823729][ T6645] option from the mount to silence this warning. [ 167.823729][ T6645] ======================================================= [ 170.152777][ T28] audit: type=1800 audit(1788747702.877:7): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.262" name="zoned" dev="configfs" ino=12351 res=0 errno=0 [ 170.220603][ T28] audit: type=1800 audit(1788747702.897:8): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.262" name="zone_nr_conv" dev="configfs" ino=12352 res=0 errno=0 [ 170.289022][ T28] audit: type=1800 audit(1788747702.907:9): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.262" name="power" dev="configfs" ino=12353 res=0 errno=0 [ 170.437269][ T6653] null_blk: disk nullb1 created [ 172.023662][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.246636][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.359181][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.747452][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.686132][ T6686] ubi0: attaching mtd0 [ 173.696718][ T6686] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 173.708224][ T6686] ubi0: scanning is finished [ 174.200163][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.211283][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.219711][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.233461][ T6686] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 174.243534][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.362469][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 174.380074][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.201294][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 175.611838][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 175.637197][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.719702][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.769149][ T23] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 175.778435][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.850168][ T23] usb 4-1: config 0 descriptor?? [ 176.380486][ T23] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 176.418714][ T6726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'. [ 176.459380][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 176.535690][ T5778] Bluetooth: hci2: command tx timeout [ 176.578235][ T23] usb 4-1: USB disconnect, device number 3 [ 176.740763][ T6730] fido_id[6730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 178.041640][ T6748] FAULT_INJECTION: forcing a failure. [ 178.041640][ T6748] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 178.056166][ T6748] CPU: 1 PID: 6748 Comm: syz.1.291 Not tainted syzkaller #0 [ 178.063563][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.073758][ T6748] Call Trace: [ 178.077079][ T6748] [ 178.080060][ T6748] dump_stack_lvl+0x18c/0x250 [ 178.084851][ T6748] ? show_regs_print_info+0x20/0x20 [ 178.090150][ T6748] ? load_image+0x420/0x420 [ 178.094718][ T6748] ? shmem_get_folio_gfp+0x14ae/0x2b40 [ 178.100235][ T6748] ? __lock_acquire+0x7d80/0x7d80 [ 178.105327][ T6748] ? __rwlock_init+0x150/0x150 [ 178.110181][ T6748] should_fail_ex+0x394/0x4c0 [ 178.115012][ T6748] copy_page_from_iter_atomic+0x29e/0x13d0 [ 178.120881][ T6748] ? shmem_get_folio_gfp+0x2780/0x2b40 [ 178.126417][ T6748] ? iov_iter_zero+0x1160/0x1160 [ 178.131427][ T6748] ? shmem_write_begin+0x1cf/0x430 [ 178.136643][ T6748] generic_perform_write+0x353/0x5c0 [ 178.142009][ T6748] ? generic_file_direct_write+0x3e0/0x3e0 [ 178.147890][ T6748] ? file_update_time+0x192/0x1a0 [ 178.153009][ T6748] shmem_file_write_iter+0xfb/0x120 [ 178.158271][ T6748] vfs_write+0x474/0x9a0 [ 178.162597][ T6748] ? file_end_write+0x250/0x250 [ 178.167517][ T6748] ? __fget_files+0x3fc/0x460 [ 178.172280][ T6748] ? __fdget_pos+0x2a3/0x330 [ 178.176931][ T6748] ? ksys_write+0x74/0x260 [ 178.181406][ T6748] ksys_write+0x151/0x260 [ 178.185808][ T6748] ? __ia32_sys_read+0x90/0x90 [ 178.190670][ T6748] ? lockdep_hardirqs_on+0x98/0x150 [ 178.195935][ T6748] do_syscall_64+0x55/0xb0 [ 178.200407][ T6748] ? clear_bhb_loop+0x40/0x90 [ 178.205142][ T6748] ? clear_bhb_loop+0x40/0x90 [ 178.209875][ T6748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.215830][ T6748] RIP: 0033:0x7ff13199e159 [ 178.220300][ T6748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.239970][ T6748] RSP: 002b:00007ff132850028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.248449][ T6748] RAX: ffffffffffffffda RBX: 00007ff131c25fa0 RCX: 00007ff13199e159 [ 178.256477][ T6748] RDX: 0000000000032600 RSI: 0000200000000380 RDI: 0000000000000004 [ 178.264619][ T6748] RBP: 00007ff131a35024 R08: 0000000000000000 R09: 0000000000000000 [ 178.272662][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.280702][ T6748] R13: 00007ff131c26038 R14: 00007ff131c25fa0 R15: 00007ffcab9f1518 [ 178.288765][ T6748] [ 178.616185][ T5778] Bluetooth: hci2: command tx timeout [ 178.767959][ T6685] chnl_net:caif_netlink_parms(): no params data found [ 180.689299][ T5778] Bluetooth: hci2: command tx timeout [ 180.950788][ T49] hsr_slave_0: left promiscuous mode [ 180.966767][ T49] hsr_slave_1: left promiscuous mode [ 180.989257][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.020332][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.043444][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.073729][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.102274][ T49] bridge_slave_1: left allmulticast mode [ 181.121877][ T49] bridge_slave_1: left promiscuous mode [ 181.129497][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.185771][ T49] bridge_slave_0: left allmulticast mode [ 181.191667][ T49] bridge_slave_0: left promiscuous mode [ 181.208030][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.303674][ T49] veth1_macvtap: left promiscuous mode [ 181.327338][ T49] veth0_macvtap: left promiscuous mode [ 181.343886][ T49] veth1_vlan: left promiscuous mode [ 181.364012][ T49] veth0_vlan: left promiscuous mode [ 182.778989][ T5778] Bluetooth: hci2: command tx timeout [ 183.654074][ T49] team0 (unregistering): Port device team_slave_1 removed [ 183.891858][ T49] team0 (unregistering): Port device team_slave_0 removed [ 184.134078][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.277284][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.520703][ T49] bond0 (unregistering): Released all slaves [ 185.949176][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.949342][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.949547][ T6685] bridge_slave_0: entered allmulticast mode [ 185.964800][ T6685] bridge_slave_0: entered promiscuous mode [ 185.978016][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.978125][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.978287][ T6685] bridge_slave_1: entered allmulticast mode [ 185.991226][ T6685] bridge_slave_1: entered promiscuous mode [ 186.121132][ T6685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.142327][ T6685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.233402][ T6685] team0: Port device team_slave_0 added [ 186.238619][ T6685] team0: Port device team_slave_1 added [ 186.310340][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.317511][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.356867][ T6685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.373149][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.386760][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.422763][ T6685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.505903][ T6685] hsr_slave_0: entered promiscuous mode [ 186.519324][ T6685] hsr_slave_1: entered promiscuous mode [ 186.526137][ T6685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.546202][ T6685] Cannot create hsr debugfs directory [ 187.183634][ T6685] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.289231][ T6834] program syz.0.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.385326][ T6685] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.069949][ T6685] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.487427][ T6685] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.721776][ T6846] netlink: 'syz.3.314': attribute type 4 has an invalid length. [ 189.790553][ T6846] netlink: 17 bytes leftover after parsing attributes in process `syz.3.314'. [ 190.165572][ T6685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.260830][ T6685] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.310507][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.317735][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.364594][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.371872][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.149704][ T6685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.673012][ T6909] ªªªªªª: renamed from vlan0 (while UP) [ 193.778312][ T6685] veth0_vlan: entered promiscuous mode [ 193.833016][ T6685] veth1_vlan: entered promiscuous mode [ 193.942841][ T6918] CIFS: Attempting to mount //127.0.0.1/share [ 193.952289][ T6685] veth0_macvtap: entered promiscuous mode [ 193.976413][ T6685] veth1_macvtap: entered promiscuous mode [ 194.066346][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.138125][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.188158][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.228890][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.256879][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.333557][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.387696][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.441136][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.473724][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.517847][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.536723][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.545597][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.581368][ T6685] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.625135][ T6685] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.649282][ T6685] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.688769][ T6685] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.967994][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.009301][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.132333][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.158998][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.232059][ T6921] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 195.282678][ T6918] CIFS: VFS: cifs_mount failed w/return code = -112 [ 196.872931][ T6959] netlink: 140 bytes leftover after parsing attributes in process `syz.0.333'. [ 197.397165][ T28] audit: type=1326 audit(1788747730.117:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.4.334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81e199e159 code=0x0 [ 197.699709][ T5845] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 197.743567][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 197.782501][ T6980] bridge_slave_1: left allmulticast mode [ 197.788268][ T6980] bridge_slave_1: left promiscuous mode [ 197.828420][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.940614][ T6980] bridge_slave_0: left allmulticast mode [ 197.946353][ T6980] bridge_slave_0: left promiscuous mode [ 197.998778][ T5845] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.006961][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.044592][ T5845] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 198.067169][ T5845] usb 2-1: can't read configurations, error -71 [ 198.567727][ T5778] Bluetooth: hci3: Malformed Event: 0x2f [ 199.235313][ T23] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0003/input/input8 [ 199.362657][ T23] asus 0018:0B05:0101.0003: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 199.429538][ T23] asus 0018:0B05:0101.0003: Asus failed to start multitouch: -5 [ 199.622299][ T23] asus: probe of 0018:0B05:0101.0003 failed with error -5 [ 199.731183][ T7016] fido_id[7016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 200.509021][ T5845] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 200.990556][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 201.261984][ T5845] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.575920][ T5845] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.850776][ T5845] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 201.883989][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.929329][ T5845] usb 5-1: Product: syz [ 201.948342][ T5845] usb 5-1: Manufacturer: syz [ 201.970512][ T5845] usb 5-1: SerialNumber: syz [ 202.988518][ T7059] syz.3.357 (7059) used greatest stack depth: 17384 bytes left [ 203.157788][ T5845] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 203.214020][ T5845] usb 5-1: USB disconnect, device number 2 [ 203.318408][ T6445] udevd[6445]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.818961][ T27] IPVS: starting estimator thread 0... [ 203.909072][ T7080] IPVS: using max 17 ests per chain, 40800 per kthread [ 204.111353][ T7089] FAULT_INJECTION: forcing a failure. [ 204.111353][ T7089] name failslab, interval 1, probability 0, space 0, times 0 [ 204.138360][ T7089] CPU: 1 PID: 7089 Comm: syz.1.365 Not tainted syzkaller #0 [ 204.145787][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.155897][ T7089] Call Trace: [ 204.159227][ T7089] [ 204.162209][ T7089] dump_stack_lvl+0x18c/0x250 [ 204.166954][ T7089] ? show_regs_print_info+0x20/0x20 [ 204.172223][ T7089] ? load_image+0x420/0x420 [ 204.176788][ T7089] ? __might_sleep+0xe0/0xe0 [ 204.181445][ T7089] ? __lock_acquire+0x7d80/0x7d80 [ 204.186686][ T7089] should_fail_ex+0x394/0x4c0 [ 204.191437][ T7089] should_failslab+0x9/0x20 [ 204.196017][ T7089] slab_pre_alloc_hook+0x59/0x300 [ 204.201127][ T7089] ? kvmalloc_node+0x70/0x180 [ 204.205874][ T7089] ? kvmalloc_node+0x70/0x180 [ 204.210615][ T7089] __kmem_cache_alloc_node+0x53/0x250 [ 204.216058][ T7089] ? dev_addr_init+0x15b/0x240 [ 204.220895][ T7089] ? kvmalloc_node+0x70/0x180 [ 204.225644][ T7089] __kmalloc_node+0xa6/0x240 [ 204.230314][ T7089] kvmalloc_node+0x70/0x180 [ 204.234907][ T7089] alloc_netdev_mqs+0x8ba/0x1040 [ 204.239909][ T7089] ? tun_get_tx_ring+0xa0/0xa0 [ 204.244739][ T7089] tun_set_iff+0x546/0xea0 [ 204.249226][ T7089] __tun_chr_ioctl+0x7e0/0x2070 [ 204.254147][ T7089] ? tun_flow_create+0x310/0x310 [ 204.259165][ T7089] ? bpf_lsm_file_ioctl+0x9/0x10 [ 204.264190][ T7089] ? security_file_ioctl+0x80/0xa0 [ 204.269363][ T7089] ? tun_chr_poll+0x630/0x630 [ 204.274100][ T7089] __se_sys_ioctl+0xfd/0x170 [ 204.278764][ T7089] do_syscall_64+0x55/0xb0 [ 204.283246][ T7089] ? clear_bhb_loop+0x40/0x90 [ 204.287978][ T7089] ? clear_bhb_loop+0x40/0x90 [ 204.292719][ T7089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.298702][ T7089] RIP: 0033:0x7ff13199e159 [ 204.303170][ T7089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.322840][ T7089] RSP: 002b:00007ff132850028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.331319][ T7089] RAX: ffffffffffffffda RBX: 00007ff131c25fa0 RCX: 00007ff13199e159 [ 204.339352][ T7089] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000004 [ 204.347391][ T7089] RBP: 00007ff131a35024 R08: 0000000000000000 R09: 0000000000000000 [ 204.355426][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.363547][ T7089] R13: 00007ff131c26038 R14: 00007ff131c25fa0 R15: 00007ffcab9f1518 [ 204.371598][ T7089] [ 205.439600][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.368'. [ 205.923854][ T3479] IPVS: stop unused estimator thread 0... [ 207.022986][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 207.029281][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 211.009335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 211.451291][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 212.445891][ T7170] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 212.455320][ T51] Bluetooth: Frame is too long (len 30, expected len 4) [ 213.270768][ T7199] Bluetooth: MGMT ver 1.22 [ 213.283493][ T7199] IPv6: sit1: Disabled Multicast RS [ 213.289804][ T7199] sit1: entered allmulticast mode [ 215.510942][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.629287][ T5817] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 215.737493][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.754874][ T27] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 215.767255][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.776841][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 215.788336][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 215.805470][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.832298][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.843064][ T27] usb 2-1: Product: syz [ 215.847289][ T27] usb 2-1: Manufacturer: syz [ 215.859271][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 215.869674][ T5817] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 215.877143][ T5817] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.895143][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 215.900935][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 215.928625][ T5817] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 215.930618][ T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 215.960584][ T5817] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 215.971606][ T27] cdc_wdm 2-1:1.0: Unknown control protocol [ 216.009007][ T5817] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 216.049106][ T5817] usb 5-1: config 168 interface 0 has no altsetting 0 [ 216.066964][ T5817] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 216.079075][ T5817] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 216.109873][ T5817] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 216.143739][ C1] cdc_wdm 2-1:1.0: unknown notification 108 received: index 12594 len 13365 [ 216.157952][ T5817] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 216.181508][ T5817] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 216.200232][ T5817] usb 5-1: config 168 interface 0 has no altsetting 0 [ 216.208717][ T5817] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 216.224741][ T5817] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 217.238859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 218.353602][ T5817] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 218.411807][ T27] usb 2-1: USB disconnect, device number 8 [ 218.444434][ T5817] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 218.479353][ T5845] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 218.515709][ T5817] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 218.590787][ T5817] usb 5-1: config 168 interface 0 has no altsetting 0 [ 218.608558][ T28] audit: type=1326 audit(1788747751.327:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13199e159 code=0x7ffc0000 [ 218.633700][ T5817] usb 5-1: string descriptor 0 read error: -71 [ 218.640858][ T5817] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 218.660859][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.692567][ T28] audit: type=1326 audit(1788747751.327:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13199e159 code=0x7ffc0000 [ 218.719708][ T5817] usb 5-1: can't set config #168, error -71 [ 218.757159][ T5817] usb 5-1: USB disconnect, device number 3 [ 218.768959][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 218.794047][ T5845] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 218.808922][ T28] audit: type=1326 audit(1788747751.387:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13199e159 code=0x7ffc0000 [ 218.839547][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.858943][ T5845] usb 4-1: Product: syz [ 218.863183][ T5845] usb 4-1: Manufacturer: syz [ 218.867848][ T5845] usb 4-1: SerialNumber: syz [ 218.880406][ T28] audit: type=1326 audit(1788747751.387:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13199e159 code=0x7ffc0000 [ 218.927545][ T28] audit: type=1326 audit(1788747751.397:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7ff13199e159 code=0x7ffc0000 [ 218.963125][ T28] audit: type=1326 audit(1788747751.397:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13199e159 code=0x7ffc0000 [ 218.997486][ T28] audit: type=1326 audit(1788747751.397:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13199e159 code=0x7ffc0000 [ 219.024748][ T28] audit: type=1326 audit(1788747751.397:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff13199e159 code=0x7ffc0000 [ 219.055806][ T28] audit: type=1326 audit(1788747751.397:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff13199e159 code=0x7ffc0000 [ 219.120154][ T5845] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 219.175079][ T5845] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 219.206576][ T5845] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 219.218668][ T5845] usb 4-1: media controller created [ 219.275259][ T7254] input: syz0 as /devices/virtual/input/input10 [ 220.064677][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.166420][ T5845] zl10353_read_register: readreg error (reg=127, ret==-71) [ 220.371547][ T5845] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 220.396719][ T5845] usb 4-1: USB disconnect, device number 4 [ 220.465331][ T7265] ucma_write: process 53 (syz.4.409) changed security contexts after opening file descriptor, this is not allowed. [ 221.668974][ T5816] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 222.699211][ T5816] usb 2-1: Using ep0 maxpacket: 32 [ 222.715655][ T5816] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.734987][ T5816] usb 2-1: config 0 has no interface number 0 [ 222.753873][ T5816] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 222.767548][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.785914][ T5816] usb 2-1: Product: syz [ 222.799170][ T5816] usb 2-1: Manufacturer: syz [ 222.803873][ T5816] usb 2-1: SerialNumber: syz [ 222.825385][ T5816] usb 2-1: config 0 descriptor?? [ 222.845322][ T5816] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 222.874503][ T5816] usb 2-1: selecting invalid altsetting 1 [ 222.887605][ T5816] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 222.922311][ T5816] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 222.947868][ T5816] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 222.970433][ T5816] usb 2-1: media controller created [ 223.016722][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.053775][ T7272] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 223.113455][ T5816] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 223.138282][ T5816] zl10353_read_register: readreg error (reg=127, ret==-71) [ 223.146465][ T5816] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 223.272766][ T5816] usb 2-1: USB disconnect, device number 9 [ 223.749067][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 223.890218][ T7311] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 223.902954][ T28] audit: type=1800 audit(1788747756.597:20): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.420" name=8006 dev="sda1" ino=2047 res=0 errno=0 [ 223.969984][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.014938][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.050515][ T27] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 224.064852][ T27] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 224.082888][ T27] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 224.099858][ T27] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 224.127865][ T27] usb 4-1: config 1 interface 1 has no altsetting 0 [ 224.285628][ T27] usb 4-1: string descriptor 0 read error: -22 [ 224.372234][ T27] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 224.577588][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.043030][ T27] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 225.064536][ T7325] binder: 7324:7325 ioctl 4018620d 0 returned -22 [ 225.255286][ T7331] FAULT_INJECTION: forcing a failure. [ 225.255286][ T7331] name fail_futex, interval 1, probability 0, space 0, times 1 [ 225.275766][ T27] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 225.298915][ T7331] CPU: 1 PID: 7331 Comm: syz.0.425 Not tainted syzkaller #0 [ 225.306292][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.316401][ T7331] Call Trace: [ 225.319725][ T7331] [ 225.322702][ T7331] dump_stack_lvl+0x18c/0x250 [ 225.327441][ T7331] ? show_regs_print_info+0x20/0x20 [ 225.332703][ T7331] ? load_image+0x420/0x420 [ 225.337271][ T7331] ? lockdep_hardirqs_on+0x98/0x150 [ 225.342546][ T7331] should_fail_ex+0x394/0x4c0 [ 225.347377][ T7331] get_futex_key+0x136/0x1030 [ 225.352111][ T7331] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 225.358151][ T7331] ? futex_setup_timer+0xc0/0xc0 [ 225.363162][ T7331] futex_wake+0x127/0x4f0 [ 225.367558][ T7331] ? futex_wake_mark+0x150/0x150 [ 225.372550][ T7331] ? rcu_read_lock_sched_held+0x8a/0x110 [ 225.378250][ T7331] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 225.384475][ T7331] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.390692][ T7331] ? fd_install+0x60/0x4e0 [ 225.395227][ T7331] do_futex+0x35d/0x3e0 [ 225.399457][ T7331] ? __ia32_sys_get_robust_list+0x110/0x110 [ 225.405419][ T7331] __se_sys_futex+0x3a9/0x440 [ 225.410164][ T7331] ? __x64_sys_futex+0xf0/0xf0 [ 225.415005][ T7331] ? __x64_sys_futex+0x21/0xf0 [ 225.419830][ T7331] do_syscall_64+0x55/0xb0 [ 225.424307][ T7331] ? clear_bhb_loop+0x40/0x90 [ 225.429047][ T7331] ? clear_bhb_loop+0x40/0x90 [ 225.433792][ T7331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.439744][ T7331] RIP: 0033:0x7f89ef59e159 [ 225.444204][ T7331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.463874][ T7331] RSP: 002b:00007f89f05410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 225.472345][ T7331] RAX: ffffffffffffffda RBX: 00007f89ef825fa8 RCX: 00007f89ef59e159 [ 225.480373][ T7331] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f89ef825fac [ 225.488394][ T7331] RBP: 00007f89ef825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 225.496414][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.504433][ T7331] R13: 00007f89ef826038 R14: 00007ffdb6db98c0 R15: 00007ffdb6db99a8 [ 225.512472][ T7331] [ 225.532694][ T27] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 225.555428][ T27] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 225.596081][ T27] usb 4-1: USB disconnect, device number 5 [ 226.343954][ T5818] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 228.480327][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 228.489484][ T5818] usb 1-1: descriptor type invalid, skip [ 228.506103][ T5818] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 228.527818][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.548265][ T5818] usb 1-1: Product: syz [ 228.561290][ T5818] usb 1-1: Manufacturer: syz [ 228.570597][ T5818] usb 1-1: SerialNumber: syz [ 228.806101][ T5818] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 228.873453][ T5818] usb 1-1: USB disconnect, device number 7 [ 231.029122][ T5817] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 231.103581][ T7397] netlink: 516 bytes leftover after parsing attributes in process `syz.1.432'. [ 231.256663][ T5817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.277277][ T5817] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 231.318990][ T5817] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 231.543994][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.271583][ T5817] dvb_ttusb_budget: ttusb_init_controller: error [ 232.297896][ T7411] syz.0.445: vmalloc error: size 24576, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 232.341279][ T5817] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 232.397610][ T7411] CPU: 1 PID: 7411 Comm: syz.0.445 Not tainted syzkaller #0 [ 232.404982][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.415100][ T7411] Call Trace: [ 232.418429][ T7411] [ 232.421403][ T7411] dump_stack_lvl+0x18c/0x250 [ 232.426141][ T7411] ? show_regs_print_info+0x20/0x20 [ 232.431478][ T7411] ? load_image+0x420/0x420 [ 232.436035][ T7411] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 232.442512][ T7411] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 232.449074][ T7411] warn_alloc+0x246/0x340 [ 232.453465][ T7411] ? zone_watermark_ok_safe+0x230/0x230 [ 232.459063][ T7411] ? mod_memcg_page_state+0x4bd/0x940 [ 232.464604][ T7411] __vmalloc_node_range+0x1055/0x1320 [ 232.470075][ T7411] ? free_vm_area+0x50/0x50 [ 232.474643][ T7411] ? vscnprintf+0x80/0x80 [ 232.479020][ T7411] ? alloc_fd+0x590/0x640 [ 232.483397][ T7411] ? kvm_dev_ioctl+0x208/0x1810 [ 232.488279][ T7411] __vmalloc+0x7a/0x90 [ 232.492384][ T7411] ? kvm_dev_ioctl+0x208/0x1810 [ 232.497272][ T7411] kvm_dev_ioctl+0x208/0x1810 [ 232.501984][ T7411] ? __fget_files+0x28/0x460 [ 232.506615][ T7411] ? kvm_resume+0x1e0/0x1e0 [ 232.511150][ T7411] ? bpf_lsm_file_ioctl+0x9/0x10 [ 232.516136][ T7411] ? security_file_ioctl+0x80/0xa0 [ 232.521281][ T7411] ? kvm_resume+0x1e0/0x1e0 [ 232.525814][ T7411] __se_sys_ioctl+0xfd/0x170 [ 232.530448][ T7411] do_syscall_64+0x55/0xb0 [ 232.534895][ T7411] ? clear_bhb_loop+0x40/0x90 [ 232.539609][ T7411] ? clear_bhb_loop+0x40/0x90 [ 232.544337][ T7411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.550275][ T7411] RIP: 0033:0x7f89ef59e159 [ 232.554729][ T7411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.574368][ T7411] RSP: 002b:00007f89f0541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.582818][ T7411] RAX: ffffffffffffffda RBX: 00007f89ef825fa0 RCX: 00007f89ef59e159 [ 232.590822][ T7411] RDX: 0000000000000001 RSI: 000000000000ae01 RDI: 0000000000000005 [ 232.598832][ T7411] RBP: 00007f89ef635024 R08: 0000000000000000 R09: 0000000000000000 [ 232.606850][ T7411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.614849][ T7411] R13: 00007f89ef826038 R14: 00007f89ef825fa0 R15: 00007ffdb6db99a8 [ 232.622873][ T7411] [ 232.631134][ T7412] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 232.649076][ T7411] Mem-Info: [ 232.652308][ T7411] active_anon:6592 inactive_anon:0 isolated_anon:0 [ 232.652308][ T7411] active_file:16576 inactive_file:40058 isolated_file:0 [ 232.652308][ T7411] unevictable:768 dirty:13 writeback:0 [ 232.652308][ T7411] slab_reclaimable:10408 slab_unreclaimable:93047 [ 232.652308][ T7411] mapped:24895 shmem:1389 pagetables:690 [ 232.652308][ T7411] sec_pagetables:0 bounce:0 [ 232.652308][ T7411] kernel_misc_reclaimable:0 [ 232.652308][ T7411] free:1340733 free_pcp:11078 free_cma:0 [ 232.752126][ T7411] Node 0 active_anon:26368kB inactive_anon:0kB active_file:66304kB inactive_file:160032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99580kB dirty:52kB writeback:0kB shmem:4020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11216kB pagetables:2860kB sec_pagetables:0kB all_unreclaimable? no [ 232.799610][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.447'. [ 232.816636][ T7411] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 232.894754][ T7411] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.945595][ T5817] DVB: Unable to find symbol stv0299_attach() [ 232.955955][ T7411] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 232.983284][ T7411] Node 0 DMA32 free:1453632kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26332kB inactive_anon:0kB active_file:66304kB inactive_file:159204kB unevictable:1536kB writepending:52kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:24708kB local_pcp:20604kB free_cma:0kB [ 233.055097][ T7411] lowmem_reserve[]: 0 0 0 0 0 [ 233.064935][ T7411] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.065498][ T5817] DVB: Unable to find symbol tda8083_attach() [ 233.099115][ T5862] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 233.107144][ T5817] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 233.126042][ T7411] lowmem_reserve[]: 0 0 0 0 0 [ 233.131744][ T7411] Node 1 Normal free:3893680kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19424kB local_pcp:7104kB free_cma:0kB [ 233.161827][ T7411] lowmem_reserve[]: 0 0 0 0 0 [ 233.166693][ T7411] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.186157][ T5817] usb 4-1: USB disconnect, device number 6 [ 233.206341][ T7411] Node 0 DMA32: 744*4kB (UME) 633*8kB (UME) 206*16kB (UME) 366*32kB (UME) 154*64kB (UME) 124*128kB (UME) 63*256kB (UME) 39*512kB (UME) 20*1024kB (UM) 6*2048kB (UM) 326*4096kB (UM) = 1452936kB [ 233.261536][ T7411] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 233.278613][ T7411] Node 1 Normal: 246*4kB (UME) 41*8kB (UME) 35*16kB (UME) 105*32kB (UME) 37*64kB (UME) 6*128kB (UME) 3*256kB (UME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3893680kB [ 233.318732][ T7411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.328615][ T7411] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 233.360957][ T5862] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.362314][ T7411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.379434][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.387931][ T5862] usb 5-1: Product: syz [ 233.401692][ T5862] usb 5-1: Manufacturer: syz [ 233.404510][ T7411] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 233.415696][ T5862] usb 5-1: SerialNumber: syz [ 233.430314][ T7411] 58004 total pagecache pages [ 233.469715][ T7411] 0 pages in swap cache [ 233.560172][ T27] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.585894][ T7411] Free swap = 124472kB [ 233.654267][ T7411] Total swap = 124996kB [ 233.740731][ T7411] 2097051 pages RAM [ 233.844677][ T7411] 0 pages HighMem/MovableOnly [ 233.994996][ T7411] 416960 pages reserved [ 234.111338][ T7411] 0 pages cma reserved [ 234.556081][ T5862] usb 5-1: USB disconnect, device number 4 [ 236.252501][ T27] usb 5-1: Service connection timeout for: 256 [ 236.279028][ T27] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 236.287914][ T27] ath9k_htc: Failed to initialize the device [ 236.295293][ T5862] usb 5-1: ath9k_htc: USB layer deinitialized [ 236.491524][ T7449] netlink: 'syz.3.453': attribute type 13 has an invalid length. [ 236.527381][ T7452] process 'syz.4.455' launched './file0' with NULL argv: empty string added [ 236.562299][ T7452] FAULT_INJECTION: forcing a failure. [ 236.562299][ T7452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.606351][ T7452] CPU: 0 PID: 7452 Comm: syz.4.455 Not tainted syzkaller #0 [ 236.613742][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.623858][ T7452] Call Trace: [ 236.627179][ T7452] [ 236.630244][ T7452] dump_stack_lvl+0x18c/0x250 [ 236.634986][ T7452] ? show_regs_print_info+0x20/0x20 [ 236.640286][ T7452] ? load_image+0x420/0x420 [ 236.644851][ T7452] ? __lock_acquire+0x7d80/0x7d80 [ 236.649937][ T7452] should_fail_ex+0x394/0x4c0 [ 236.654678][ T7452] prepare_alloc_pages+0x1e1/0x5b0 [ 236.659852][ T7452] __alloc_pages+0x134/0x460 [ 236.664496][ T7452] ? zone_statistics+0x170/0x170 [ 236.669508][ T7452] __pmd_alloc+0x9a/0x8c0 [ 236.673885][ T7452] ? __rwlock_init+0x150/0x150 [ 236.678741][ T7452] ? __pud_alloc+0x200/0x200 [ 236.683408][ T7452] ? hugepage_vma_check+0x471/0x560 [ 236.688673][ T7452] handle_mm_fault+0xb75/0x4a50 [ 236.693575][ T7452] ? handle_mm_fault+0xe6/0x4a50 [ 236.698579][ T7452] ? numa_migrate_prep+0x350/0x350 [ 236.703784][ T7452] __get_user_pages+0x604/0x1580 [ 236.708797][ T7452] ? preempt_schedule+0xc0/0xd0 [ 236.713719][ T7452] ? populate_vma_page_range+0x380/0x380 [ 236.719421][ T7452] get_user_pages_remote+0x39e/0xb90 [ 236.724801][ T7452] ? get_dump_page+0x200/0x200 [ 236.729658][ T7452] ? down_read+0x1ac/0x2e0 [ 236.734139][ T7452] get_arg_page+0x274/0x560 [ 236.738709][ T7452] ? copy_string_kernel+0x220/0x220 [ 236.743968][ T7452] ? load_image+0x420/0x420 [ 236.748536][ T7452] copy_string_kernel+0x165/0x220 [ 236.753630][ T7452] do_execveat_common+0x35d/0x6b0 [ 236.758728][ T7452] __x64_sys_execve+0x92/0xa0 [ 236.763485][ T7452] do_syscall_64+0x55/0xb0 [ 236.767951][ T7452] ? clear_bhb_loop+0x40/0x90 [ 236.772677][ T7452] ? clear_bhb_loop+0x40/0x90 [ 236.777414][ T7452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.783385][ T7452] RIP: 0033:0x7f81e199e159 [ 236.788020][ T7452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.807692][ T7452] RSP: 002b:00007f81e27c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 236.816168][ T7452] RAX: ffffffffffffffda RBX: 00007f81e1c25fa0 RCX: 00007f81e199e159 [ 236.824197][ T7452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 236.832225][ T7452] RBP: 00007f81e1a35024 R08: 0000000000000000 R09: 0000000000000000 [ 236.840249][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.848264][ T7452] R13: 00007f81e1c26038 R14: 00007f81e1c25fa0 R15: 00007fffb08c9368 [ 236.856375][ T7452] [ 237.769078][ T5862] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 239.838648][ T5862] usb 1-1: Dual-Role OTG device on HNP port [ 239.856364][ T5862] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 239.897769][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.990344][ T5862] gspca_main: spca501-2.14.0 probing 0000:0000 [ 240.029389][ T5862] gspca_spca501: reg write: error -32 [ 240.034848][ T5862] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 240.105990][ T5862] spca501: probe of 1-1:1.0 failed with error -22 [ 240.165412][ T5862] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 240.249172][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 240.458964][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 240.469718][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.491181][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.502439][ T23] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 240.512585][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.536663][ T23] usb 5-1: config 0 descriptor?? [ 240.693814][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.463'. [ 241.083097][ T23] usbhid 5-1:0.0: can't add hid device: -32 [ 241.223692][ T6443] udevd[6443]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 241.323916][ T23] usbhid: probe of 5-1:0.0 failed with error -32 [ 241.333497][ T23] usb 5-1: USB disconnect, device number 5 [ 243.658941][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 246.021727][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.051470][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.531771][ T7563] overlayfs: missing 'lowerdir' [ 249.688989][ T5818] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 249.707799][ T7570] random: crng reseeded on system resumption [ 249.901783][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.917560][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.941284][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.967524][ T5818] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.987185][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.010727][ T5818] usb 5-1: config 0 descriptor?? [ 250.445857][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.481938][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.491546][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.503077][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.512373][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.527201][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.550082][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.557574][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.569071][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.576780][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.587327][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.597398][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.607771][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.617965][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.628209][ T5818] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 250.658697][ T5818] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 250.683233][ T7584] fuse: Invalid rootmode [ 250.757017][ T5818] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 250.854144][ T5818] usb 5-1: USB disconnect, device number 6 [ 252.618038][ T7586] fido_id[7586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 255.958957][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 255.973775][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.980449][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.178931][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 256.203457][ T23] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 256.229078][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.237226][ T23] usb 5-1: Product: syz [ 256.248959][ T23] usb 5-1: Manufacturer: syz [ 256.253709][ T23] usb 5-1: SerialNumber: syz [ 256.473879][ T23] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 256.506072][ T23] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 256.543747][ T23] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 256.583702][ T23] usb 5-1: media controller created [ 256.671824][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.915448][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 256.979602][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.010800][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.013553][ T23] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 257.080607][ T23] usb 5-1: USB disconnect, device number 7 [ 258.655003][ T5818] IPVS: starting estimator thread 0... [ 258.664929][ T7672] IPVS: rr: FWM 3 0x00000003 - no destination available [ 258.779070][ T7673] IPVS: using max 20 ests per chain, 48000 per kthread [ 260.096085][ T7700] FAULT_INJECTION: forcing a failure. [ 260.096085][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 260.189136][ T7700] CPU: 1 PID: 7700 Comm: syz.3.515 Not tainted syzkaller #0 [ 260.196531][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.206633][ T7700] Call Trace: [ 260.209957][ T7700] [ 260.212935][ T7700] dump_stack_lvl+0x18c/0x250 [ 260.217669][ T7700] ? show_regs_print_info+0x20/0x20 [ 260.222918][ T7700] ? load_image+0x420/0x420 [ 260.227477][ T7700] ? __might_sleep+0xe0/0xe0 [ 260.232122][ T7700] ? __lock_acquire+0x7d80/0x7d80 [ 260.237201][ T7700] ? lock_chain_count+0x20/0x20 [ 260.242117][ T7700] should_fail_ex+0x394/0x4c0 [ 260.246852][ T7700] should_failslab+0x9/0x20 [ 260.251494][ T7700] slab_pre_alloc_hook+0x59/0x300 [ 260.256575][ T7700] ? _raw_spin_unlock+0x40/0x40 [ 260.261478][ T7700] ? __get_vm_area_node+0x125/0x370 [ 260.266745][ T7700] __kmem_cache_alloc_node+0x53/0x250 [ 260.272231][ T7700] ? __get_vm_area_node+0x125/0x370 [ 260.277499][ T7700] kmalloc_node_trace+0x26/0xe0 [ 260.282411][ T7700] __get_vm_area_node+0x125/0x370 [ 260.287487][ T7700] ? xskq_create+0x56/0x170 [ 260.292013][ T7700] ? xsk_init_queue+0xad/0x100 [ 260.296823][ T7700] __vmalloc_node_range+0x36f/0x1320 [ 260.302152][ T7700] ? xskq_create+0xbf/0x170 [ 260.306780][ T7700] ? free_vm_area+0x50/0x50 [ 260.311362][ T7700] vmalloc_user+0x74/0x80 [ 260.315734][ T7700] ? xskq_create+0xbf/0x170 [ 260.320254][ T7700] xskq_create+0xbf/0x170 [ 260.324611][ T7700] xsk_init_queue+0xad/0x100 [ 260.329226][ T7700] xsk_setsockopt+0x4c9/0x750 [ 260.333929][ T7700] ? xsk_poll+0x670/0x670 [ 260.338277][ T7700] ? __fget_files+0x28/0x460 [ 260.342911][ T7700] ? aa_sock_opt_perm+0x74/0x100 [ 260.347897][ T7700] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 260.353546][ T7700] ? security_socket_setsockopt+0x7e/0xa0 [ 260.359328][ T7700] ? xsk_poll+0x670/0x670 [ 260.363713][ T7700] do_sock_setsockopt+0x175/0x1a0 [ 260.368799][ T7700] ? __fdget+0x180/0x210 [ 260.373135][ T7700] __x64_sys_setsockopt+0x182/0x200 [ 260.378439][ T7700] do_syscall_64+0x55/0xb0 [ 260.382921][ T7700] ? clear_bhb_loop+0x40/0x90 [ 260.387662][ T7700] ? clear_bhb_loop+0x40/0x90 [ 260.392420][ T7700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.398372][ T7700] RIP: 0033:0x7f5a90f9e159 [ 260.402868][ T7700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.422537][ T7700] RSP: 002b:00007f5a91f58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.431043][ T7700] RAX: ffffffffffffffda RBX: 00007f5a91225fa0 RCX: 00007f5a90f9e159 [ 260.439077][ T7700] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 260.447104][ T7700] RBP: 00007f5a91035024 R08: 0000000000000004 R09: 0000000000000000 [ 260.455136][ T7700] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 260.463164][ T7700] R13: 00007f5a91226038 R14: 00007f5a91225fa0 R15: 00007ffe9f8b0bc8 [ 260.471208][ T7700] [ 260.497758][ T7700] syz.3.515: vmalloc error: size 8192, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 260.563418][ T7700] CPU: 1 PID: 7700 Comm: syz.3.515 Not tainted syzkaller #0 [ 260.570804][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.580924][ T7700] Call Trace: [ 260.584260][ T7700] [ 260.587233][ T7700] dump_stack_lvl+0x18c/0x250 [ 260.591974][ T7700] ? show_regs_print_info+0x20/0x20 [ 260.597250][ T7700] ? load_image+0x420/0x420 [ 260.601859][ T7700] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.608388][ T7700] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 260.614960][ T7700] warn_alloc+0x246/0x340 [ 260.619359][ T7700] ? __get_vm_area_node+0x125/0x370 [ 260.624618][ T7700] ? zone_watermark_ok_safe+0x230/0x230 [ 260.630214][ T7700] ? rcu_is_watching+0x15/0xb0 [ 260.635026][ T7700] ? __get_vm_area_node+0x356/0x370 [ 260.640275][ T7700] ? xsk_init_queue+0xad/0x100 [ 260.645066][ T7700] __vmalloc_node_range+0x394/0x1320 [ 260.650407][ T7700] ? free_vm_area+0x50/0x50 [ 260.654954][ T7700] vmalloc_user+0x74/0x80 [ 260.659323][ T7700] ? xskq_create+0xbf/0x170 [ 260.663849][ T7700] xskq_create+0xbf/0x170 [ 260.668210][ T7700] xsk_init_queue+0xad/0x100 [ 260.672850][ T7700] xsk_setsockopt+0x4c9/0x750 [ 260.677574][ T7700] ? xsk_poll+0x670/0x670 [ 260.681943][ T7700] ? __fget_files+0x28/0x460 [ 260.686591][ T7700] ? aa_sock_opt_perm+0x74/0x100 [ 260.691565][ T7700] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 260.697150][ T7700] ? security_socket_setsockopt+0x7e/0xa0 [ 260.702904][ T7700] ? xsk_poll+0x670/0x670 [ 260.707261][ T7700] do_sock_setsockopt+0x175/0x1a0 [ 260.712322][ T7700] ? __fdget+0x180/0x210 [ 260.716606][ T7700] __x64_sys_setsockopt+0x182/0x200 [ 260.721838][ T7700] do_syscall_64+0x55/0xb0 [ 260.726290][ T7700] ? clear_bhb_loop+0x40/0x90 [ 260.730997][ T7700] ? clear_bhb_loop+0x40/0x90 [ 260.735701][ T7700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.741626][ T7700] RIP: 0033:0x7f5a90f9e159 [ 260.746074][ T7700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.765706][ T7700] RSP: 002b:00007f5a91f58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.774155][ T7700] RAX: ffffffffffffffda RBX: 00007f5a91225fa0 RCX: 00007f5a90f9e159 [ 260.782164][ T7700] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 260.790159][ T7700] RBP: 00007f5a91035024 R08: 0000000000000004 R09: 0000000000000000 [ 260.798158][ T7700] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 260.806158][ T7700] R13: 00007f5a91226038 R14: 00007f5a91225fa0 R15: 00007ffe9f8b0bc8 [ 260.814173][ T7700] [ 260.829603][ T7700] Mem-Info: [ 260.836840][ T7700] active_anon:6573 inactive_anon:0 isolated_anon:0 [ 260.836840][ T7700] active_file:16576 inactive_file:40070 isolated_file:0 [ 260.836840][ T7700] unevictable:768 dirty:18 writeback:0 [ 260.836840][ T7700] slab_reclaimable:10627 slab_unreclaimable:92981 [ 260.836840][ T7700] mapped:24908 shmem:1398 pagetables:721 [ 260.836840][ T7700] sec_pagetables:0 bounce:0 [ 260.836840][ T7700] kernel_misc_reclaimable:0 [ 260.836840][ T7700] free:1339074 free_pcp:12705 free_cma:0 [ 260.905766][ T7700] Node 0 active_anon:26292kB inactive_anon:0kB active_file:66304kB inactive_file:160080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99632kB dirty:72kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11296kB pagetables:2884kB sec_pagetables:0kB all_unreclaimable? no [ 260.941250][ T7700] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 260.983984][ T7700] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.015746][ T7700] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 261.021955][ T7700] Node 0 DMA32 free:1446992kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26256kB inactive_anon:0kB active_file:66304kB inactive_file:159252kB unevictable:1536kB writepending:72kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:31200kB local_pcp:20644kB free_cma:0kB [ 261.058439][ T7700] lowmem_reserve[]: 0 0 0 0 0 [ 261.063519][ T7700] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.095654][ T7700] lowmem_reserve[]: 0 0 0 0 0 [ 261.101488][ T7700] Node 1 Normal free:3893936kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19168kB local_pcp:12320kB free_cma:0kB [ 261.132585][ T7700] lowmem_reserve[]: 0 0 0 0 0 [ 261.137475][ T7700] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.152694][ T7700] Node 0 DMA32: 22*4kB (ME) 5*8kB (UM) 225*16kB (UM) 502*32kB (UM) 136*64kB (UME) 76*128kB (UM) 39*256kB (UM) 28*512kB (UME) 14*1024kB (UM) 13*2048kB (UM) 328*4096kB (UM) = 1446992kB [ 261.208372][ T7700] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 261.238922][ T7700] Node 1 Normal: 246*4kB (UME) 41*8kB (UME) 35*16kB (UME) 107*32kB (UME) 38*64kB (UME) 7*128kB (UME) 3*256kB (UME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3893936kB [ 261.261919][ T7700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.297926][ T7700] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 261.308304][ T7700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.324265][ T7700] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 261.349502][ T7700] 58018 total pagecache pages [ 261.356591][ T7700] 0 pages in swap cache [ 261.361554][ T7700] Free swap = 124472kB [ 261.365874][ T7700] Total swap = 124996kB [ 261.370855][ T7700] 2097051 pages RAM [ 261.380075][ T7700] 0 pages HighMem/MovableOnly [ 261.388239][ T7700] 416960 pages reserved [ 261.400142][ T7700] 0 pages cma reserved [ 262.695910][ T7724] netlink: 404 bytes leftover after parsing attributes in process `syz.4.522'. [ 263.267522][ T7734] tmpfs: Bad value for 'mpol' [ 263.421210][ T7703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.447433][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x850c instead [ 263.464306][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 263.475657][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2ad1 instead [ 263.493404][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x5d13 instead [ 263.505289][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 263.530788][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 263.552095][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 263.566818][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 263.583383][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 263.602797][ T7703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.608742][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 263.625655][ T7736] jffs2: Further such events for this erase block will not be printed [ 263.653864][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 263.676211][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 263.686937][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2ad1 instead [ 263.697771][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x5d13 instead [ 263.724970][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 263.772281][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 263.786913][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 263.804347][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 263.815144][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 263.830445][ T7736] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 263.843591][ T7736] jffs2: Further such events for this erase block will not be printed [ 263.866643][ T7736] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 263.877577][ T7736] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 264.289184][ T5778] Bluetooth: hci0: command 0x080f tx timeout [ 264.370365][ T7703] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.379838][ T7703] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.388789][ T7703] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.398169][ T7703] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.558961][ T7746] netlink: 32 bytes leftover after parsing attributes in process `syz.3.530'. [ 264.665103][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 264.989769][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 265.089583][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 265.129187][ T3548] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 265.129872][ T7763] bond1: Invalid ad_actor_system MAC address. [ 265.143235][ T7763] bond1: option ad_actor_system: invalid value (149) [ 265.164223][ T7763] bond1 (unregistering): Released all slaves [ 265.249238][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 265.299396][ T3548] usb 2-1: device descriptor read/64, error -71 [ 265.459518][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 265.591932][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 265.656279][ T3548] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 265.737795][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.848784][ T23] usb 4-1: Product: syz [ 265.902140][ T3548] usb 2-1: device descriptor read/64, error -71 [ 265.931667][ T23] usb 4-1: Manufacturer: syz [ 265.993999][ T23] usb 4-1: SerialNumber: syz [ 266.061662][ T23] usb 4-1: config 0 descriptor?? [ 266.114445][ T3548] usb usb2-port1: attempt power cycle [ 266.273745][ T23] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 266.748652][ T7781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.539'. [ 267.170961][ T3548] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 267.181209][ T23] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 267.199200][ T23] usb 4-1: USB disconnect, device number 7 [ 267.223597][ T3548] usb 2-1: device descriptor read/8, error -71 [ 267.372693][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 267.407809][ T7787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.498990][ T3548] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 267.529834][ T3548] usb 2-1: device descriptor read/8, error -71 [ 267.599816][ T7709] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 267.649798][ T3548] usb usb2-port1: unable to enumerate USB device [ 267.779762][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 267.799462][ T7709] usb 5-1: Using ep0 maxpacket: 8 [ 267.816871][ T7709] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 267.847264][ T7709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.863703][ T7709] usb 5-1: Product: syz [ 267.868073][ T7709] usb 5-1: Manufacturer: syz [ 267.877832][ T7709] usb 5-1: SerialNumber: syz [ 267.885387][ T7709] usb 5-1: config 0 descriptor?? [ 267.900443][ T7709] gspca_main: se401-2.14.0 probing 047d:5003 [ 267.978100][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.008969][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.028923][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 268.046813][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.072916][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.106111][ T23] usb 4-1: config 0 descriptor?? [ 268.338051][ T7817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.553'. [ 268.534068][ T7709] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 268.550992][ T23] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 268.588558][ T23] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 268.737694][ T9] usb 5-1: USB disconnect, device number 8 [ 268.810888][ T7823] netlink: 'syz.3.543': attribute type 2 has an invalid length. [ 268.833191][ T7823] netlink: 224 bytes leftover after parsing attributes in process `syz.3.543'. [ 268.990249][ T1188] usb 4-1: USB disconnect, device number 8 [ 269.205833][ T7827] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 269.817007][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 270.648956][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 270.660628][ T7853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.675244][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.686513][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.698140][ T7853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.726767][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.748903][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 270.769265][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.793691][ T7858] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 270.802265][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 270.818921][ T23] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 270.826982][ T23] usb 2-1: Manufacturer: syz [ 270.850818][ T23] usb 2-1: config 0 descriptor?? [ 271.269216][ T23] rc_core: IR keymap rc-hauppauge not found [ 271.280037][ T23] Registered IR keymap rc-empty [ 271.396487][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.440807][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.542492][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 271.728962][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 271.933347][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.963703][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 271.989466][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.109025][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.178457][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.745652][ T7872] capability: warning: `syz.0.571' uses 32-bit capabilities (legacy support in use) [ 273.766641][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.809370][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.848939][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.883822][ T28] audit: type=1800 audit(1788747806.607:21): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.572" name="syzkaller0" dev="sda1" ino=2050 res=0 errno=0 [ 273.915459][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.969192][ T23] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 274.009649][ T23] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 274.017729][ T23] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 274.102707][ T23] usb 2-1: USB disconnect, device number 14 [ 274.190770][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.575'. [ 274.540036][ T5778] Bluetooth: hci0: Malformed Event: 0x2f [ 275.216829][ T7898] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 275.994108][ T7906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.584'. [ 276.138143][ T28] audit: type=1804 audit(1788747808.857:22): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.573" name="file1" dev="ramfs" ino=16138 res=1 errno=0 [ 276.207230][ T7911] fuse: Bad value for 'fd' [ 278.424468][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 278.595951][ T3463] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 279.303676][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x850c instead [ 279.316025][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 279.326430][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2ad1 instead [ 279.336877][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x5d13 instead [ 279.347268][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 279.357638][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 279.368007][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 279.378424][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 279.388897][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 279.399352][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 279.409801][ T7950] jffs2: Further such events for this erase block will not be printed [ 279.418501][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 279.428929][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 279.439389][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2ad1 instead [ 279.449785][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x5d13 instead [ 279.460172][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 279.470590][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 279.481108][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 279.491528][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 279.501964][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 279.512355][ T7950] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 279.522896][ T7950] jffs2: Further such events for this erase block will not be printed [ 279.531464][ T7950] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 279.540794][ T7950] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 279.690102][ T7955] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 279.696827][ T7955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.733851][ T7955] vhci_hcd vhci_hcd.0: Device attached [ 279.993632][ T7969] random: crng reseeded on system resumption [ 280.029147][ T1188] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 280.492335][ T7956] vhci_hcd: connection reset by peer [ 280.500079][ T34] vhci_hcd: stop threads [ 280.504395][ T34] vhci_hcd: release socket [ 280.521606][ T34] vhci_hcd: disconnect device [ 280.595768][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 280.898997][ T9] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 281.136903][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.218440][ T9] usb 4-1: config 8 has an invalid interface number: 109 but max is 0 [ 281.297536][ T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 281.392140][ T9] usb 4-1: config 8 has no interface number 0 [ 281.449384][ T9] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 281.557300][ T9] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 281.659922][ T9] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 281.716065][ T9] usb 4-1: string descriptor 0 read error: -22 [ 281.736981][ T9] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 281.769086][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.823179][ T7973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.866504][ T9] metro_usb 4-1:8.109: Metrologic USB to Serial converter detected [ 281.919871][ T9] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 281.963902][ T5778] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 282.070951][ T9] usb 4-1: USB disconnect, device number 9 [ 282.090092][ T9] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 282.106987][ T9] metro_usb 4-1:8.109: device disconnected [ 282.172824][ T8] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 282.196027][ T8] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 282.310520][ T7979] ceph: No mds server is up or the cluster is laggy [ 284.857426][ T8017] input: syz0 as /devices/virtual/input/input15 [ 285.377847][ T1188] vhci_hcd: vhci_device speed not set [ 285.673805][ T8025] Cannot find set identified by id 4 to match [ 285.979321][ T5778] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 285.988467][ T5778] Bluetooth: hci0: Injecting HCI hardware error event [ 285.998082][ T51] Bluetooth: hci0: hardware error 0x00 [ 287.241409][ T8042] [ 287.243848][ T8042] ====================================================== [ 287.251149][ T8042] WARNING: possible circular locking dependency detected [ 287.258206][ T8042] syzkaller #0 Not tainted [ 287.262630][ T8042] ------------------------------------------------------ [ 287.269662][ T8042] syz.0.629/8042 is trying to acquire lock: [ 287.275614][ T8042] ffffffff8ddf70b0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 287.285388][ T8042] [ 287.285388][ T8042] but task is already holding lock: [ 287.292853][ T8042] ffff88805c3429e0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 287.302596][ T8042] [ 287.302596][ T8042] which lock already depends on the new lock. [ 287.302596][ T8042] [ 287.313022][ T8042] [ 287.313022][ T8042] the existing dependency chain (in reverse order) is: [ 287.322099][ T8042] [ 287.322099][ T8042] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 287.330882][ T8042] down_write+0x97/0x200 [ 287.335698][ T8042] configfs_depend_item_unlocked+0x157/0x430 [ 287.342251][ T8042] usbg_make_tpg+0x1f7/0x580 [ 287.347410][ T8042] target_fabric_make_tpg+0xa4/0x6d0 [ 287.353254][ T8042] configfs_mkdir+0x515/0x9e0 [ 287.358483][ T8042] vfs_mkdir+0x2a5/0x470 [ 287.363271][ T8042] do_mkdirat+0x1dc/0x450 [ 287.368149][ T8042] __x64_sys_mkdir+0x6e/0x80 [ 287.373283][ T8042] do_syscall_64+0x55/0xb0 [ 287.378246][ T8042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.384688][ T8042] [ 287.384688][ T8042] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 287.392359][ T8042] __mutex_lock+0x135/0xc80 [ 287.397499][ T8042] tcm_set_name+0x2a/0x90 [ 287.402381][ T8042] function_make+0x199/0x350 [ 287.407518][ T8042] configfs_mkdir+0x515/0x9e0 [ 287.412737][ T8042] vfs_mkdir+0x2a5/0x470 [ 287.417521][ T8042] do_mkdirat+0x1dc/0x450 [ 287.422391][ T8042] __x64_sys_mkdir+0x6e/0x80 [ 287.427534][ T8042] do_syscall_64+0x55/0xb0 [ 287.432519][ T8042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.438964][ T8042] [ 287.438964][ T8042] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 287.447246][ T8042] __lock_acquire+0x37ef/0x7d80 [ 287.452643][ T8042] lock_acquire+0x19e/0x420 [ 287.457721][ T8042] __mutex_lock+0x135/0xc80 [ 287.462777][ T8042] configfs_rmdir+0x63c/0x980 [ 287.467995][ T8042] vfs_rmdir+0x352/0x4b0 [ 287.472877][ T8042] do_rmdir+0x29f/0x590 [ 287.477665][ T8042] __x64_sys_unlinkat+0xc4/0xe0 [ 287.483071][ T8042] do_syscall_64+0x55/0xb0 [ 287.488043][ T8042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.494569][ T8042] [ 287.494569][ T8042] other info that might help us debug this: [ 287.494569][ T8042] [ 287.504821][ T8042] Chain exists of: [ 287.504821][ T8042] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 287.504821][ T8042] [ 287.519546][ T8042] Possible unsafe locking scenario: [ 287.519546][ T8042] [ 287.527014][ T8042] CPU0 CPU1 [ 287.532420][ T8042] ---- ---- [ 287.537816][ T8042] lock(&sb->s_type->i_mutex_key#23); [ 287.543308][ T8042] lock(&opts->dep_lock); [ 287.550288][ T8042] lock(&sb->s_type->i_mutex_key#23); [ 287.558298][ T8042] lock(gadget_subsys.su_mutex); [ 287.563344][ T8042] [ 287.563344][ T8042] *** DEADLOCK *** [ 287.563344][ T8042] [ 287.571508][ T8042] 3 locks held by syz.0.629/8042: [ 287.576544][ T8042] #0: ffff888141efc418 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 287.585817][ T8042] #1: ffff88805df6dab0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 287.596657][ T8042] #2: ffff88805c3429e0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 287.606786][ T8042] [ 287.606786][ T8042] stack backtrace: [ 287.612693][ T8042] CPU: 0 PID: 8042 Comm: syz.0.629 Not tainted syzkaller #0 [ 287.619998][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.630074][ T8042] Call Trace: [ 287.633376][ T8042] [ 287.636349][ T8042] dump_stack_lvl+0x18c/0x250 [ 287.641058][ T8042] ? load_image+0x420/0x420 [ 287.645607][ T8042] ? show_regs_print_info+0x20/0x20 [ 287.650967][ T8042] ? print_circular_bug+0x12b/0x1a0 [ 287.656217][ T8042] check_noncircular+0x2fc/0x400 [ 287.661218][ T8042] ? print_deadlock_bug+0x5d0/0x5d0 [ 287.666443][ T8042] ? lockdep_lock+0xf5/0x230 [ 287.671058][ T8042] ? _find_first_zero_bit+0xd6/0x100 [ 287.676377][ T8042] __lock_acquire+0x37ef/0x7d80 [ 287.681361][ T8042] ? verify_lock_unused+0x140/0x140 [ 287.686588][ T8042] ? verify_lock_unused+0x140/0x140 [ 287.691821][ T8042] lock_acquire+0x19e/0x420 [ 287.696353][ T8042] ? configfs_rmdir+0x63c/0x980 [ 287.701233][ T8042] ? __might_sleep+0xe0/0xe0 [ 287.705855][ T8042] ? read_lock_is_recursive+0x20/0x20 [ 287.711258][ T8042] __mutex_lock+0x135/0xc80 [ 287.715791][ T8042] ? configfs_rmdir+0x63c/0x980 [ 287.720676][ T8042] ? configfs_rmdir+0x63c/0x980 [ 287.725554][ T8042] ? mutex_lock_nested+0x20/0x20 [ 287.730520][ T8042] ? __lock_acquire+0x7d80/0x7d80 [ 287.735567][ T8042] ? lockref_put_or_lock+0x72/0xb0 [ 287.740707][ T8042] ? dput+0x3b/0x1e0 [ 287.744727][ T8042] ? dput+0x3b/0x1e0 [ 287.748649][ T8042] configfs_rmdir+0x63c/0x980 [ 287.753398][ T8042] vfs_rmdir+0x352/0x4b0 [ 287.757677][ T8042] do_rmdir+0x29f/0x590 [ 287.761864][ T8042] ? __check_object_size+0x4fc/0xa40 [ 287.767168][ T8042] ? d_delete_notify+0x150/0x150 [ 287.772137][ T8042] ? getname_flags+0x20a/0x500 [ 287.776932][ T8042] __x64_sys_unlinkat+0xc4/0xe0 [ 287.781811][ T8042] do_syscall_64+0x55/0xb0 [ 287.786255][ T8042] ? clear_bhb_loop+0x40/0x90 [ 287.790957][ T8042] ? clear_bhb_loop+0x40/0x90 [ 287.795664][ T8042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.801586][ T8042] RIP: 0033:0x7f89ef59e159 [ 287.806022][ T8042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.825652][ T8042] RSP: 002b:00007f89f0520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 287.834094][ T8042] RAX: ffffffffffffffda RBX: 00007f89ef826090 RCX: 00007f89ef59e159 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 287.842091][ T8042] RDX: 0000000000000200 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 287.850092][ T8042] RBP: 00007f89ef635024 R08: 0000000000000000 R09: 0000000000000000 [ 287.858085][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.866072][ T8042] R13: 00007f89ef826128 R14: 00007f89ef826090 R15: 00007ffdb6db99a8 [ 287.874075][ T8042] [ 287.887582][ T8042] printk: console [ttyGS0] disabled [ 288.059238][ T1188] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 288.129760][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 288.765488][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.835127][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.907878][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.989412][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.802878][ T62] hsr_slave_0: left promiscuous mode [ 289.810402][ T62] hsr_slave_1: left promiscuous mode [ 289.816473][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.825583][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.833599][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.841847][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.850820][ T62] bridge_slave_1: left allmulticast mode [ 289.857269][ T62] bridge_slave_1: left promiscuous mode [ 289.863061][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.872120][ T62] bridge_slave_0: left allmulticast mode [ 289.877784][ T62] bridge_slave_0: left promiscuous mode [ 289.883810][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.895144][ T62] veth1_macvtap: left promiscuous mode [ 289.900749][ T62] veth0_macvtap: left promiscuous mode [ 289.906314][ T62] veth1_vlan: left promiscuous mode [ 289.911820][ T62] veth0_vlan: left promiscuous mode [ 290.138882][ T62] team0 (unregistering): Port device team_slave_1 removed [ 290.173118][ T62] team0 (unregistering): Port device team_slave_0 removed [ 290.200630][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.232522][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.335027][ T62] bond0 (unregistering): Released all slaves [ 290.689839][ T62] IPVS: stop unused estimator thread 0... [ 290.781466][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.835977][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.888320][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.937652][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.087000][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.137720][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.217832][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.297317][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.533534][ T62] tipc: Disabling bearer [ 291.548389][ T62] tipc: Left network mode [ 291.555100][ T62] tipc: Left network mode [ 292.615226][ T62] hsr_slave_0: left promiscuous mode [ 292.621349][ T62] hsr_slave_1: left promiscuous mode [ 292.631978][ T62] hsr_slave_0: left promiscuous mode [ 292.637910][ T62] hsr_slave_1: left promiscuous mode [ 292.647141][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.659212][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.670162][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.677584][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.688893][ T62] bridge_slave_1: left allmulticast mode [ 292.694580][ T62] bridge_slave_1: left promiscuous mode [ 292.700549][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.712203][ T62] bridge_slave_0: left allmulticast mode [ 292.717978][ T62] bridge_slave_0: left promiscuous mode [ 292.724170][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.738590][ T62] veth1_macvtap: left promiscuous mode [ 292.744526][ T62] veth0_macvtap: left promiscuous mode [ 292.751658][ T62] veth1_vlan: left promiscuous mode [ 292.757006][ T62] veth0_vlan: left promiscuous mode [ 292.766091][ T62] veth1_macvtap: left promiscuous mode [ 292.772972][ T62] veth0_macvtap: left promiscuous mode [ 292.778623][ T62] veth1_vlan: left promiscuous mode [ 292.784417][ T62] veth0_vlan: left promiscuous mode [ 293.340137][ T62] bond0 (unregistering): Released all slaves [ 293.802791][ T62] team0 (unregistering): Port device team_slave_1 removed [ 293.843160][ T62] team0 (unregistering): Port device team_slave_0 removed [ 293.883094][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.925555][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.945300][ T5763] infiniband syz1: ib_query_port failed (-19) [ 294.226698][ T62] bond0 (unregistering): Released all slaves [ 294.839221][ T62] IPVS: stop unused estimator thread 0...