last executing test programs: 5.436299413s ago: executing program 0 (id=461): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x61e, &(0x7f0000001280)="$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") 4.800514144s ago: executing program 1 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='\x00', 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100007066e240cd0618011f3e0000000109021b0001080000000904eb090109"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x7, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xdd5e}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 4.531665668s ago: executing program 0 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) 3.588786383s ago: executing program 0 (id=479): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\n', 0x2) 3.498697665s ago: executing program 0 (id=480): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000280)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.498399795s ago: executing program 2 (id=481): syz_usb_connect$uac1(0x2, 0x85, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001000000208205740040000102030109027300030144f0080904000000010100000a0401010116000201020c1209205e0204080d00035909040100000102000009040101010102000009050109000403190c07250100030600090402"], 0x0) 2.813652836s ago: executing program 2 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003440)={0xffffffffffffffff, 0x20, &(0x7f0000003400)={&(0x7f00000023c0)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1000090, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TCFLSH(r0, 0x5453, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket(0x10, 0x803, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)={[{@dyn}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foosyz\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r4 = socket$key(0xf, 0x3, 0x2) close(r4) 1.90692969s ago: executing program 2 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70ad2c, 0x1, {{0x2}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 1.9067231s ago: executing program 2 (id=492): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000000)=@usbdevfs_driver={0xfffffffa, 0xbe1, 0x0}) 1.90655429s ago: executing program 4 (id=493): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @loopback}}}], 0x20}, 0xe900) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfe33) sendmsg(r0, &(0x7f0000004a80)={&(0x7f00000002c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'ghash-ce-sync\x00'}, 0x80, 0x0}, 0x24040800) 1.88239655s ago: executing program 4 (id=494): socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1.494663436s ago: executing program 1 (id=495): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c616773000702000000000200000000020000000008020000000002", 0x43) 1.463988807s ago: executing program 3 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c616773000702000000000200000000020000000008", 0x3d) 1.410840788s ago: executing program 1 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)="ff80", 0x2) 1.408503188s ago: executing program 1 (id=499): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x61e, &(0x7f0000001280)="$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") 1.399118998s ago: executing program 3 (id=500): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000fcffffff000000000900000085000000360000001801000020646c2500000000003020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) chdir(&(0x7f0000000480)='./cgroup\x00') syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0xd48a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0xfffffffe, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r6, 0x0, '\x00', 0x0, r5, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000180)={{r7}, 0x3, 0x1000, 0x9}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) 979.748575ms ago: executing program 4 (id=501): syz_usb_connect(0x0, 0x32, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1, 0x3}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) 622.90025ms ago: executing program 2 (id=502): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000018030403000700c5001000451d00e100680000052f90780040"], 0xef) 515.998702ms ago: executing program 1 (id=503): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000500)='0x40\n\x00', 0x5) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r3, &(0x7f00000006c0)='WIN', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(r4) 513.826832ms ago: executing program 3 (id=504): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x2000, 0x800) 449.736183ms ago: executing program 3 (id=505): recvmsg(0xffffffffffffffff, &(0x7f00000054c0)={0x0, 0x0, 0x0}, 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setns(0xc9, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040d0}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dddbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x24000858) close_range(r0, 0xffffffffffffffff, 0x0) 449.409833ms ago: executing program 2 (id=506): r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000002c0)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002280)="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", 0x2cd}], 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 449.234743ms ago: executing program 1 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) 448.575053ms ago: executing program 4 (id=508): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) 389.151004ms ago: executing program 4 (id=509): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) recvfrom$inet(r3, 0x0, 0x4, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 352.103665ms ago: executing program 3 (id=510): mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c616773000702000000000200000000020000000008", 0x3d) 351.613195ms ago: executing program 0 (id=511): syz_ublk_setup_io_uring(0x35da, 0x0, 0x0, 0x0, 0x0) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) 278.688696ms ago: executing program 3 (id=512): socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 278.488976ms ago: executing program 0 (id=513): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x7, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x2, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0) 0s ago: executing program 4 (id=514): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2b, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x61e, &(0x7f0000001280)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. [ 28.963361][ T4317] cgroup: Unknown subsys name 'net' [ 29.243692][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.500102][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.757745][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.760013][ T4332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.762002][ T4332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.763680][ T4332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.765108][ T4332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.766523][ T4332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.781145][ T4332] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.782949][ T4332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.784381][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.786118][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.787403][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.788956][ T4332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.790428][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.791922][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.794378][ T4332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.795937][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.797106][ T4332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.806091][ T4342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.807678][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.809301][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.810823][ T4342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.813825][ T4342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.820423][ T4342] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.821937][ T4342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.828514][ T4342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.830369][ T4342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.831982][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.833991][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.835382][ T4342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.836847][ T4342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.939543][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.954509][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.983328][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.984747][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.986347][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.992422][ T4338] chnl_net:caif_netlink_parms(): no params data found [ 30.996353][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.997664][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.999277][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.020616][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.027290][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.028513][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.030059][ T4337] device bridge_slave_0 entered promiscuous mode [ 31.034481][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.041146][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.042548][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.044162][ T4337] device bridge_slave_1 entered promiscuous mode [ 31.062444][ T4329] team0: Port device team_slave_0 added [ 31.067586][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.069193][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.070330][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.072512][ T4338] device bridge_slave_0 entered promiscuous mode [ 31.075751][ T4329] team0: Port device team_slave_1 added [ 31.076788][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.078033][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.079459][ T4338] device bridge_slave_1 entered promiscuous mode [ 31.081469][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 31.085587][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.100357][ T4337] team0: Port device team_slave_0 added [ 31.102346][ T4337] team0: Port device team_slave_1 added [ 31.112523][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.113816][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.117613][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.120682][ T4338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.124092][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 31.132808][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.133890][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.137894][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.143666][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.144953][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.149426][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.153272][ T4338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.157495][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.158639][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.163455][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.180926][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.182460][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.183932][ T4333] device bridge_slave_0 entered promiscuous mode [ 31.196773][ T4338] team0: Port device team_slave_0 added [ 31.198062][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.199232][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.200715][ T4333] device bridge_slave_1 entered promiscuous mode [ 31.262164][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.301319][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.347467][ T4338] team0: Port device team_slave_1 added [ 31.348731][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.349965][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.351898][ T4336] device bridge_slave_0 entered promiscuous mode [ 31.361284][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.362469][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.363982][ T4336] device bridge_slave_1 entered promiscuous mode [ 31.402178][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.461389][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.511076][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.512517][ T4329] Cannot create hsr debugfs directory [ 31.519684][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.523301][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.524418][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.528358][ T4338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.536374][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.538649][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.542048][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.543177][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.547354][ T4338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.555222][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.576734][ T4333] team0: Port device team_slave_0 added [ 31.578638][ T4333] team0: Port device team_slave_1 added [ 31.583762][ T4336] team0: Port device team_slave_0 added [ 31.595897][ T4336] team0: Port device team_slave_1 added [ 31.632173][ T4338] device hsr_slave_0 entered promiscuous mode [ 31.671162][ T4338] device hsr_slave_1 entered promiscuous mode [ 31.711042][ T4338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.712345][ T4338] Cannot create hsr debugfs directory [ 31.713960][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.715224][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.719052][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.728133][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.729327][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.735892][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.739461][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.740649][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.745496][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.747956][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.749047][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.755673][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.824491][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.871454][ T4333] device hsr_slave_1 entered promiscuous mode [ 31.911036][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.912318][ T4333] Cannot create hsr debugfs directory [ 31.982232][ T4336] device hsr_slave_0 entered promiscuous mode [ 32.021305][ T4336] device hsr_slave_1 entered promiscuous mode [ 32.061089][ T4336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.062436][ T4336] Cannot create hsr debugfs directory [ 32.083582][ T4337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.122143][ T4337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.165707][ T4337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.193019][ T4337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.280209][ T4329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.316349][ T4329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.355705][ T4329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.394360][ T4329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.456673][ T4338] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.492469][ T4338] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.552252][ T4338] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.596205][ T4338] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.647403][ T4333] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.683128][ T4333] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.733625][ T4333] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.766569][ T4333] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.811274][ T4342] Bluetooth: hci0: command 0x0409 tx timeout [ 32.817206][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.822281][ T4336] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.843451][ T4336] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.891036][ T4342] Bluetooth: hci4: command 0x0409 tx timeout [ 32.893991][ T4336] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.901124][ T4342] Bluetooth: hci3: command 0x0409 tx timeout [ 32.901267][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 32.902390][ T4342] Bluetooth: hci2: command 0x0409 tx timeout [ 32.947812][ T4336] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.997918][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.999725][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.004196][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.014662][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.016963][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.018695][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.019859][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.021687][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.024939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.026720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.028118][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.029252][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.045289][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.058429][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.062277][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.074305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.076369][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.082272][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.083971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.085631][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.090204][ T4338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.098672][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.100314][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.103179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.104876][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.114676][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.116242][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.117691][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.119152][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.122801][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.124775][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.127438][ T4338] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.130413][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.144621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.146452][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.148033][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.149163][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.150500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.154661][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.156241][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.157648][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.159046][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.160745][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.163691][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.165882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.179055][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.180693][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.183385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.185120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.186577][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.187921][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.189548][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.194248][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.195924][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.197213][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.198565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.200351][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.203982][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.205629][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.207307][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.208741][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.210565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.215842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.217586][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.219264][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.221929][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.223486][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.232297][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.241039][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.242957][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.245924][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.247614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.249131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.250663][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.253289][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.254872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.256442][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.265388][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.267044][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.268440][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.269722][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.271769][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.274345][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.276538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.286108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.287831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.289268][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.290525][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.294514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.296509][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.298306][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.300337][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.305768][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.309287][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.310602][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.313884][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.320401][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.333803][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.335628][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.337350][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.338872][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.349137][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.354981][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.356830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.358343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.359862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.364806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.368317][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.379768][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.381966][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.383489][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.384800][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.386630][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.390571][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.399944][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.406387][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.408065][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.409486][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.410720][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.432131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.433595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.436474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.450128][ T4337] device veth0_vlan entered promiscuous mode [ 33.452559][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.454278][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.456920][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.465276][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.466761][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.468194][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.469452][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.470789][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.474734][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.478277][ T4337] device veth1_vlan entered promiscuous mode [ 33.488355][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.490827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.493221][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.495299][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.496885][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.498326][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.499637][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.511983][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.513505][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.515091][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.521851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.523619][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.528066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.529676][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.540046][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.542663][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.544370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.545960][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.547465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.549013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.560618][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.566495][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.568183][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.569870][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.574766][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.576286][ T4338] device veth0_vlan entered promiscuous mode [ 33.580642][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.582593][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.585307][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.586974][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.592115][ T4337] device veth0_macvtap entered promiscuous mode [ 33.594650][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.596283][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.597723][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.599038][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.600714][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.611863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.613366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.617060][ T4333] device veth0_vlan entered promiscuous mode [ 33.620445][ T4337] device veth1_macvtap entered promiscuous mode [ 33.624039][ T4329] device veth0_vlan entered promiscuous mode [ 33.628093][ T4333] device veth1_vlan entered promiscuous mode [ 33.634982][ T4329] device veth1_vlan entered promiscuous mode [ 33.637798][ T4338] device veth1_vlan entered promiscuous mode [ 33.658061][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.665910][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.671867][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.673675][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.675257][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.676808][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.678255][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.679755][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.689069][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.690710][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.692957][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.694384][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.695825][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.698473][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.706687][ T4333] device veth0_macvtap entered promiscuous mode [ 33.709120][ T4333] device veth1_macvtap entered promiscuous mode [ 33.715578][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.717361][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.719489][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.723635][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.725232][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.726882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.728509][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.730181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.732873][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.734446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.738702][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.740380][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.752614][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.755990][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.757716][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.759393][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.761918][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.764042][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.768172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.769965][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.775905][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.777435][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.778917][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.780317][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.786367][ T4333] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.787754][ T4333] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.789108][ T4333] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.790512][ T4333] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.805102][ T4338] device veth0_macvtap entered promiscuous mode [ 33.808192][ T4329] device veth0_macvtap entered promiscuous mode [ 33.816896][ T4338] device veth1_macvtap entered promiscuous mode [ 33.819774][ T4329] device veth1_macvtap entered promiscuous mode [ 33.865485][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.867281][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.868841][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.870486][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.874214][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.876527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.878196][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.879644][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.885645][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.887337][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.889084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.890738][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.892983][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.895096][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.896949][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.898474][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.900086][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.902396][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.904068][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.906356][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.910021][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.911516][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.915867][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.917622][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.919231][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.920904][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.923936][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.925612][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.927304][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.928946][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.930559][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.935392][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.940099][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.942192][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.943944][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.945731][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.947350][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.948919][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.951589][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.955809][ T4329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.957298][ T4329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.958731][ T4329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.960117][ T4329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.968188][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.970366][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.975211][ T4338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.976795][ T4338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.978285][ T4338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.979679][ T4338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.995612][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.996949][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.010565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.012612][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.014334][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.016107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.017604][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.019747][ T4336] device veth0_vlan entered promiscuous mode [ 34.024019][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.025426][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.035382][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.056222][ T4336] device veth1_vlan entered promiscuous mode [ 34.056268][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.058611][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.058672][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.059995][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.062624][ T1601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.064941][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.066428][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.084051][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.088696][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.090143][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.095243][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.097443][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.098999][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.109541][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.112381][ T4336] device veth0_macvtap entered promiscuous mode [ 34.117594][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.130052][ T4336] device veth1_macvtap entered promiscuous mode [ 34.138616][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.140464][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.143873][ T1853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.160200][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.161915][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.164170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.227845][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.229606][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.232177][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.233887][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.235378][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.237283][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.239183][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.241785][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.246528][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.251299][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.253139][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.601254][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.603050][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.604597][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.611641][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.613356][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.614986][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.619069][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.619897][ T4417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.623246][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.625638][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.629788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.635064][ T4417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.636374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.650917][ T4336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.657442][ T4336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.659049][ T4336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.660573][ T4336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.679916][ T4419] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 34.708989][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.710502][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.716582][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.725684][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.727058][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.728565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.808920][ T4424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.881068][ T4381] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.903212][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 34.971261][ T4342] Bluetooth: hci1: command 0x041b tx timeout [ 34.971276][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 34.972853][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 34.973575][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 35.077545][ T4381] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 35.079323][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.080553][ T4381] usb 1-1: Product: syz [ 35.081508][ T4381] usb 1-1: Manufacturer: syz [ 35.082332][ T4381] usb 1-1: SerialNumber: syz [ 35.086873][ T4381] usb 1-1: config 0 descriptor?? [ 35.097431][ T4381] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 35.106930][ T4381] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 35.113663][ T4381] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 35.117717][ T4381] usb 1-1: media controller created [ 35.143729][ T4381] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 35.177696][ T4381] DVB: Unable to find symbol mt352_attach() [ 35.576153][ T4415] dvb-usb: bulk message failed: -22 (7/0) [ 35.604237][ T4381] DVB: Unable to find symbol nxt6000_attach() [ 35.605434][ T4381] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 35.609025][ T4381] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 35.613583][ T4381] dvb-usb: schedule remote query interval to 1000 msecs. [ 35.616991][ T4381] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 35.621388][ T4381] dvb-usb: bulk message failed: -22 (7/0) [ 35.638696][ T4381] dvb-usb: bulk message failed: -22 (7/0) [ 35.649108][ T4381] usb 1-1: USB disconnect, device number 2 [ 36.157176][ T4381] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 37.321940][ T4461] bond0: invalid ARP target specified [ 37.326531][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 37.327761][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 37.329039][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 37.330341][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 37.332469][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 37.437430][ T4465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.439293][ T4465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.450196][ T4465] loop3: detected capacity change from 0 to 512 [ 37.469529][ T4465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 37.476725][ T4465] System zones: 1-12 [ 37.480052][ T4465] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.17: Directory hole found for htree index block 0 [ 37.483885][ T4465] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 37.485671][ T4465] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.17: Directory hole found for htree index block 0 [ 37.490201][ T4465] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 37.495260][ T4465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.033737][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 38.152138][ T4498] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 38.154611][ T4498] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 38.587782][ T4515] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4329] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4515] [ 38.594033][ T4511] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 38.600055][ T4511] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 38.604956][ T4511] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 38.606374][ T4511] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 38.713266][ T4530] FAULT_INJECTION: forcing a failure. [ 38.713266][ T4530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 38.715704][ T4530] CPU: 1 PID: 4530 Comm: syz.1.43 Not tainted syzkaller #0 [ 38.716893][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.718636][ T4530] Call trace: [ 38.719214][ T4530] dump_backtrace+0x1c4/0x1f0 [ 38.719945][ T4530] show_stack+0x2c/0x3c [ 38.720623][ T4530] __dump_stack+0x30/0x40 [ 38.721295][ T4530] dump_stack_lvl+0xf4/0x15c [ 38.722093][ T4530] dump_stack+0x1c/0x5c [ 38.722771][ T4530] should_fail_ex+0x3cc/0x524 [ 38.723578][ T4530] should_fail_alloc_page+0x74/0xb8 [ 38.724470][ T4530] prepare_alloc_pages+0x1b8/0x4f0 [ 38.725287][ T4530] __alloc_pages+0x134/0x544 [ 38.726098][ T4530] alloc_pages+0x434/0x6fc [ 38.726785][ T4530] kimage_alloc_pages+0xa8/0x334 [ 38.727636][ T4530] kimage_alloc_page+0xc4/0x71c [ 38.728471][ T4530] kimage_load_segment+0x730/0xd1c [ 38.729359][ T4530] do_kexec_load+0x48c/0x6c8 [ 38.730089][ T4530] __arm64_sys_kexec_load+0x1dc/0x224 [ 38.730940][ T4530] invoke_syscall+0x98/0x290 [ 38.731663][ T4530] el0_svc_common+0x13c/0x258 [ 38.732409][ T4530] do_el0_svc+0x5c/0x134 [ 38.733152][ T4530] el0_svc+0x58/0x128 [ 38.733860][ T4530] el0t_64_sync_handler+0x84/0xf0 [ 38.734722][ T4530] el0t_64_sync+0x18c/0x190 [ 39.105530][ T4537] device syzkaller1 entered promiscuous mode [ 39.371622][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 39.371779][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 39.373010][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 39.373869][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 39.374932][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 39.447808][ T4543] ======================================================= [ 39.447808][ T4543] WARNING: The mand mount option has been deprecated and [ 39.447808][ T4543] and is ignored by this kernel. Remove the mand [ 39.447808][ T4543] option from the mount to silence this warning. [ 39.447808][ T4543] ======================================================= [ 39.456154][ T4543] jffs2: notice: (4543) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 39.711348][ T4553] netlink: 'syz.0.50': attribute type 1 has an invalid length. [ 39.712789][ T4553] netlink: 'syz.0.50': attribute type 2 has an invalid length. [ 39.713949][ T4553] netlink: 232 bytes leftover after parsing attributes in process `syz.0.50'. [ 39.783973][ T4558] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 40.015136][ T4568] UBIFS error (pid: 4568): cannot open "./file0", error -22 [ 40.412881][ T4595] loop0: detected capacity change from 0 to 4096 [ 40.443621][ T4595] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 40.471279][ T4595] ntfs3: loop0: Inode r=19 is not in use! [ 40.472408][ T4595] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 40.577340][ T4605] loop1: detected capacity change from 0 to 256 [ 40.590824][ T4605] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 40.695533][ T4610] loop1: detected capacity change from 0 to 1024 [ 40.770293][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.772914][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.107313][ T4619] loop4: detected capacity change from 0 to 164 [ 41.255148][ T4621] loop2: detected capacity change from 0 to 512 [ 41.264362][ T4621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 41.266027][ T4621] System zones: 1-12 [ 41.269287][ T4621] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.80: missing EA_INODE flag [ 41.272493][ T4621] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.80: error while reading EA inode 12 err=-117 [ 41.274672][ T4621] EXT4-fs (loop2): 1 orphan inode deleted [ 41.275614][ T4621] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 41.320847][ T4625] FAULT_INJECTION: forcing a failure. [ 41.320847][ T4625] name failslab, interval 1, probability 0, space 0, times 1 [ 41.323368][ T4625] CPU: 1 PID: 4625 Comm: syz.1.81 Not tainted syzkaller #0 [ 41.324659][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.326507][ T4625] Call trace: [ 41.327136][ T4625] dump_backtrace+0x1c4/0x1f0 [ 41.328023][ T4625] show_stack+0x2c/0x3c [ 41.328868][ T4625] __dump_stack+0x30/0x40 [ 41.329603][ T4625] dump_stack_lvl+0xf4/0x15c [ 41.330468][ T4625] dump_stack+0x1c/0x5c [ 41.331232][ T4625] should_fail_ex+0x3cc/0x524 [ 41.331999][ T4625] __should_failslab+0xc0/0x11c [ 41.332787][ T4625] should_failslab+0x10/0x28 [ 41.333531][ T4625] __kmem_cache_alloc_node+0x7c/0x318 [ 41.334425][ T4625] __kmalloc+0xc4/0x180 [ 41.335166][ T4625] snd_seq_oss_readq_new+0x7c/0x22c [ 41.336008][ T4625] snd_seq_oss_open+0x660/0xca4 [ 41.336829][ T4625] odev_open+0x84/0xbc [ 41.337501][ T4625] soundcore_open+0x2f8/0x47c [ 41.338242][ T4625] chrdev_open+0x3d0/0x51c [ 41.338949][ T4625] do_dentry_open+0x738/0xf8c [ 41.339670][ T4625] vfs_open+0x7c/0x90 [ 41.340333][ T4625] path_openat+0x1fc0/0x27a0 [ 41.341069][ T4625] do_filp_open+0x198/0x38c [ 41.341826][ T4625] do_sys_openat2+0x134/0x3fc [ 41.342652][ T4625] __arm64_sys_openat+0x11c/0x150 [ 41.343431][ T4625] invoke_syscall+0x98/0x290 [ 41.344150][ T4625] el0_svc_common+0x13c/0x258 [ 41.344952][ T4625] do_el0_svc+0x5c/0x134 [ 41.345697][ T4625] el0_svc+0x58/0x128 [ 41.346404][ T4625] el0t_64_sync_handler+0x84/0xf0 [ 41.347274][ T4625] el0t_64_sync+0x18c/0x190 [ 41.501498][ T4629] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3 [ 41.759001][ T4631] fuse: Bad value for 'fd' [ 41.871083][ T4330] Bluetooth: hci0: command 0x0401 tx timeout [ 42.118547][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 42.246840][ T4637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.248452][ T4637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.689933][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 51.734543][ T4664] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.867046][ T4650] team0: Port device team_slave_0 removed [ 53.799825][ T4768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.968184][ T4768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.993987][ T4768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.995673][ T4768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.100007][ T4791] process 'syz.0.111' launched '/dev/fd/3' with NULL argv: empty string added [ 54.124614][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.127788][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.546365][ T4806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.549711][ T4806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.582215][ T4808] FAULT_INJECTION: forcing a failure. [ 54.582215][ T4808] name failslab, interval 1, probability 0, space 0, times 0 [ 54.585957][ T4808] CPU: 0 PID: 4808 Comm: syz.1.116 Not tainted syzkaller #0 [ 54.587167][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 54.588822][ T4808] Call trace: [ 54.589372][ T4808] dump_backtrace+0x1c4/0x1f0 [ 54.590208][ T4808] show_stack+0x2c/0x3c [ 54.590905][ T4808] __dump_stack+0x30/0x40 [ 54.591625][ T4808] dump_stack_lvl+0xf4/0x15c [ 54.592439][ T4808] dump_stack+0x1c/0x5c [ 54.593163][ T4808] should_fail_ex+0x3cc/0x524 [ 54.593983][ T4808] __should_failslab+0xc0/0x11c [ 54.594821][ T4808] should_failslab+0x10/0x28 [ 54.595635][ T4808] __kmem_cache_alloc_node+0x7c/0x318 [ 54.596491][ T4808] kmalloc_trace+0x48/0x94 [ 54.597212][ T4808] assoc_array_insert+0x300/0x257c [ 54.598105][ T4808] __key_link_begin+0xc4/0x1cc [ 54.598953][ T4808] key_create_or_update+0x40c/0x868 [ 54.599914][ T4808] __arm64_sys_add_key+0x40c/0x520 [ 54.600735][ T4808] invoke_syscall+0x98/0x290 [ 54.601545][ T4808] el0_svc_common+0x13c/0x258 [ 54.602370][ T4808] do_el0_svc+0x5c/0x134 [ 54.603104][ T4808] el0_svc+0x58/0x128 [ 54.603738][ T4808] el0t_64_sync_handler+0x84/0xf0 [ 54.604606][ T4808] el0t_64_sync+0x18c/0x190 [ 55.454678][ T4823] Zero length message leads to an empty skb [ 55.790762][ T4827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.122'. [ 56.439755][ T4859] netlink: 36 bytes leftover after parsing attributes in process `syz.1.137'. [ 56.698512][ T4878] loop3: detected capacity change from 0 to 164 [ 57.011209][ T4893] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 57.085702][ T4900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.087623][ T4900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.617258][ T4913] loop1: detected capacity change from 0 to 512 [ 57.619026][ T4913] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 57.622333][ T4913] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.625993][ T4913] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.159: invalid indirect mapped block 9 (level 0) [ 57.629603][ T4913] EXT4-fs (loop1): 1 truncate cleaned up [ 57.630576][ T4913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 57.654372][ T4338] EXT4-fs (loop1): unmounting filesystem. [ 57.691188][ T3902] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 57.808273][ T4923] nvmet: adding nsid 1 to subsystem testsubsys [ 57.875239][ T3902] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 57.877057][ T3902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.960861][ T4927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.970601][ T4927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.043415][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.048712][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.096940][ C0] dln2 1-1:1.0: short response: 0 [ 58.113730][ T3902] dln2 1-1:1.0: USB write failed: -110 [ 58.114972][ T3902] dln2 1-1:1.0: failed to initialize hardware [ 58.118647][ T3902] dln2: probe of 1-1:1.0 failed with error -110 [ 58.305069][ T3902] usb 1-1: USB disconnect, device number 3 [ 58.730912][ T4947] null_blk: disk rnullb0 created [ 58.874291][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 58.994473][ T4963] raw_sendmsg: syz.0.180 forgot to set AF_INET. Fix it! [ 59.634339][ T4983] bond0: invalid ARP target specified [ 59.784688][ T4995] binder: 4994:4995 tried to acquire reference to desc 0, got 1 instead [ 59.787914][ T4995] binder: 4994:4995 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.790334][ T4995] binder: 4995 RLIMIT_NICE not set [ 59.794871][ T4995] binder: 4995 RLIMIT_NICE not set [ 59.796117][ T4995] binder: 4995 RLIMIT_NICE not set [ 59.804686][ T3902] binder: undelivered TRANSACTION_COMPLETE [ 59.805997][ T3902] binder: undelivered transaction 6, process died. [ 59.807587][ T3902] binder: undelivered TRANSACTION_COMPLETE [ 59.869549][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 60.910944][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 60.997616][ T5047] loop0: detected capacity change from 0 to 256 [ 61.001419][ T5047] exfat: Unknown parameter 'ut' [ 62.166243][ T5086] loop1: detected capacity change from 0 to 512 [ 62.168492][ T5086] ext4: Unknown parameter 'smackfshat' [ 62.194866][ T4804] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.205453][ T5086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.209508][ T5086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.222725][ T5086] loop1: detected capacity change from 0 to 512 [ 62.224107][ T4804] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.554052][ T5086] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.224: iget: bad i_size value: 38620345925642 [ 62.559837][ T5086] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.224: couldn't read orphan inode 15 (err -117) [ 62.562304][ T5086] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.579790][ T5094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.581622][ T5094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.587625][ T5094] Set syz1 is full, maxelem 256 reached [ 62.625752][ T5086] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.224: bg 0: block 5: invalid block bitmap [ 62.629257][ T5086] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1316 with error 28 [ 62.632074][ T5086] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.632074][ T5086] [ 62.634101][ T5086] EXT4-fs (loop1): Total free blocks count 0 [ 62.635291][ T5086] EXT4-fs (loop1): Free/Dirty block details [ 62.636512][ T5086] EXT4-fs (loop1): free_blocks=0 [ 62.637643][ T5086] EXT4-fs (loop1): dirty_blocks=1320 [ 62.638840][ T5086] EXT4-fs (loop1): Block reservation details [ 62.640108][ T5086] EXT4-fs (loop1): i_reserved_data_blocks=1320 [ 63.235875][ T4338] EXT4-fs (loop1): unmounting filesystem. [ 63.397610][ T5115] FAULT_INJECTION: forcing a failure. [ 63.397610][ T5115] name failslab, interval 1, probability 0, space 0, times 0 [ 63.403897][ T5115] CPU: 0 PID: 5115 Comm: syz.4.236 Not tainted syzkaller #0 [ 63.405279][ T5115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 63.406956][ T5115] Call trace: [ 63.407491][ T5115] dump_backtrace+0x1c4/0x1f0 [ 63.408297][ T5115] show_stack+0x2c/0x3c [ 63.409018][ T5115] __dump_stack+0x30/0x40 [ 63.409780][ T5115] dump_stack_lvl+0xf4/0x15c [ 63.410565][ T5115] dump_stack+0x1c/0x5c [ 63.411270][ T5115] should_fail_ex+0x3cc/0x524 [ 63.412081][ T5115] __should_failslab+0xc0/0x11c [ 63.412925][ T5115] should_failslab+0x10/0x28 [ 63.413676][ T5115] __kmem_cache_alloc_node+0x7c/0x318 [ 63.414543][ T5115] kmalloc_trace+0x48/0x94 [ 63.415356][ T5115] snd_seq_prioq_new+0x50/0xa4 [ 63.416106][ T5115] snd_seq_queue_alloc+0x12c/0x4cc [ 63.416983][ T5115] snd_seq_ioctl_create_queue+0x84/0x37c [ 63.417947][ T5115] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 63.418937][ T5115] snd_seq_oss_open+0x510/0xca4 [ 63.419797][ T5115] odev_open+0x84/0xbc [ 63.420506][ T5115] soundcore_open+0x2f8/0x47c [ 63.421241][ T5115] chrdev_open+0x3d0/0x51c [ 63.422028][ T5115] do_dentry_open+0x738/0xf8c [ 63.422860][ T5115] vfs_open+0x7c/0x90 [ 63.423549][ T5115] path_openat+0x1fc0/0x27a0 [ 63.424303][ T5115] do_filp_open+0x198/0x38c [ 63.425078][ T5115] do_sys_openat2+0x134/0x3fc [ 63.425869][ T5115] __arm64_sys_openat+0x11c/0x150 [ 63.426710][ T5115] invoke_syscall+0x98/0x290 [ 63.427499][ T5115] el0_svc_common+0x13c/0x258 [ 63.428330][ T5115] do_el0_svc+0x5c/0x134 [ 63.429074][ T5115] el0_svc+0x58/0x128 [ 63.429761][ T5115] el0t_64_sync_handler+0x84/0xf0 [ 63.430625][ T5115] el0t_64_sync+0x18c/0x190 [ 63.708563][ T5120] loop0: detected capacity change from 0 to 2048 [ 63.844804][ T5120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.146216][ T27] audit: type=1326 audit(65.128:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5117 comm="syz.0.237" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97d79368 code=0x0 [ 64.365048][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 64.571821][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.576115][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.819301][ T5148] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 64.841457][ T5148] overlayfs: overlapping lowerdir path [ 65.064493][ T5167] loop0: detected capacity change from 0 to 512 [ 65.253409][ T5171] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 65.255585][ T5171] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 65.282917][ T5173] FAULT_INJECTION: forcing a failure. [ 65.282917][ T5173] name failslab, interval 1, probability 0, space 0, times 0 [ 65.285128][ T5173] CPU: 1 PID: 5173 Comm: syz.3.254 Not tainted syzkaller #0 [ 65.286280][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.287818][ T5173] Call trace: [ 65.288309][ T5173] dump_backtrace+0x1c4/0x1f0 [ 65.289075][ T5173] show_stack+0x2c/0x3c [ 65.289760][ T5173] __dump_stack+0x30/0x40 [ 65.290478][ T5173] dump_stack_lvl+0xf4/0x15c [ 65.291218][ T5173] dump_stack+0x1c/0x5c [ 65.291945][ T5173] should_fail_ex+0x3cc/0x524 [ 65.292756][ T5173] __should_failslab+0xc0/0x11c [ 65.293551][ T5173] should_failslab+0x10/0x28 [ 65.294353][ T5173] __kmem_cache_alloc_node+0x7c/0x318 [ 65.295274][ T5173] kmalloc_trace+0x48/0x94 [ 65.296052][ T5173] snd_seq_prioq_new+0x50/0xa4 [ 65.296876][ T5173] snd_seq_queue_alloc+0x12c/0x4cc [ 65.297724][ T5173] snd_seq_ioctl_create_queue+0x84/0x37c [ 65.298647][ T5173] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 65.299629][ T5173] snd_seq_oss_open+0x510/0xca4 [ 65.300361][ T5173] odev_open+0x84/0xbc [ 65.301002][ T5173] soundcore_open+0x2f8/0x47c [ 65.301782][ T5173] chrdev_open+0x3d0/0x51c [ 65.302545][ T5173] do_dentry_open+0x738/0xf8c [ 65.303347][ T5173] vfs_open+0x7c/0x90 [ 65.303980][ T5173] path_openat+0x1fc0/0x27a0 [ 65.304714][ T5173] do_filp_open+0x198/0x38c [ 65.305422][ T5173] do_sys_openat2+0x134/0x3fc [ 65.306209][ T5173] __arm64_sys_openat+0x11c/0x150 [ 65.307073][ T5173] invoke_syscall+0x98/0x290 [ 65.307873][ T5173] el0_svc_common+0x13c/0x258 [ 65.308707][ T5173] do_el0_svc+0x5c/0x134 [ 65.309456][ T5173] el0_svc+0x58/0x128 [ 65.310122][ T5173] el0t_64_sync_handler+0x84/0xf0 [ 65.310953][ T5173] el0t_64_sync+0x18c/0x190 [ 65.315231][ T5167] EXT4-fs error (device loop0): ext4_quota_enable:7049: inode #4: comm syz.0.248: iget: checksum invalid [ 65.317887][ T5167] EXT4-fs error (device loop0): ext4_quota_enable:7052: comm syz.0.248: Bad quota inode: 4, type: 1 [ 65.318781][ T5178] IPVS: length: 153 != 24 [ 65.320272][ T5167] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 65.324507][ T5167] EXT4-fs (loop0): mount failed [ 65.324681][ T5178] capability: warning: `syz.4.256' uses deprecated v2 capabilities in a way that may be insecure [ 65.371342][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 65.874566][ T5200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 65.888866][ T5202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.890649][ T5202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.276527][ T5216] FAULT_INJECTION: forcing a failure. [ 66.276527][ T5216] name failslab, interval 1, probability 0, space 0, times 0 [ 66.283052][ T5216] CPU: 0 PID: 5216 Comm: syz.2.270 Not tainted syzkaller #0 [ 66.284358][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.286223][ T5216] Call trace: [ 66.286844][ T5216] dump_backtrace+0x1c4/0x1f0 [ 66.287741][ T5216] show_stack+0x2c/0x3c [ 66.288519][ T5216] __dump_stack+0x30/0x40 [ 66.289300][ T5216] dump_stack_lvl+0xf4/0x15c [ 66.290133][ T5216] dump_stack+0x1c/0x5c [ 66.290884][ T5216] should_fail_ex+0x3cc/0x524 [ 66.291673][ T5216] __should_failslab+0xc0/0x11c [ 66.292492][ T5216] should_failslab+0x10/0x28 [ 66.293280][ T5216] __kmem_cache_alloc_node+0x7c/0x318 [ 66.294217][ T5216] kmalloc_trace+0x48/0x94 [ 66.295000][ T5216] snd_seq_prioq_new+0x50/0xa4 [ 66.295842][ T5216] snd_seq_queue_alloc+0x12c/0x4cc [ 66.296787][ T5216] snd_seq_ioctl_create_queue+0x84/0x37c [ 66.297771][ T5216] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 66.298726][ T5216] snd_seq_oss_open+0x510/0xca4 [ 66.299548][ T5216] odev_open+0x84/0xbc [ 66.300222][ T5216] soundcore_open+0x2f8/0x47c [ 66.301007][ T5216] chrdev_open+0x3d0/0x51c [ 66.301744][ T5216] do_dentry_open+0x738/0xf8c [ 66.302497][ T5216] vfs_open+0x7c/0x90 [ 66.303217][ T5216] path_openat+0x1fc0/0x27a0 [ 66.304019][ T5216] do_filp_open+0x198/0x38c [ 66.304807][ T5216] do_sys_openat2+0x134/0x3fc [ 66.305626][ T5216] __arm64_sys_openat+0x11c/0x150 [ 66.306511][ T5216] invoke_syscall+0x98/0x290 [ 66.307322][ T5216] el0_svc_common+0x13c/0x258 [ 66.308130][ T5216] do_el0_svc+0x5c/0x134 [ 66.308880][ T5216] el0_svc+0x58/0x128 [ 66.309549][ T5216] el0t_64_sync_handler+0x84/0xf0 [ 66.310429][ T5216] el0t_64_sync+0x18c/0x190 [ 66.470819][ T5228] input: syz1 as /devices/virtual/input/input3 [ 66.585441][ T5242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.281'. [ 67.091326][ T5261] loop4: detected capacity change from 0 to 512 [ 67.107620][ T5261] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 67.109253][ T5261] System zones: 1-12 [ 67.118858][ T5261] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.286: missing EA_INODE flag [ 67.121746][ T5261] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.286: error while reading EA inode 12 err=-117 [ 67.125863][ T5261] EXT4-fs (loop4): 1 orphan inode deleted [ 67.126989][ T5261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.581376][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.589269][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.994196][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 68.447917][ T5284] loop4: detected capacity change from 0 to 32768 [ 68.493293][ T5284] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.292 (5284) [ 68.495445][ T5290] loop3: detected capacity change from 0 to 512 [ 68.509099][ T5284] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.510947][ T5284] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 68.515851][ T5284] BTRFS info (device loop4): using free space tree [ 68.519752][ T5290] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.543874][ T5290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.547514][ T5290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.572081][ T5290] EXT4-fs (loop3): shut down requested (1) [ 68.617201][ T5284] BTRFS info (device loop4): enabling ssd optimizations [ 68.650674][ T4336] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.816317][ T5335] loop4: detected capacity change from 0 to 512 [ 68.823200][ T5335] ext4: Unknown parameter 'smackfshat' [ 68.944944][ T4804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.949720][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.957612][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.274100][ T5335] loop4: detected capacity change from 0 to 512 [ 69.296318][ T5335] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.301: iget: bad i_size value: 38620345925642 [ 69.298998][ T5335] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.301: couldn't read orphan inode 15 (err -117) [ 69.302754][ T5335] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.384738][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 69.469505][ T5335] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.301: bg 0: block 5: invalid block bitmap [ 69.477010][ T5335] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1724 with error 28 [ 69.480595][ T5335] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.480595][ T5335] [ 69.484204][ T5335] EXT4-fs (loop4): Total free blocks count 0 [ 69.485469][ T5335] EXT4-fs (loop4): Free/Dirty block details [ 69.486806][ T5335] EXT4-fs (loop4): free_blocks=0 [ 69.488259][ T5335] EXT4-fs (loop4): dirty_blocks=1728 [ 69.531315][ T5335] EXT4-fs (loop4): Block reservation details [ 69.532590][ T5335] EXT4-fs (loop4): i_reserved_data_blocks=1728 [ 69.955569][ T113] cfg80211: failed to load regulatory.db [ 70.487335][ T5376] FAULT_INJECTION: forcing a failure. [ 70.487335][ T5376] name failslab, interval 1, probability 0, space 0, times 0 [ 70.489549][ T5376] CPU: 1 PID: 5376 Comm: syz.2.314 Not tainted syzkaller #0 [ 70.490790][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.492438][ T5376] Call trace: [ 70.492965][ T5376] dump_backtrace+0x1c4/0x1f0 [ 70.493792][ T5376] show_stack+0x2c/0x3c [ 70.494490][ T5376] __dump_stack+0x30/0x40 [ 70.495260][ T5376] dump_stack_lvl+0xf4/0x15c [ 70.496085][ T5376] dump_stack+0x1c/0x5c [ 70.496829][ T5376] should_fail_ex+0x3cc/0x524 [ 70.497580][ T5376] __should_failslab+0xc0/0x11c [ 70.498382][ T5376] should_failslab+0x10/0x28 [ 70.499110][ T5376] __kmem_cache_alloc_node+0x7c/0x318 [ 70.500057][ T5376] __kmalloc_node_track_caller+0xb8/0x174 [ 70.500988][ T5376] kstrdup+0x68/0xb0 [ 70.501667][ T5376] snd_timer_instance_new+0x6c/0x1e0 [ 70.502601][ T5376] snd_seq_timer_open+0x1e4/0x504 [ 70.503407][ T5376] queue_use+0x174/0x20c [ 70.504121][ T5376] snd_seq_queue_alloc+0x220/0x4cc [ 70.504939][ T5376] snd_seq_ioctl_create_queue+0x84/0x37c [ 70.505813][ T5376] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 70.506781][ T5376] snd_seq_oss_open+0x510/0xca4 [ 70.507581][ T5376] odev_open+0x84/0xbc [ 70.508241][ T5376] soundcore_open+0x2f8/0x47c [ 70.509040][ T5376] chrdev_open+0x3d0/0x51c [ 70.509738][ T5376] do_dentry_open+0x738/0xf8c [ 70.510492][ T5376] vfs_open+0x7c/0x90 [ 70.511177][ T5376] path_openat+0x1fc0/0x27a0 [ 70.511914][ T5376] do_filp_open+0x198/0x38c [ 70.512681][ T5376] do_sys_openat2+0x134/0x3fc [ 70.513461][ T5376] __arm64_sys_openat+0x11c/0x150 [ 70.514244][ T5376] invoke_syscall+0x98/0x290 [ 70.514953][ T5376] el0_svc_common+0x13c/0x258 [ 70.515733][ T5376] do_el0_svc+0x5c/0x134 [ 70.516437][ T5376] el0_svc+0x58/0x128 [ 70.517113][ T5376] el0t_64_sync_handler+0x84/0xf0 [ 70.517956][ T5376] el0t_64_sync+0x18c/0x190 [ 70.598608][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 70.945752][ T5390] loop4: detected capacity change from 0 to 512 [ 71.176833][ T5390] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.318: iget: checksum invalid [ 71.179021][ T5390] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.318: Bad quota inode: 4, type: 1 [ 71.183860][ T5390] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 71.187047][ T5390] EXT4-fs (loop4): mount failed [ 71.629105][ T5411] FAULT_INJECTION: forcing a failure. [ 71.629105][ T5411] name failslab, interval 1, probability 0, space 0, times 0 [ 71.632749][ T5411] CPU: 1 PID: 5411 Comm: syz.0.326 Not tainted syzkaller #0 [ 71.634016][ T5411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.635705][ T5413] netlink: 'syz.4.327': attribute type 1 has an invalid length. [ 71.637045][ T5411] Call trace: [ 71.637664][ T5411] dump_backtrace+0x1c4/0x1f0 [ 71.638502][ T5411] show_stack+0x2c/0x3c [ 71.639275][ T5411] __dump_stack+0x30/0x40 [ 71.640039][ T5411] dump_stack_lvl+0xf4/0x15c [ 71.640788][ T5411] dump_stack+0x1c/0x5c [ 71.641460][ T5411] should_fail_ex+0x3cc/0x524 [ 71.642225][ T5411] __should_failslab+0xc0/0x11c [ 71.642986][ T5411] should_failslab+0x10/0x28 [ 71.643726][ T5411] __kmem_cache_alloc_node+0x7c/0x318 [ 71.644592][ T5411] kmalloc_trace+0x48/0x94 [ 71.645366][ T5411] snd_seq_timer_new+0x60/0x62c [ 71.646116][ T5411] snd_seq_queue_alloc+0x150/0x4cc [ 71.646936][ T5411] snd_seq_ioctl_create_queue+0x84/0x37c [ 71.647860][ T5411] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 71.648792][ T5411] snd_seq_oss_open+0x510/0xca4 [ 71.649634][ T5411] odev_open+0x84/0xbc [ 71.650378][ T5411] soundcore_open+0x2f8/0x47c [ 71.651137][ T5411] chrdev_open+0x3d0/0x51c [ 71.651912][ T5411] do_dentry_open+0x738/0xf8c [ 71.652704][ T5411] vfs_open+0x7c/0x90 [ 71.653373][ T5411] path_openat+0x1fc0/0x27a0 [ 71.654174][ T5411] do_filp_open+0x198/0x38c [ 71.654955][ T5411] do_sys_openat2+0x134/0x3fc [ 71.655690][ T5411] __arm64_sys_openat+0x11c/0x150 [ 71.656538][ T5411] invoke_syscall+0x98/0x290 [ 71.657335][ T5411] el0_svc_common+0x13c/0x258 [ 71.658157][ T5411] do_el0_svc+0x5c/0x134 [ 71.658897][ T5411] el0_svc+0x58/0x128 [ 71.659594][ T5411] el0t_64_sync_handler+0x84/0xf0 [ 71.660468][ T5411] el0t_64_sync+0x18c/0x190 [ 71.707107][ T5419] loop0: detected capacity change from 0 to 512 [ 71.708885][ T5419] ext4: Unknown parameter 'smackfshat' [ 71.742520][ T4804] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.041026][ T4421] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.413889][ T4421] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.415875][ T4421] usb 1-1: config 0 has no interfaces? [ 72.418171][ T4421] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 72.420035][ T4421] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 72.422051][ T4421] usb 1-1: Manufacturer: syz [ 72.425551][ T4421] usb 1-1: config 0 descriptor?? [ 72.430715][ T5446] loop3: detected capacity change from 0 to 164 [ 72.886552][ T5459] FAULT_INJECTION: forcing a failure. [ 72.886552][ T5459] name failslab, interval 1, probability 0, space 0, times 0 [ 72.893903][ T5459] CPU: 0 PID: 5459 Comm: syz.4.339 Not tainted syzkaller #0 [ 72.895214][ T5459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.896878][ T5459] Call trace: [ 72.897444][ T5459] dump_backtrace+0x1c4/0x1f0 [ 72.898216][ T5459] show_stack+0x2c/0x3c [ 72.898908][ T5459] __dump_stack+0x30/0x40 [ 72.899646][ T5459] dump_stack_lvl+0xf4/0x15c [ 72.900398][ T5459] dump_stack+0x1c/0x5c [ 72.901133][ T5459] should_fail_ex+0x3cc/0x524 [ 72.901967][ T5459] __should_failslab+0xc0/0x11c [ 72.902821][ T5459] should_failslab+0x10/0x28 [ 72.903615][ T5459] __kmem_cache_alloc_node+0x7c/0x318 [ 72.904453][ T5459] kmalloc_trace+0x48/0x94 [ 72.905179][ T5459] snd_seq_oss_readq_new+0x58/0x22c [ 72.906040][ T5459] snd_seq_oss_open+0x660/0xca4 [ 72.906885][ T5459] odev_open+0x84/0xbc [ 72.907558][ T5459] soundcore_open+0x2f8/0x47c [ 72.908315][ T5459] chrdev_open+0x3d0/0x51c [ 72.909085][ T5459] do_dentry_open+0x738/0xf8c [ 72.909896][ T5459] vfs_open+0x7c/0x90 [ 72.910588][ T5459] path_openat+0x1fc0/0x27a0 [ 72.911376][ T5459] do_filp_open+0x198/0x38c [ 72.912120][ T5459] do_sys_openat2+0x134/0x3fc [ 72.912906][ T5459] __arm64_sys_openat+0x11c/0x150 [ 72.913702][ T5459] invoke_syscall+0x98/0x290 [ 72.914423][ T5459] el0_svc_common+0x13c/0x258 [ 72.915248][ T5459] do_el0_svc+0x5c/0x134 [ 72.915973][ T5459] el0_svc+0x58/0x128 [ 72.916665][ T5459] el0t_64_sync_handler+0x84/0xf0 [ 72.917570][ T5459] el0t_64_sync+0x18c/0x190 [ 72.959464][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.961448][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.080759][ T5465] loop1: detected capacity change from 0 to 512 [ 73.466188][ T5469] loop0: detected capacity change from 0 to 512 [ 73.483850][ T5465] EXT4-fs error (device loop1): ext4_quota_enable:7049: inode #4: comm syz.1.338: iget: checksum invalid [ 73.486191][ T5465] EXT4-fs error (device loop1): ext4_quota_enable:7052: comm syz.1.338: Bad quota inode: 4, type: 1 [ 73.488729][ T5469] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.328: iget: bad i_size value: 38620345925642 [ 73.491737][ T5465] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 73.495570][ T5465] EXT4-fs (loop1): mount failed [ 73.503510][ T5469] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.328: couldn't read orphan inode 15 (err -117) [ 73.505802][ T5469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 73.592359][ T5469] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.328: bg 0: block 5: invalid block bitmap [ 73.595317][ T5469] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 73.597485][ T5469] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.597485][ T5469] [ 73.599203][ T5469] EXT4-fs (loop0): Total free blocks count 0 [ 73.600151][ T5469] EXT4-fs (loop0): Free/Dirty block details [ 73.601773][ T5469] EXT4-fs (loop0): free_blocks=0 [ 73.602715][ T5469] EXT4-fs (loop0): dirty_blocks=2444 [ 73.603672][ T5469] EXT4-fs (loop0): Block reservation details [ 73.604799][ T5469] EXT4-fs (loop0): i_reserved_data_blocks=2444 [ 73.632708][ T4414] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 388 with error 28 [ 73.895674][ T5478] FAULT_INJECTION: forcing a failure. [ 73.895674][ T5478] name failslab, interval 1, probability 0, space 0, times 0 [ 73.898171][ T5478] CPU: 1 PID: 5478 Comm: syz.1.353 Not tainted syzkaller #0 [ 73.899427][ T5478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.901168][ T5478] Call trace: [ 73.901696][ T5478] dump_backtrace+0x1c4/0x1f0 [ 73.902460][ T5478] show_stack+0x2c/0x3c [ 73.903147][ T5478] __dump_stack+0x30/0x40 [ 73.903901][ T5478] dump_stack_lvl+0xf4/0x15c [ 73.904740][ T5478] dump_stack+0x1c/0x5c [ 73.905425][ T5478] should_fail_ex+0x3cc/0x524 [ 73.906227][ T5478] __should_failslab+0xc0/0x11c [ 73.907015][ T5478] should_failslab+0x10/0x28 [ 73.907766][ T5478] __kmem_cache_alloc_node+0x7c/0x318 [ 73.908659][ T5478] kmalloc_trace+0x48/0x94 [ 73.909457][ T5478] snd_seq_port_connect+0x7c/0x3a0 [ 73.910349][ T5478] snd_seq_ioctl_subscribe_port+0x270/0x650 [ 73.911335][ T5478] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 73.912242][ T5478] snd_seq_oss_midi_open+0x33c/0x5fc [ 73.913109][ T5478] snd_seq_oss_synth_setup_midi+0x134/0x4a0 [ 73.914085][ T5478] snd_seq_oss_open+0x754/0xca4 [ 73.914892][ T5478] odev_open+0x84/0xbc [ 73.915592][ T5478] soundcore_open+0x2f8/0x47c [ 73.916380][ T5478] chrdev_open+0x3d0/0x51c [ 73.917125][ T5478] do_dentry_open+0x738/0xf8c [ 73.917943][ T5478] vfs_open+0x7c/0x90 [ 73.918668][ T5478] path_openat+0x1fc0/0x27a0 [ 73.919438][ T5478] do_filp_open+0x198/0x38c [ 73.920241][ T5478] do_sys_openat2+0x134/0x3fc [ 73.920978][ T5478] __arm64_sys_openat+0x11c/0x150 [ 73.921856][ T5478] invoke_syscall+0x98/0x290 [ 73.922625][ T5478] el0_svc_common+0x13c/0x258 [ 73.923449][ T5478] do_el0_svc+0x5c/0x134 [ 73.924207][ T5478] el0_svc+0x58/0x128 [ 73.924911][ T5478] el0t_64_sync_handler+0x84/0xf0 [ 73.925760][ T5478] el0t_64_sync+0x18c/0x190 [ 74.207079][ T5488] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4338] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5488] [ 74.249747][ T14] kernel write not supported for file bpf-prog (pid: 14 comm: kworker/0:1) [ 74.256602][ T5492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.259005][ T5492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.305587][ T5496] FAULT_INJECTION: forcing a failure. [ 74.305587][ T5496] name failslab, interval 1, probability 0, space 0, times 0 [ 74.308199][ T5496] CPU: 1 PID: 5496 Comm: syz.1.351 Not tainted syzkaller #0 [ 74.309573][ T5496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.311507][ T5496] Call trace: [ 74.312154][ T5496] dump_backtrace+0x1c4/0x1f0 [ 74.312930][ T5496] show_stack+0x2c/0x3c [ 74.313649][ T5496] __dump_stack+0x30/0x40 [ 74.314406][ T5496] dump_stack_lvl+0xf4/0x15c [ 74.315221][ T5496] dump_stack+0x1c/0x5c [ 74.315909][ T5496] should_fail_ex+0x3cc/0x524 [ 74.316678][ T5496] __should_failslab+0xc0/0x11c [ 74.317431][ T5496] should_failslab+0x10/0x28 [ 74.318154][ T5496] __kmem_cache_alloc_node+0x7c/0x318 [ 74.319053][ T5496] __kmalloc+0xc4/0x180 [ 74.319781][ T5496] security_sk_alloc+0x54/0x140 [ 74.320636][ T5496] sk_prot_alloc+0xe0/0x1e8 [ 74.321410][ T5496] sk_alloc+0x44/0x3a0 [ 74.322105][ T5496] tun_chr_open+0x7c/0x43c [ 74.322852][ T5496] misc_open+0x310/0x388 [ 74.323509][ T5496] chrdev_open+0x3d0/0x51c [ 74.324229][ T5496] do_dentry_open+0x738/0xf8c [ 74.325008][ T5496] vfs_open+0x7c/0x90 [ 74.325707][ T5496] path_openat+0x1fc0/0x27a0 [ 74.326504][ T5496] do_filp_open+0x198/0x38c [ 74.327291][ T5496] do_sys_openat2+0x134/0x3fc [ 74.328109][ T5496] __arm64_sys_openat+0x11c/0x150 [ 74.328989][ T5496] invoke_syscall+0x98/0x290 [ 74.329800][ T5496] el0_svc_common+0x13c/0x258 [ 74.330618][ T5496] do_el0_svc+0x5c/0x134 [ 74.331364][ T5496] el0_svc+0x58/0x128 [ 74.332068][ T5496] el0t_64_sync_handler+0x84/0xf0 [ 74.332949][ T5496] el0t_64_sync+0x18c/0x190 [ 74.733505][ T4375] usb 1-1: USB disconnect, device number 4 [ 74.775763][ T5502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.777562][ T5502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.829900][ T5505] FAULT_INJECTION: forcing a failure. [ 74.829900][ T5505] name failslab, interval 1, probability 0, space 0, times 0 [ 74.834205][ T5505] CPU: 1 PID: 5505 Comm: syz.2.357 Not tainted syzkaller #0 [ 74.835376][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.836908][ T5505] Call trace: [ 74.837405][ T5505] dump_backtrace+0x1c4/0x1f0 [ 74.838153][ T5505] show_stack+0x2c/0x3c [ 74.838767][ T5505] __dump_stack+0x30/0x40 [ 74.839447][ T5505] dump_stack_lvl+0xf4/0x15c [ 74.840097][ T5505] dump_stack+0x1c/0x5c [ 74.840705][ T5505] should_fail_ex+0x3cc/0x524 [ 74.841487][ T5505] __should_failslab+0xc0/0x11c [ 74.842306][ T5505] should_failslab+0x10/0x28 [ 74.843033][ T5505] __kmem_cache_alloc_node+0x7c/0x318 [ 74.843972][ T5505] __kmalloc_node_track_caller+0xb8/0x174 [ 74.844933][ T5505] kstrdup+0x68/0xb0 [ 74.845589][ T5505] snd_timer_instance_new+0x6c/0x1e0 [ 74.846458][ T5505] snd_seq_timer_open+0x1e4/0x504 [ 74.847300][ T5505] queue_use+0x174/0x20c [ 74.848012][ T5505] snd_seq_queue_alloc+0x220/0x4cc [ 74.848883][ T5505] snd_seq_ioctl_create_queue+0x84/0x37c [ 74.849828][ T5505] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 74.850719][ T5505] snd_seq_oss_open+0x510/0xca4 [ 74.851505][ T5505] odev_open+0x84/0xbc [ 74.852179][ T5505] soundcore_open+0x2f8/0x47c [ 74.852986][ T5505] chrdev_open+0x3d0/0x51c [ 74.853721][ T5505] do_dentry_open+0x738/0xf8c [ 74.854503][ T5505] vfs_open+0x7c/0x90 [ 74.855178][ T5505] path_openat+0x1fc0/0x27a0 [ 74.855969][ T5505] do_filp_open+0x198/0x38c [ 74.856770][ T5505] do_sys_openat2+0x134/0x3fc [ 74.857586][ T5505] __arm64_sys_openat+0x11c/0x150 [ 74.858472][ T5505] invoke_syscall+0x98/0x290 [ 74.859286][ T5505] el0_svc_common+0x13c/0x258 [ 74.860096][ T5505] do_el0_svc+0x5c/0x134 [ 74.860809][ T5505] el0_svc+0x58/0x128 [ 74.861449][ T5505] el0t_64_sync_handler+0x84/0xf0 [ 74.862243][ T5505] el0t_64_sync+0x18c/0x190 [ 74.973541][ T5510] loop3: detected capacity change from 0 to 512 [ 75.240004][ T5510] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.354: iget: checksum invalid [ 75.242764][ T5510] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.354: Bad quota inode: 4, type: 1 [ 75.244931][ T5510] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 75.247943][ T5510] EXT4-fs (loop3): mount failed [ 75.287397][ T27] audit: type=1400 audit(76.268:3): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=5518 comm="syz.2.359" name=223A6F offset=61 [ 75.472975][ T5528] could not allocate digest TFM handle xcbc(twofish-asm) [ 75.790725][ T5545] loop3: detected capacity change from 0 to 512 [ 75.818829][ T5545] ext4: Unknown parameter 'smackfshat' [ 75.875941][ T4804] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.889545][ T5545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.896625][ T5545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.929887][ T5545] loop3: detected capacity change from 0 to 512 [ 75.931373][ T4804] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.947049][ T5545] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.367: iget: bad i_size value: 38620345925642 [ 75.950278][ T5545] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.367: couldn't read orphan inode 15 (err -117) [ 75.955333][ T5545] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.136598][ T5545] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.367: bg 0: block 5: invalid block bitmap [ 76.149776][ T5545] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 76.152918][ T5545] EXT4-fs (loop3): This should not happen!! Data will be lost [ 76.152918][ T5545] [ 76.154970][ T5545] EXT4-fs (loop3): Total free blocks count 0 [ 76.156146][ T5545] EXT4-fs (loop3): Free/Dirty block details [ 76.157549][ T5545] EXT4-fs (loop3): free_blocks=0 [ 76.158776][ T5545] EXT4-fs (loop3): dirty_blocks=2152 [ 76.160127][ T5545] EXT4-fs (loop3): Block reservation details [ 76.164132][ T5545] EXT4-fs (loop3): i_reserved_data_blocks=2152 [ 76.425699][ T4414] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 96 with error 28 [ 76.483641][ T5563] FAULT_INJECTION: forcing a failure. [ 76.483641][ T5563] name failslab, interval 1, probability 0, space 0, times 0 [ 76.486376][ T5563] CPU: 1 PID: 5563 Comm: syz.2.372 Not tainted syzkaller #0 [ 76.487607][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.489434][ T5563] Call trace: [ 76.490016][ T5563] dump_backtrace+0x1c4/0x1f0 [ 76.490854][ T5563] show_stack+0x2c/0x3c [ 76.491585][ T5563] __dump_stack+0x30/0x40 [ 76.492344][ T5563] dump_stack_lvl+0xf4/0x15c [ 76.493074][ T5563] dump_stack+0x1c/0x5c [ 76.493726][ T5563] should_fail_ex+0x3cc/0x524 [ 76.494491][ T5563] __should_failslab+0xc0/0x11c [ 76.495321][ T5563] should_failslab+0x10/0x28 [ 76.496109][ T5563] __kmem_cache_alloc_node+0x7c/0x318 [ 76.496989][ T5563] kmalloc_trace+0x48/0x94 [ 76.497760][ T5563] snd_seq_port_connect+0x7c/0x3a0 [ 76.498538][ T5563] snd_seq_ioctl_subscribe_port+0x270/0x650 [ 76.499487][ T5563] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 76.500434][ T5563] snd_seq_oss_midi_open+0x33c/0x5fc [ 76.501271][ T5563] snd_seq_oss_synth_setup_midi+0x134/0x4a0 [ 76.502229][ T5563] snd_seq_oss_open+0x754/0xca4 [ 76.503063][ T5563] odev_open+0x84/0xbc [ 76.503774][ T5563] soundcore_open+0x2f8/0x47c [ 76.504513][ T5563] chrdev_open+0x3d0/0x51c [ 76.505213][ T5563] do_dentry_open+0x738/0xf8c [ 76.505983][ T5563] vfs_open+0x7c/0x90 [ 76.506679][ T5563] path_openat+0x1fc0/0x27a0 [ 76.507470][ T5563] do_filp_open+0x198/0x38c [ 76.508255][ T5563] do_sys_openat2+0x134/0x3fc [ 76.509045][ T5563] __arm64_sys_openat+0x11c/0x150 [ 76.509907][ T5563] invoke_syscall+0x98/0x290 [ 76.510703][ T5563] el0_svc_common+0x13c/0x258 [ 76.511506][ T5563] do_el0_svc+0x5c/0x134 [ 76.512232][ T5563] el0_svc+0x58/0x128 [ 76.512928][ T5563] el0t_64_sync_handler+0x84/0xf0 [ 76.513784][ T5563] el0t_64_sync+0x18c/0x190 [ 76.548985][ T5567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.550597][ T5567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.168702][ T5587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.383'. [ 77.170437][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 77.448557][ T5587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.383'. [ 77.450083][ T5587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.383'. [ 77.534215][ T5596] FAULT_INJECTION: forcing a failure. [ 77.534215][ T5596] name failslab, interval 1, probability 0, space 0, times 0 [ 77.542469][ T5600] vxcan1: MTU too low for tipc bearer [ 77.543487][ T5600] tipc: Enabling of bearer rejected, failed to enable media [ 77.546318][ T5596] CPU: 0 PID: 5596 Comm: syz.0.387 Not tainted syzkaller #0 [ 77.547609][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.549499][ T5596] Call trace: [ 77.550135][ T5596] dump_backtrace+0x1c4/0x1f0 [ 77.550938][ T5596] show_stack+0x2c/0x3c [ 77.551718][ T5596] __dump_stack+0x30/0x40 [ 77.552529][ T5596] dump_stack_lvl+0xf4/0x15c [ 77.553367][ T5596] dump_stack+0x1c/0x5c [ 77.554134][ T5596] should_fail_ex+0x3cc/0x524 [ 77.554910][ T5596] __should_failslab+0xc0/0x11c [ 77.555734][ T5596] should_failslab+0x10/0x28 [ 77.556475][ T5596] __kmem_cache_alloc_node+0x7c/0x318 [ 77.557352][ T5596] kmalloc_trace+0x48/0x94 [ 77.558145][ T5596] snd_timer_instance_new+0x58/0x1e0 [ 77.559099][ T5596] snd_seq_timer_open+0x1e4/0x504 [ 77.559978][ T5596] queue_use+0x174/0x20c [ 77.560721][ T5596] snd_seq_queue_alloc+0x220/0x4cc [ 77.561604][ T5596] snd_seq_ioctl_create_queue+0x84/0x37c [ 77.562514][ T5596] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 77.563494][ T5596] snd_seq_oss_open+0x510/0xca4 [ 77.564303][ T5596] odev_open+0x84/0xbc [ 77.564961][ T5596] soundcore_open+0x2f8/0x47c [ 77.565766][ T5596] chrdev_open+0x3d0/0x51c [ 77.566507][ T5596] do_dentry_open+0x738/0xf8c [ 77.567282][ T5596] vfs_open+0x7c/0x90 [ 77.567951][ T5596] path_openat+0x1fc0/0x27a0 [ 77.568689][ T5596] do_filp_open+0x198/0x38c [ 77.569480][ T5596] do_sys_openat2+0x134/0x3fc [ 77.570297][ T5596] __arm64_sys_openat+0x11c/0x150 [ 77.571139][ T5596] invoke_syscall+0x98/0x290 [ 77.571871][ T5596] el0_svc_common+0x13c/0x258 [ 77.572629][ T5596] do_el0_svc+0x5c/0x134 [ 77.573306][ T5596] el0_svc+0x58/0x128 [ 77.573989][ T5596] el0t_64_sync_handler+0x84/0xf0 [ 77.574852][ T5596] el0t_64_sync+0x18c/0x190 [ 77.996870][ T5617] netlink: 204 bytes leftover after parsing attributes in process `syz.0.397'. [ 78.004267][ T5617] netlink: 84 bytes leftover after parsing attributes in process `syz.0.397'. [ 78.388280][ T5630] loop4: detected capacity change from 0 to 128 [ 78.411712][ T5630] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 78.424695][ T5630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.050869][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.328139][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.329978][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 79.331847][ T14] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 79.333490][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.348226][ T14] usb 1-1: config 0 descriptor?? [ 80.589511][ T5656] bond0: invalid ARP target specified [ 80.703564][ T14] usb 1-1: USB disconnect, device number 5 [ 82.179495][ T5700] FAULT_INJECTION: forcing a failure. [ 82.179495][ T5700] name failslab, interval 1, probability 0, space 0, times 0 [ 82.187082][ T5700] CPU: 1 PID: 5700 Comm: syz.4.426 Not tainted syzkaller #0 [ 82.188374][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.190240][ T5700] Call trace: [ 82.190848][ T5700] dump_backtrace+0x1c4/0x1f0 [ 82.191728][ T5700] show_stack+0x2c/0x3c [ 82.192460][ T5700] __dump_stack+0x30/0x40 [ 82.193236][ T5700] dump_stack_lvl+0xf4/0x15c [ 82.194025][ T5700] dump_stack+0x1c/0x5c [ 82.194745][ T5700] should_fail_ex+0x3cc/0x524 [ 82.195579][ T5700] __should_failslab+0xc0/0x11c [ 82.196455][ T5700] should_failslab+0x10/0x28 [ 82.197178][ T5700] __kmem_cache_alloc_node+0x7c/0x318 [ 82.198087][ T5700] __kmalloc+0xc4/0x180 [ 82.198758][ T5700] snd_seq_oss_readq_new+0x7c/0x22c [ 82.199661][ T5700] snd_seq_oss_open+0x660/0xca4 [ 82.200456][ T5700] odev_open+0x84/0xbc [ 82.201152][ T5700] soundcore_open+0x2f8/0x47c [ 82.201880][ T5700] chrdev_open+0x3d0/0x51c [ 82.202623][ T5700] do_dentry_open+0x738/0xf8c [ 82.203376][ T5700] vfs_open+0x7c/0x90 [ 82.204004][ T5700] path_openat+0x1fc0/0x27a0 [ 82.204800][ T5700] do_filp_open+0x198/0x38c [ 82.205571][ T5700] do_sys_openat2+0x134/0x3fc [ 82.206387][ T5700] __arm64_sys_openat+0x11c/0x150 [ 82.207264][ T5700] invoke_syscall+0x98/0x290 [ 82.208049][ T5700] el0_svc_common+0x13c/0x258 [ 82.208847][ T5700] do_el0_svc+0x5c/0x134 [ 82.209533][ T5700] el0_svc+0x58/0x128 [ 82.210175][ T5700] el0t_64_sync_handler+0x84/0xf0 [ 82.211020][ T5700] el0t_64_sync+0x18c/0x190 [ 82.211812][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.381199][ T1969] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.952433][ T1969] usb 1-1: config 8 has an invalid interface number: 235 but max is 0 [ 82.956140][ T1969] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 82.958214][ T1969] usb 1-1: config 8 has no interface number 0 [ 82.960235][ T1969] usb 1-1: config 8 interface 235 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.963631][ T1969] usb 1-1: config 8 interface 235 has no altsetting 0 [ 82.965038][ T1969] usb 1-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 82.966728][ T1969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.980247][ T1969] hub 1-1:8.235: bad descriptor, ignoring hub [ 82.982037][ T1969] hub: probe of 1-1:8.235 failed with error -5 [ 82.983855][ T1969] keyspan 1-1:8.235: Keyspan - (without firmware) converter detected [ 83.454311][ T5743] FAULT_INJECTION: forcing a failure. [ 83.454311][ T5743] name failslab, interval 1, probability 0, space 0, times 0 [ 83.464865][ T5743] CPU: 0 PID: 5743 Comm: syz.4.440 Not tainted syzkaller #0 [ 83.466278][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 83.468111][ T5743] Call trace: [ 83.468773][ T5743] dump_backtrace+0x1c4/0x1f0 [ 83.469661][ T5743] show_stack+0x2c/0x3c [ 83.470351][ T5743] __dump_stack+0x30/0x40 [ 83.471101][ T5743] dump_stack_lvl+0xf4/0x15c [ 83.471907][ T5743] dump_stack+0x1c/0x5c [ 83.472604][ T5743] should_fail_ex+0x3cc/0x524 [ 83.473423][ T5743] __should_failslab+0xc0/0x11c [ 83.474266][ T5743] should_failslab+0x10/0x28 [ 83.475093][ T5743] __kmem_cache_alloc_node+0x7c/0x318 [ 83.476037][ T5743] kmalloc_trace+0x48/0x94 [ 83.476843][ T5743] snd_seq_oss_readq_new+0x58/0x22c [ 83.477788][ T5743] snd_seq_oss_open+0x660/0xca4 [ 83.478651][ T5743] odev_open+0x84/0xbc [ 83.479379][ T5743] soundcore_open+0x2f8/0x47c [ 83.480155][ T5743] chrdev_open+0x3d0/0x51c [ 83.480958][ T5743] do_dentry_open+0x738/0xf8c [ 83.481793][ T5743] vfs_open+0x7c/0x90 [ 83.482497][ T5743] path_openat+0x1fc0/0x27a0 [ 83.483317][ T5743] do_filp_open+0x198/0x38c [ 83.484124][ T5743] do_sys_openat2+0x134/0x3fc [ 83.484911][ T5743] __arm64_sys_openat+0x11c/0x150 [ 83.485804][ T5743] invoke_syscall+0x98/0x290 [ 83.486550][ T5743] el0_svc_common+0x13c/0x258 [ 83.487318][ T5743] do_el0_svc+0x5c/0x134 [ 83.488064][ T5743] el0_svc+0x58/0x128 [ 83.488775][ T5743] el0t_64_sync_handler+0x84/0xf0 [ 83.489587][ T5743] el0t_64_sync+0x18c/0x190 [ 84.468601][ T5759] could not allocate digest TFM handle xcbc(twofish-asm) [ 84.615030][ T5781] loop2: detected capacity change from 0 to 128 [ 84.982044][ T5789] FAULT_INJECTION: forcing a failure. [ 84.982044][ T5789] name failslab, interval 1, probability 0, space 0, times 0 [ 84.984221][ T5789] CPU: 0 PID: 5789 Comm: syz.3.456 Not tainted syzkaller #0 [ 84.985451][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 84.987019][ T5789] Call trace: [ 84.987506][ T5789] dump_backtrace+0x1c4/0x1f0 [ 84.988259][ T5789] show_stack+0x2c/0x3c [ 84.988899][ T5789] __dump_stack+0x30/0x40 [ 84.989625][ T5789] dump_stack_lvl+0xf4/0x15c [ 84.990402][ T5789] dump_stack+0x1c/0x5c [ 84.991108][ T5789] should_fail_ex+0x3cc/0x524 [ 84.991952][ T5789] __should_failslab+0xc0/0x11c [ 84.992850][ T5789] should_failslab+0x10/0x28 [ 84.993684][ T5789] __kmem_cache_alloc_node+0x7c/0x318 [ 84.994665][ T5789] kmalloc_trace+0x48/0x94 [ 84.995450][ T5789] snd_seq_oss_readq_new+0x58/0x22c [ 84.996396][ T5789] snd_seq_oss_open+0x660/0xca4 [ 84.997269][ T5789] odev_open+0x84/0xbc [ 84.997947][ T5789] soundcore_open+0x2f8/0x47c [ 84.998771][ T5789] chrdev_open+0x3d0/0x51c [ 84.999524][ T5789] do_dentry_open+0x738/0xf8c [ 85.000355][ T5789] vfs_open+0x7c/0x90 [ 85.001033][ T5789] path_openat+0x1fc0/0x27a0 [ 85.001795][ T5789] do_filp_open+0x198/0x38c [ 85.002560][ T5789] do_sys_openat2+0x134/0x3fc [ 85.003385][ T5789] __arm64_sys_openat+0x11c/0x150 [ 85.004244][ T5789] invoke_syscall+0x98/0x290 [ 85.005048][ T5789] el0_svc_common+0x13c/0x258 [ 85.005836][ T5789] do_el0_svc+0x5c/0x134 [ 85.006584][ T5789] el0_svc+0x58/0x128 [ 85.007246][ T5789] el0t_64_sync_handler+0x84/0xf0 [ 85.008121][ T5789] el0t_64_sync+0x18c/0x190 [ 85.069249][ T1969] usb 1-1: USB disconnect, device number 6 [ 85.070772][ T1969] keyspan 1-1:8.235: device disconnected [ 85.307497][ T5806] loop0: detected capacity change from 0 to 512 [ 85.537752][ T5806] EXT4-fs error (device loop0): ext4_quota_enable:7049: inode #4: comm syz.0.461: iget: checksum invalid [ 85.540664][ T5806] EXT4-fs error (device loop0): ext4_quota_enable:7052: comm syz.0.461: Bad quota inode: 4, type: 1 [ 85.547450][ T5806] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 85.550829][ T5806] EXT4-fs (loop0): mount failed [ 85.570222][ T5811] bond0: option mode: unable to set because the bond device has slaves [ 85.638190][ T5819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.645299][ T5819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.647873][ T5819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.659107][ T5819] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 85.738049][ T5831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.739748][ T5831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.752053][ T5820] could not allocate digest TFM handle xcbc(twofish-asm) [ 85.911920][ T5837] FAULT_INJECTION: forcing a failure. [ 85.911920][ T5837] name failslab, interval 1, probability 0, space 0, times 0 [ 85.914356][ T5837] CPU: 1 PID: 5837 Comm: syz.2.471 Not tainted syzkaller #0 [ 85.915558][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 85.917352][ T5837] Call trace: [ 85.917865][ T5837] dump_backtrace+0x1c4/0x1f0 [ 85.918682][ T5837] show_stack+0x2c/0x3c [ 85.919328][ T5837] __dump_stack+0x30/0x40 [ 85.920044][ T5837] dump_stack_lvl+0xf4/0x15c [ 85.920791][ T5837] dump_stack+0x1c/0x5c [ 85.921485][ T5837] should_fail_ex+0x3cc/0x524 [ 85.922244][ T5837] __should_failslab+0xc0/0x11c [ 85.923086][ T5837] should_failslab+0x10/0x28 [ 85.923874][ T5837] __kmem_cache_alloc_node+0x7c/0x318 [ 85.924762][ T5837] kmalloc_trace+0x48/0x94 [ 85.925469][ T5837] snd_seq_port_connect+0x7c/0x3a0 [ 85.926307][ T5837] snd_seq_ioctl_subscribe_port+0x270/0x650 [ 85.927306][ T5837] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 85.928213][ T5837] snd_seq_oss_midi_open+0x33c/0x5fc [ 85.929098][ T5837] snd_seq_oss_synth_setup_midi+0x134/0x4a0 [ 85.930129][ T5837] snd_seq_oss_open+0x754/0xca4 [ 85.930989][ T5837] odev_open+0x84/0xbc [ 85.931715][ T5837] soundcore_open+0x2f8/0x47c [ 85.932506][ T5837] chrdev_open+0x3d0/0x51c [ 85.933236][ T5837] do_dentry_open+0x738/0xf8c [ 85.933993][ T5837] vfs_open+0x7c/0x90 [ 85.934676][ T5837] path_openat+0x1fc0/0x27a0 [ 85.935517][ T5837] do_filp_open+0x198/0x38c [ 85.936287][ T5837] do_sys_openat2+0x134/0x3fc [ 85.937059][ T5837] __arm64_sys_openat+0x11c/0x150 [ 85.937898][ T5837] invoke_syscall+0x98/0x290 [ 85.938688][ T5837] el0_svc_common+0x13c/0x258 [ 85.939474][ T5837] do_el0_svc+0x5c/0x134 [ 85.940228][ T5837] el0_svc+0x58/0x128 [ 85.940877][ T5837] el0t_64_sync_handler+0x84/0xf0 [ 85.941718][ T5837] el0t_64_sync+0x18c/0x190 [ 87.008717][ T5863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.013911][ T5863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.216271][ T5867] loop4: detected capacity change from 0 to 512 [ 87.421423][ T5867] EXT4-fs error (device loop4): ext4_quota_enable:7049: inode #4: comm syz.4.482: iget: checksum invalid [ 87.424009][ T5867] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.482: Bad quota inode: 4, type: 1 [ 87.426161][ T5867] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 87.429020][ T5867] EXT4-fs (loop4): mount failed [ 87.459552][ T5872] loop3: detected capacity change from 0 to 512 [ 87.463552][ T4374] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 87.642667][ T4374] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 87.644592][ T4374] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 87.646450][ T4374] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 87.648023][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.654603][ T4374] usb 1-1: probing VID:PID(0424:012C) [ 87.656743][ T4374] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 87.657790][ T4374] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 87.658862][ T4374] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 87.659968][ T4374] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 87.661129][ T4374] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 88.059846][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.064640][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.239606][ T4374] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 88.557840][ T4374] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 89.049791][ T27] audit: type=1400 audit(90.028:4): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=5917 comm="syz.1.495" name=223A6F offset=66 [ 89.430706][ T5930] loop1: detected capacity change from 0 to 512 [ 89.445310][ T5930] EXT4-fs error (device loop1): ext4_quota_enable:7049: inode #4: comm syz.1.499: iget: checksum invalid [ 89.447747][ T5930] EXT4-fs error (device loop1): ext4_quota_enable:7052: comm syz.1.499: Bad quota inode: 4, type: 1 [ 89.449747][ T5930] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 89.453260][ T5930] EXT4-fs (loop1): mount failed [ 89.633131][ T4374] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 89.651186][ T4374] usb 1-1: USB disconnect, device number 7 [ 89.656147][ T4374] USB vub300 remote SDIO host controller[0] now disconnected [ 90.030292][ T5943] using random self ethernet address [ 90.034621][ T5943] using random host ethernet address [ 90.651081][ C0] [ 90.651539][ C0] ================================ [ 90.652498][ C0] WARNING: inconsistent lock state [ 90.653375][ C0] syzkaller #0 Not tainted [ 90.654079][ C0] -------------------------------- [ 90.654937][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 90.656124][ C0] kworker/u4:4/1601 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 90.657267][ C0] ffff0000cbf14660 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0xe4/0x1ec [ 90.659278][ C0] {SOFTIRQ-ON-W} state was registered at: [ 90.660242][ C0] lock_acquire+0x20c/0x638 [ 90.661018][ C0] __flush_work+0x10c/0x1ec [ 90.661805][ C0] __cancel_work_timer+0x2f8/0x450 [ 90.662700][ C0] cancel_delayed_work_sync+0x24/0x38 [ 90.663614][ C0] mmc_stop_host+0xd4/0x3b8 [ 90.664360][ C0] mmc_remove_host+0x20/0x68 [ 90.665183][ C0] vub300_disconnect+0x120/0x278 [ 90.666091][ C0] usb_unbind_interface+0x1a4/0x738 [ 90.666992][ C0] device_release_driver_internal+0x424/0x6e4 [ 90.667960][ C0] device_release_driver+0x28/0x38 [ 90.668807][ C0] bus_remove_device+0x294/0x384 [ 90.669638][ C0] device_del+0x580/0x990 [ 90.670337][ C0] usb_disable_device+0x33c/0x780 [ 90.671162][ C0] usb_disconnect+0x290/0x790 [ 90.672000][ C0] hub_event+0x1640/0x3e74 [ 90.672722][ C0] process_one_work+0x7e4/0x13bc [ 90.673593][ C0] worker_thread+0xafc/0xfe8 [ 90.674383][ C0] kthread+0x254/0x2e0 [ 90.675079][ C0] ret_from_fork+0x10/0x20 [ 90.675848][ C0] irq event stamp: 823592 [ 90.676552][ C0] hardirqs last enabled at (823592): [] __cancel_work_timer+0x2bc/0x450 [ 90.678175][ C0] hardirqs last disabled at (823591): [] try_to_grab_pending+0xcc/0x658 [ 90.679891][ C0] softirqs last enabled at (822362): [] batadv_nc_purge_paths+0x2f8/0x374 [ 90.681628][ C0] softirqs last disabled at (823523): [] __do_softirq+0x14/0x20 [ 90.683221][ C0] [ 90.683221][ C0] other info that might help us debug this: [ 90.684563][ C0] Possible unsafe locking scenario: [ 90.684563][ C0] [ 90.685857][ C0] CPU0 [ 90.686425][ C0] ---- [ 90.687000][ C0] lock((work_completion)(&(&host->detect)->work)); [ 90.688163][ C0] [ 90.688738][ C0] lock((work_completion)(&(&host->detect)->work)); [ 90.689787][ C0] [ 90.689787][ C0] *** DEADLOCK *** [ 90.689787][ C0] [ 90.691157][ C0] 4 locks held by kworker/u4:4/1601: [ 90.692009][ C0] #0: ffff0000d6559938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 90.693748][ C0] #1: ffff800025cc7c40 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 90.695963][ C0] #2: ffff800015597440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 90.697522][ C0] #3: ffff800008007c80 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd0/0x96c [ 90.699228][ C0] [ 90.699228][ C0] stack backtrace: [ 90.700158][ C0] CPU: 0 PID: 1601 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 90.701361][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 90.703062][ C0] Workqueue: bat_events batadv_nc_worker [ 90.704024][ C0] Call trace: [ 90.704590][ C0] dump_backtrace+0x1c4/0x1f0 [ 90.705393][ C0] show_stack+0x2c/0x3c [ 90.706066][ C0] __dump_stack+0x30/0x40 [ 90.706805][ C0] dump_stack_lvl+0xf4/0x15c [ 90.707594][ C0] dump_stack+0x1c/0x5c [ 90.708289][ C0] print_usage_bug+0x4c0/0x6dc [ 90.709095][ C0] mark_lock_irq+0x858/0xab8 [ 90.709866][ C0] mark_lock+0x224/0x320 [ 90.710532][ C0] __lock_acquire+0xa88/0x6634 [ 90.711243][ C0] lock_acquire+0x20c/0x638 [ 90.711978][ C0] __flush_work+0x10c/0x1ec [ 90.712679][ C0] __cancel_work_timer+0x2f8/0x450 [ 90.713522][ C0] cancel_delayed_work_sync+0x24/0x38 [ 90.714447][ C0] mmc_free_host+0x20/0x40 [ 90.715202][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 90.716260][ C0] call_timer_fn+0x1b8/0x96c [ 90.717051][ C0] __run_timers+0x478/0x6d8 [ 90.717812][ C0] run_timer_softirq+0x7c/0x114 [ 90.718665][ C0] handle_softirqs+0x318/0xc90 [ 90.719436][ C0] __do_softirq+0x14/0x20 [ 90.720176][ C0] ____do_softirq+0x14/0x20 [ 90.720938][ C0] call_on_irq_stack+0x30/0x48 [ 90.721682][ C0] do_softirq_own_stack+0x20/0x2c [ 90.722545][ C0] __irq_exit_rcu+0x23c/0x430 [ 90.723326][ C0] irq_exit_rcu+0x14/0x84 [ 90.724080][ C0] el1_interrupt+0x38/0x54 [ 90.724878][ C0] el1h_64_irq_handler+0x18/0x24 [ 90.725693][ C0] el1h_64_irq+0x64/0x68 [ 90.726444][ C0] debug_smp_processor_id+0x24/0x2c [ 90.727343][ C0] batadv_nc_worker+0x1d0/0x538 [ 90.728189][ C0] process_one_work+0x7e4/0x13bc [ 90.729061][ C0] worker_thread+0x8cc/0xfe8 [ 90.729882][ C0] kthread+0x254/0x2e0 [ 90.730593][ C0] ret_from_fork+0x10/0x20 [ 90.731366][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 90.732869][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1601, name: kworker/u4:4 [ 90.734427][ C0] preempt_count: 101, expected: 0 [ 90.735182][ C0] RCU nest depth: 1, expected: 0 [ 90.735993][ C0] INFO: lockdep is turned off. [ 90.736817][ C0] Preemption disabled at: [ 90.736830][ C0] [] preempt_schedule_irq+0x7c/0x1ac [ 90.738713][ C0] CPU: 0 PID: 1601 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 90.739887][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 90.741413][ C0] Workqueue: bat_events batadv_nc_worker [ 90.742365][ C0] Call trace: [ 90.742924][ C0] dump_backtrace+0x1c4/0x1f0 [ 90.743748][ C0] show_stack+0x2c/0x3c [ 90.744434][ C0] __dump_stack+0x30/0x40 [ 90.745132][ C0] dump_stack_lvl+0xf4/0x15c [ 90.745878][ C0] dump_stack+0x1c/0x5c [ 90.746590][ C0] __might_resched+0x354/0x4e0 [ 90.747409][ C0] __might_sleep+0x94/0x110 [ 90.748159][ C0] start_flush_work+0x44/0x7d0 [ 90.749002][ C0] __flush_work+0x130/0x1ec [ 90.749752][ C0] __cancel_work_timer+0x2f8/0x450 [ 90.750630][ C0] cancel_delayed_work_sync+0x24/0x38 [ 90.751562][ C0] mmc_free_host+0x20/0x40 [ 90.752297][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 90.753350][ C0] call_timer_fn+0x1b8/0x96c [ 90.754129][ C0] __run_timers+0x478/0x6d8 [ 90.754902][ C0] run_timer_softirq+0x7c/0x114 [ 90.755735][ C0] handle_softirqs+0x318/0xc90 [ 90.756543][ C0] __do_softirq+0x14/0x20 [ 90.757287][ C0] ____do_softirq+0x14/0x20 [ 90.758053][ C0] call_on_irq_stack+0x30/0x48 [ 90.758878][ C0] do_softirq_own_stack+0x20/0x2c [ 90.759714][ C0] __irq_exit_rcu+0x23c/0x430 [ 90.760511][ C0] irq_exit_rcu+0x14/0x84 [ 90.761255][ C0] el1_interrupt+0x38/0x54 [ 90.761969][ C0] el1h_64_irq_handler+0x18/0x24 [ 90.762823][ C0] el1h_64_irq+0x64/0x68 [ 90.763558][ C0] debug_smp_processor_id+0x24/0x2c [ 90.764420][ C0] batadv_nc_worker+0x1d0/0x538 [ 90.765235][ C0] process_one_work+0x7e4/0x13bc [ 90.766073][ C0] worker_thread+0x8cc/0xfe8 [ 90.766874][ C0] kthread+0x254/0x2e0 [ 90.767576][ C0] ret_from_fork+0x10/0x20 [ 90.768320][ C0] ODEBUG: object 00000000fa25cc80 is NOT on stack 00000000ac2722aa, but annotated. [ 90.769872][ C0] ------------[ cut here ]------------ [ 90.770773][ C0] WARNING: CPU: 0 PID: 1601 at lib/debugobjects.c:558 __debug_object_init+0x36c/0x434 [ 90.772469][ C0] Modules linked in: [ 90.773136][ C0] CPU: 0 PID: 1601 Comm: kworker/u4:4 Tainted: G W syzkaller #0 [ 90.774701][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 90.776470][ C0] Workqueue: bat_events batadv_nc_worker [ 90.777461][ C0] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 90.778719][ C0] pc : __debug_object_init+0x36c/0x434 [ 90.779582][ C0] lr : __debug_object_init+0x36c/0x434 [ 90.780461][ C0] sp : ffff8000080078c0 [ 90.781157][ C0] x29: ffff8000080078c0 x28: dfff800000000000 x27: 0000000000000000 [ 90.782588][ C0] x26: ffff80001c942000 x25: ffff0000cfec8020 x24: 0000000000000001 [ 90.783978][ C0] x23: ffff0000f5c1b738 x22: 0000000000000000 x21: ffff80001c80fce0 [ 90.785305][ C0] x20: ffff800011d2ea20 x19: ffff800008007960 x18: 1fffe00033e6997e [ 90.786691][ C0] x17: 6161323237326361 x16: ffff800011bb65f8 x15: 206b63617473206e [ 90.788083][ C0] x14: 0000000000000001 x13: 1ffff00001000e80 x12: 0000000000000000 [ 90.789410][ C0] x11: ff008000083154bc x10: 0000000000000000 x9 : 5419e4c85c63f000 [ 90.790824][ C0] x8 : 5419e4c85c63f000 x7 : 0000000000000001 x6 : 0000000000000001 [ 90.792163][ C0] x5 : ffff800008007398 x4 : ffff8000154a4e80 x3 : ffff80000a92ec3c [ 90.793579][ C0] x2 : ffff00019f34cd10 x1 : 0000000000000102 x0 : 0000000000000050 [ 90.794995][ C0] Call trace: [ 90.795585][ C0] __debug_object_init+0x36c/0x434 [ 90.796405][ C0] debug_object_init_on_stack+0x20/0x2c [ 90.797315][ C0] init_rcu_head_on_stack+0x18/0x24 [ 90.798129][ C0] __synchronize_srcu+0x1e4/0x304 [ 90.798927][ C0] synchronize_srcu+0x194/0x1ac [ 90.799723][ C0] wakeup_source_unregister+0x108/0x180 [ 90.800602][ C0] mmc_host_classdev_release+0x48/0x100 [ 90.801474][ C0] device_release+0x94/0x1b4 [ 90.802226][ C0] kobject_put+0x2a8/0x41c [ 90.802926][ C0] put_device+0x28/0x40 [ 90.803583][ C0] mmc_free_host+0x30/0x40 [ 90.804339][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 90.805371][ C0] call_timer_fn+0x1b8/0x96c [ 90.806169][ C0] __run_timers+0x478/0x6d8 [ 90.806933][ C0] run_timer_softirq+0x7c/0x114 [ 90.807766][ C0] handle_softirqs+0x318/0xc90 [ 90.808600][ C0] __do_softirq+0x14/0x20 [ 90.809329][ C0] ____do_softirq+0x14/0x20 [ 90.810027][ C0] call_on_irq_stack+0x30/0x48 [ 90.810834][ C0] do_softirq_own_stack+0x20/0x2c [ 90.811709][ C0] __irq_exit_rcu+0x23c/0x430 [ 90.812525][ C0] irq_exit_rcu+0x14/0x84 [ 90.813271][ C0] el1_interrupt+0x38/0x54 [ 90.814030][ C0] el1h_64_irq_handler+0x18/0x24 [ 90.814826][ C0] el1h_64_irq+0x64/0x68 [ 90.815568][ C0] debug_smp_processor_id+0x24/0x2c [ 90.816390][ C0] batadv_nc_worker+0x1d0/0x538 [ 90.817180][ C0] process_one_work+0x7e4/0x13bc [ 90.818005][ C0] worker_thread+0x8cc/0xfe8 [ 90.818797][ C0] kthread+0x254/0x2e0 [ 90.819494][ C0] ret_from_fork+0x10/0x20 [ 90.820277][ C0] irq event stamp: 823592 [ 90.821031][ C0] hardirqs last enabled at (823592): [] __cancel_work_timer+0x2bc/0x450 [ 90.822755][ C0] hardirqs last disabled at (823591): [] try_to_grab_pending+0xcc/0x658 [ 90.824458][ C0] softirqs last enabled at (822362): [] batadv_nc_purge_paths+0x2f8/0x374 [ 90.826237][ C0] softirqs last disabled at (823523): [] __do_softirq+0x14/0x20 [ 90.827812][ C0] ---[ end trace 0000000000000000 ]--- [ 90.828817][ C0] BUG: scheduling while atomic: kworker/u4:4/1601/0x00000102 [ 90.829967][ C0] INFO: lockdep is turned off. [ 90.830714][ C0] Modules linked in: [ 90.831413][ C0] Preemption disabled at: [ 90.831418][ C0] [] preempt_schedule_irq+0x7c/0x1ac [ 90.833247][ C0] CPU: 0 PID: 1601 Comm: kworker/u4:4 Tainted: G W syzkaller #0 [ 90.834728][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 90.836354][ C0] Workqueue: bat_events batadv_nc_worker [ 90.837297][ C0] Call trace: [ 90.837820][ C0] dump_backtrace+0x1c4/0x1f0 [ 90.838583][ C0] show_stack+0x2c/0x3c [ 90.839255][ C0] __dump_stack+0x30/0x40 [ 90.839980][ C0] dump_stack_lvl+0xf4/0x15c [ 90.840709][ C0] dump_stack+0x1c/0x5c [ 90.841413][ C0] __schedule_bug+0x124/0x1bc [ 90.842221][ C0] __schedule+0xe48/0x1a6c [ 90.842981][ C0] schedule+0xc4/0x170 [ 90.843681][ C0] schedule_timeout+0xc8/0x2f4 [ 90.844493][ C0] do_wait_for_common+0x28c/0x3ec [ 90.845362][ C0] wait_for_completion+0x44/0x5c [ 90.846204][ C0] __synchronize_srcu+0x26c/0x304 [ 90.847060][ C0] synchronize_srcu+0x194/0x1ac [ 90.847888][ C0] wakeup_source_unregister+0x108/0x180 [ 90.848840][ C0] mmc_host_classdev_release+0x48/0x100 [ 90.849787][ C0] device_release+0x94/0x1b4 [ 90.850591][ C0] kobject_put+0x2a8/0x41c [ 90.851295][ C0] put_device+0x28/0x40 [ 90.851987][ C0] mmc_free_host+0x30/0x40 [ 90.852757][ C0] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 90.853751][ C0] call_timer_fn+0x1b8/0x96c [ 90.854532][ C0] __run_timers+0x478/0x6d8 [ 90.855255][ C0] run_timer_softirq+0x7c/0x114 [ 90.856003][ C0] handle_softirqs+0x318/0xc90 [ 90.856737][ C0] __do_softirq+0x14/0x20 [ 90.857498][ C0] ____do_softirq+0x14/0x20 [ 90.858208][ C0] call_on_irq_stack+0x30/0x48 [ 90.859012][ C0] do_softirq_own_stack+0x20/0x2c [ 90.859832][ C0] __irq_exit_rcu+0x23c/0x430 [ 90.860590][ C0] irq_exit_rcu+0x14/0x84 [ 90.861290][ C0] el1_interrupt+0x38/0x54 [ 90.862039][ C0] el1h_64_irq_handler+0x18/0x24 [ 90.862878][ C0] el1h_64_irq+0x64/0x68 [ 90.863602][ C0] debug_smp_processor_id+0x24/0x2c [ 90.864491][ C0] batadv_nc_worker+0x1d0/0x538 [ 90.865399][ C0] process_one_work+0x7e4/0x13bc [ 90.866214][ C0] worker_thread+0x8cc/0xfe8 [ 90.867004][ C0] kthread+0x254/0x2e0 [ 90.867643][ C0] ret_from_fork+0x10/0x20 [ 90.868382][ T1601] ------------[ cut here ]------------ [ 90.868458][ T1969] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 90.869139][ T1601] Voluntary context switch within RCU read-side critical section! [ 90.870533][ T1601] WARNING: CPU: 0 PID: 1601 at kernel/rcu/tree_plugin.h:320 rcu_note_context_switch+0xca0/0x1074 [ 90.873688][ T1601] Modules linked in: [ 90.874376][ T1601] CPU: 0 PID: 1601 Comm: kworker/u4:4 Tainted: G W syzkaller #0 [ 90.875819][ T1601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 90.877567][ T1601] Workqueue: bat_events batadv_nc_worker [ 90.878469][ T1601] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 90.879803][ T1601] pc : rcu_note_context_switch+0xca0/0x1074 [ 90.880832][ T1601] lr : rcu_note_context_switch+0xca0/0x1074 [ 90.881869][ T1601] sp : ffff8000080074d0 [ 90.882617][ T1601] x29: ffff800008007520 x28: dfff800000000000 x27: 0000000000000000 [ 90.883932][ T1601] x26: 1ffff00002a78070 x25: ffff80001532a380 x24: dfff800000000000 [ 90.885225][ T1601] x23: ffff0000cfec8000 x22: ffff80018a036000 x21: ffff0000cfec83f4 [ 90.886553][ T1601] x20: 0000000000000000 x19: ffff0000cfec8000 x18: 1fffe00033e6997e [ 90.887886][ T1601] x17: 0000000000000000 x16: ffff8000082f2d78 x15: 0000000000000000 [ 90.889223][ T1601] x14: 0000000000000001 x13: 1ffff00001000de8 x12: 0000000000000000 [ 90.890562][ T1601] x11: ff00800008195f68 x10: 0000000000000000 x9 : 5419e4c85c63f000 [ 90.891871][ T1601] x8 : 5419e4c85c63f000 x7 : 0000000000000001 x6 : 0000000000000001 [ 90.893165][ T1601] x5 : ffff800008006f58 x4 : ffff8000154a4e80 x3 : ffff80000831d38c [ 90.894563][ T1601] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 90.895806][ T1601] Call trace: [ 90.896309][ T1601] rcu_note_context_switch+0xca0/0x1074 [ 90.897238][ T1601] __schedule+0x2a8/0x1a6c [ 90.898003][ T1601] schedule+0xc4/0x170 [ 90.898703][ T1601] schedule_timeout+0xc8/0x2f4 [ 90.899508][ T1601] do_wait_for_common+0x28c/0x3ec [ 90.900346][ T1601] wait_for_completion+0x44/0x5c [ 90.901124][ T1601] __synchronize_srcu+0x26c/0x304 [ 90.901991][ T1601] synchronize_srcu+0x194/0x1ac [ 90.902887][ T1601] wakeup_source_unregister+0x108/0x180 [ 90.903917][ T1601] mmc_host_classdev_release+0x48/0x100 [ 90.904866][ T1601] device_release+0x94/0x1b4 [ 90.905635][ T1601] kobject_put+0x2a8/0x41c [ 90.906456][ T1601] put_device+0x28/0x40 [ 90.907163][ T1601] mmc_free_host+0x30/0x40 [ 90.907933][ T1601] vub300_inactivity_timer_expired+0x17c/0x3f8 [ 90.909016][ T1601] call_timer_fn+0x1b8/0x96c [ 90.909775][ T1601] __run_timers+0x478/0x6d8 [ 90.910543][ T1601] run_timer_softirq+0x7c/0x114 [ 90.911396][ T1601] handle_softirqs+0x318/0xc90 [ 90.912181][ T1601] __do_softirq+0x14/0x20 [ 90.912936][ T1601] ____do_softirq+0x14/0x20 [ 90.913727][ T1601] call_on_irq_stack+0x30/0x48 [ 90.914542][ T1601] do_softirq_own_stack+0x20/0x2c [ 90.915398][ T1601] __irq_exit_rcu+0x23c/0x430 [ 90.916206][ T1601] irq_exit_rcu+0x14/0x84 [ 90.916935][ T1601] el1_interrupt+0x38/0x54 [ 90.917722][ T1601] el1h_64_irq_handler+0x18/0x24 [ 90.918587][ T1601] el1h_64_irq+0x64/0x68 [ 90.919263][ T1601] debug_smp_processor_id+0x24/0x2c [ 90.920217][ T1601] batadv_nc_worker+0x1d0/0x538 [ 90.920989][ T1601] process_one_work+0x7e4/0x13bc [ 90.921891][ T1601] worker_thread+0x8cc/0xfe8 [ 90.922748][ T1601] kthread+0x254/0x2e0 [ 90.923413][ T1601] ret_from_fork+0x10/0x20 [ 90.924127][ T1601] irq event stamp: 823592 [ 90.924811][ T1601] hardirqs last enabled at (823592): [] __cancel_work_timer+0x2bc/0x450 [ 90.926426][ T1601] hardirqs last disabled at (823591): [] try_to_grab_pending+0xcc/0x658 [ 90.928048][ T1601] softirqs last enabled at (822362): [] batadv_nc_purge_paths+0x2f8/0x374 [ 90.929832][ T1601] softirqs last disabled at (823523): [] __do_softirq+0x14/0x20 [ 90.931413][ T1601] ---[ end trace 0000000000000000 ]--- [ 90.932391][ C0] ================================================================== [ 90.933700][ C0] BUG: KASAN: stack-out-of-bounds in kasan_save_stack+0x30/0x70 [ 90.934897][ C0] Write of size 512 at addr ffff800008007890 by task migration/0/17 [ 90.936104][ C0] [ 90.936439][ C0] CPU: 0 PID: 17 Comm: migration/0 Tainted: G W syzkaller #0 [ 90.937785][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 90.939312][ C0] Stopper: 0x0 <- 0x0 [ 90.939954][ C0] Call trace: [ 90.940445][ C0] dump_backtrace+0x1c4/0x1f0 [ 90.941195][ C0] show_stack+0x2c/0x3c [ 90.941873][ C0] __dump_stack+0x30/0x40 [ 90.942616][ C0] dump_stack_lvl+0xf4/0x15c [ 90.943409][ C0] print_address_description+0x88/0x218 [ 90.944270][ C0] print_report+0x50/0x68 [ 90.945025][ C0] kasan_report+0xa8/0xfc [ 90.945768][ C0] kasan_check_range+0x258/0x290 [ 90.946637][ C0] memset+0x40/0x70 [ 90.947310][ C0] kasan_save_stack+0x30/0x70 [ 90.948129][ C0] __kasan_record_aux_stack+0xc0/0xdc [ 90.949062][ C0] kasan_record_aux_stack_noalloc+0x14/0x20 [ 90.950107][ C0] insert_work+0x64/0x37c [ 90.950825][ C0] __queue_work+0xd00/0x1280 [ 90.951621][ C0] delayed_work_timer_fn+0x74/0x94 [ 90.952462][ C0] call_timer_fn+0x1b8/0x96c [ 90.953249][ C0] __run_timers+0x4d0/0x6d8 [ 90.954051][ C0] run_timer_softirq+0x7c/0x114 [ 90.954910][ C0] handle_softirqs+0x318/0xc90 [ 90.955674][ C0] __do_softirq+0x14/0x20 [ 90.956428][ C0] ____do_softirq+0x14/0x20 [ 90.957209][ C0] call_on_irq_stack+0x30/0x48 [ 90.958041][ C0] do_softirq_own_stack+0x20/0x2c [ 90.958883][ C0] __irq_exit_rcu+0x23c/0x430 [ 90.959689][ C0] irq_exit_rcu+0x14/0x84 [ 90.960432][ C0] el1_interrupt+0x38/0x54 [ 90.961194][ C0] el1h_64_irq_handler+0x18/0x24 [ 90.962019][ C0] el1h_64_irq+0x64/0x68 [ 90.962728][ C0] finish_lock_switch+0xb8/0x1c8 [ 90.963569][ C0] finish_task_switch+0x120/0x658 [ 90.964404][ C0] __schedule+0xdb8/0x1a6c [ 90.965170][ C0] schedule+0xc4/0x170 [ 90.965910][ C0] smpboot_thread_fn+0x548/0x960 [ 90.966714][ C0] kthread+0x254/0x2e0 [ 90.967367][ C0] ret_from_fork+0x10/0x20 [ 90.968133][ C0] [ 90.968525][ C0] The buggy address belongs to a 8-page vmalloc region starting at 0xffff800008000000 allocated at init_IRQ+0x14/0x24 [ 90.970619][ C0] The buggy address belongs to the physical page: [ 90.971632][ C0] page:00000000467c8944 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1001ce [ 90.973316][ C0] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 90.974552][ C0] raw: 05ffc00000000000 0000000000000000 dead000000000122 0000000000000000 [ 90.976014][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 90.977388][ C0] page dumped because: kasan: bad access detected [ 90.978443][ C0] [ 90.978862][ C0] Memory state around the buggy address: [ 90.979848][ C0] ffff800008007800: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 90.981269][ C0] ffff800008007880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.982578][ C0] >ffff800008007900: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 90.983886][ C0] ^ [ 90.984910][ C0] ffff800008007980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.986154][ C0] ffff800008007a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.987518][ C0] ================================================================== [ 91.063151][ T5973] loop4: detected capacity change from 0 to 512 [ 91.141004][ T4421] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 91.142648][ T4421] Mem abort info: [ 91.143205][ T4421] ESR = 0x0000000086000006 [ 91.143927][ T4421] EC = 0x21: IABT (current EL), IL = 32 bits [ 91.144944][ T4421] SET = 0, FnV = 0 [ 91.145561][ T4421] EA = 0, S1PTW = 0 [ 91.146171][ T4421] FSC = 0x06: level 2 translation fault [ 91.147102][ T4421] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001127da000 [ 91.148266][ T4421] [0000000000000000] pgd=080000011074d003, p4d=080000011074d003, pud=0800000115282003, pmd=0000000000000000 [ 91.150177][ T4421] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 91.151312][ T4421] Modules linked in: [ 91.152076][ T4421] CPU: 0 PID: 4421 Comm: kworker/0:9 Tainted: G B W syzkaller #0 [ 91.153563][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.155220][ T4421] Workqueue: rcu_gp srcu_invoke_callbacks [ 91.156242][ T4421] pstate: 22400805 (nzCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=-c) [ 91.157623][ T4421] pc : 0x0 [ 91.158146][ T4421] lr : srcu_invoke_callbacks+0x168/0x374 [ 91.159143][ T4421] sp : ffff8000216d7aa0 [ 91.159826][ T4421] x29: ffff8000216d7b40 x28: 1fffe00033e6b9d9 x27: ffff800008007968 [ 91.161169][ T4421] x26: 1ffff00001000f2d x25: ffff8000216d7ac0 x24: dfff800000000000 [ 91.162587][ T4421] x23: ffff7000042daf58 x22: ffff800008007960 x21: ffff800011d2ea20 [ 91.163995][ T4421] x20: ffff800016a0e4e8 x19: ffff00019f35cf20 x18: 1fffe00033e6997e [ 91.165311][ T4421] x17: ffff8000153bd000 x16: ffff800008043b30 x15: 0000000000000000 [ 91.166707][ T4421] x14: 0000000000000005 x13: 0000000000000000 x12: ffff7000042daf4d [ 91.168106][ T4421] x11: 0000000000000000 x10: 0000000000000000 x9 : ff0080000835c8a0 [ 91.169457][ T4421] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 000000000000003f [ 91.170777][ T4421] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000020 [ 91.172006][ T4421] x2 : 0000000000000008 x1 : 0000000000000200 x0 : ffff800008007960 [ 91.173255][ T4421] Call trace: [ 91.173780][ T4421] 0x0 [ 91.174234][ T4421] process_one_work+0x7e4/0x13bc [ 91.175000][ T4421] worker_thread+0x8cc/0xfe8 [ 91.175786][ T4421] kthread+0x254/0x2e0 [ 91.176440][ T4421] ret_from_fork+0x10/0x20 [ 91.177173][ T4421] Code: bad PC value [ 91.177845][ T4421] ---[ end trace 0000000000000000 ]--- [ 91.251035][ T1969] usb 1-1: Using ep0 maxpacket: 32 [ 91.253184][ T1969] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 91.255405][ T1969] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.257806][ T1969] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.258896][ T1969] usb 1-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.00 [ 91.260342][ T1969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.266284][ T1969] usb 1-1: config 0 descriptor?? [ 91.449344][ T4421] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 91.450697][ T4421] SMP: stopping secondary CPUs [ 91.451462][ T4421] Kernel Offset: disabled [ 91.452148][ T4421] CPU features: 0x0a0000,000f0097,a65bfea7 [ 91.453119][ T4421] Memory Limit: none [ 91.709881][ T4421] Rebooting in 86400 seconds..