last executing test programs: 55.643663734s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000bc0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00') mount$9p_unix(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='./file0/file0/..\x00', 0x0, 0x1a474dc, 0x0) umount2(&(0x7f0000000cc0)='./file0/file0/..\x00', 0x4) 55.532602136s ago: executing program 2 (id=11): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 53.123982515s ago: executing program 2 (id=57): semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000000)=""/200) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f00000001c0)='./sys/bus/pnp/drivers/serial\x00', &(0x7f0000000200)='./pnp_serial\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001540), 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={0x0}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./pnp_serial/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='00:04', 0x5) 52.967571388s ago: executing program 32 (id=57): semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000000)=""/200) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f00000001c0)='./sys/bus/pnp/drivers/serial\x00', &(0x7f0000000200)='./pnp_serial\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001540), 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={0x0}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./pnp_serial/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='00:04', 0x5) 27.397777557s ago: executing program 0 (id=482): socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x81, 0x0, 0x0, 0x800001}, {0x16, 0xfc, 0x5}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) 26.535541168s ago: executing program 0 (id=497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000001c0)={0xbc, 0x0, 0x5}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.400630051s ago: executing program 0 (id=500): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000001c0)=0x1, 0x4) 26.400565802s ago: executing program 0 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./dev\x00', &(0x7f0000000b40)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd06, &(0x7f0000000c40)="0400000000000000000000003801") 26.374596572s ago: executing program 0 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000007c0)='270', 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x11) 26.268733704s ago: executing program 0 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/uprobe_events\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 11.230204658s ago: executing program 33 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/uprobe_events\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 9.856721512s ago: executing program 5 (id=690): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0xfbca, 0x1ff, 0x1, 0x3, 0x7, 0x0, 0xd}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2000c840) 9.773145784s ago: executing program 5 (id=693): r0 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x1, 0x102) write$P9_RREMOVE(r0, &(0x7f0000000540)={0x7, 0x7b, 0x2}, 0x7) 9.653025907s ago: executing program 5 (id=695): gettid() timer_create(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f00000001c0)=0x8001, 0x4) sendto$inet(r0, &(0x7f0000000280)="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", 0xffffff5d, 0x12, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) recvfrom$inet(r0, &(0x7f0000000440)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 8.790104357s ago: executing program 5 (id=708): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r0, 0x0, 0x10ff, 0x300, &(0x7f0000000e40)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000e80)="b8"}, 0x3a) 8.69258675s ago: executing program 5 (id=711): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) 8.654273161s ago: executing program 5 (id=712): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x30) 3.063300786s ago: executing program 4 (id=787): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001440), 0x40, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000001480)={0xc}) 2.944645059s ago: executing program 4 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7ffff000) 2.441539231s ago: executing program 6 (id=803): r0 = memfd_create(&(0x7f0000000080)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f00000000c0)="06", 0x1) sendfile(r0, r0, &(0x7f0000000100), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) 2.056731391s ago: executing program 4 (id=807): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_macvtap\x00', 0x10) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}}}}}}}}, 0x0) 2.014172092s ago: executing program 4 (id=809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r1, 0x205, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40010) 1.872723345s ago: executing program 4 (id=811): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40045506, 0x0) 1.544854493s ago: executing program 6 (id=817): r0 = socket(0x2d, 0x2, 0x0) sendto(r0, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800"}, 0x80) 1.417722656s ago: executing program 6 (id=819): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000680)={0x2, 0x0, {&(0x7f0000004b00)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000840)=""/227, 0xe3, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/186, 0xba, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000700)={0x2, 0x0, {&(0x7f0000000540)=""/155, 0x9b, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 1.288771749s ago: executing program 1 (id=821): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) io_setup(0x6, &(0x7f00000000c0)=0x0) socket(0x2, 0x2, 0x1) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='9', 0x1}]) 1.288691409s ago: executing program 6 (id=822): syz_emit_vhci(&(0x7f0000003540)=ANY=[@ANYBLOB="043e1001000000ffffffffffff05"], 0x14) 1.156449932s ago: executing program 1 (id=825): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='mtd0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x6) r0 = syz_create_resource$binfmt(&(0x7f0000000d00)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0x4, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18010000000000000000000001000000852000002c3f030095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000fc0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cbc-camellia-aesni,rmd160-generic)\x00'}, 0x58) r2 = open(&(0x7f0000000d40)='./bus\x00', 0x60840, 0x11c) fcntl$setlease(r2, 0x400, 0x0) rename(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='./file1\x00') mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x370, 0x288, 0x0, 0x370, 0x458, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x180, 0x1a8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5e, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private2, [], [0x0, 0x0, 0xffffffff]}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @loopback, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x9, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x28f8, 0xfffff801, @ipv6=@private2, 0x4e23}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0xeb14, [0x2], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x2, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000f40)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000f80)=0xfefffff2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001040)='smaps\x00') preadv(r5, &(0x7f0000001080)=[{&(0x7f00000010c0)=""/48, 0x30}], 0x1, 0x5fac, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r3, &(0x7f0000000500)='o', 0x1) 1.122688443s ago: executing program 4 (id=827): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000200)={0x7}) syz_usb_connect(0x3, 0x10e, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='target '], 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r0, &(0x7f0000000000)='3', 0x4e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 847.38989ms ago: executing program 1 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000440)={0x0, 0xf00, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r1, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 734.786412ms ago: executing program 6 (id=832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff0200000000000000000000000000010000000800000000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@empty, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) 612.122846ms ago: executing program 1 (id=833): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7f, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x7ffe}, 0x20) 560.537956ms ago: executing program 6 (id=835): syz_usb_connect(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4084) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000001d80)=[{&(0x7f0000001e00)="2296389bd602b52c66", 0x9}], 0x1) 541.844247ms ago: executing program 1 (id=836): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x27, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 464.000299ms ago: executing program 1 (id=837): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000280), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000002c0)=[{r1, 0x4280}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 416.74179ms ago: executing program 3 (id=838): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000580)="05000806", 0x5e0, 0x0, &(0x7f00000005c0)={0x11, 0x8100, r2}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, 0x0, 0x0) 339.452672ms ago: executing program 3 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r1, 0x401, 0x70bd2e, 0x25dfdbfa, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}}, 0x14008080) 315.591422ms ago: executing program 3 (id=840): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)='GPL\x00', 0x4, 0x436, &(0x7f0000001180)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)="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", 0x1c8}], 0x1}}], 0x1, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001500)={r0, r1}) write(r2, &(0x7f0000000140)="e4", 0x1) 152.697276ms ago: executing program 3 (id=841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0xa, 0x0, 0x3, 0xa], 0x41000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 67.970868ms ago: executing program 3 (id=842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000180)={0x1, 0x0, @ioapic={0x231c7000, 0x1, 0x401, 0x6, 0x0, [{0xe, 0x5, 0x3, '\x00', 0x22}, {0xf3, 0x2, 0x6, '\x00', 0x38}, {0x9b, 0x3, 0xcc, '\x00', 0x4f}, {0x0, 0x2, 0x10, '\x00', 0x9}, {0x7, 0x3, 0x6, '\x00', 0x4}, {0x1, 0x80, 0xfd, '\x00', 0x7}, {0x7, 0xf8, 0x6, '\x00', 0xff}, {0x0, 0x1, 0xd0, '\x00', 0x1}, {0x6, 0xa, 0xa, '\x00', 0x4}, {0x7, 0x4, 0x6, '\x00', 0x9e}, {0x3, 0x8, 0xf, '\x00', 0x8}, {0x80, 0xd, 0x1, '\x00', 0x6}, {0x7, 0x1, 0x7, '\x00', 0x9}, {0xff, 0x89, 0xfa, '\x00', 0x9d}, {0x1, 0x8, 0x9, '\x00', 0x2}, {0x2, 0xb}, {0x6, 0xd, 0xe, '\x00', 0x6a}, {0x4, 0x2, 0xa, '\x00', 0x6}, {0x38, 0x9, 0x1, '\x00', 0x9}, {0x7a, 0x80, 0x8, '\x00', 0x3}, {0x7f, 0x9c, 0xf7}, {0x2, 0xb, 0x21, '\x00', 0x2}, {0x7f, 0x10, 0x6, '\x00', 0x8}, {0x7, 0x9, 0x1, '\x00', 0x5}]}}) 0s ago: executing program 3 (id=843): syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) 0s ago: executing program 3 (id=844): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680), 0x40e02, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000780)={0x1f, 0x0, 0x1}, 0x6) write$rfkill(r0, &(0x7f0000000900)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) kernel console output (not intermixed with test programs): T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.290901][ T4188] device veth0_macvtap entered promiscuous mode [ 57.307722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.316987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.325819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.334598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.345431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.354509][ T4193] device veth0_macvtap entered promiscuous mode [ 57.370170][ T4188] device veth1_macvtap entered promiscuous mode [ 57.380280][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.388212][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.397198][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.427830][ T4187] device veth0_vlan entered promiscuous mode [ 57.440293][ T4193] device veth1_macvtap entered promiscuous mode [ 57.455538][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.467416][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.478018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.486207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.494370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.502658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.511783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.520415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.528886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.538292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.546998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.554838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.569372][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.578734][ T4187] device veth1_vlan entered promiscuous mode [ 57.594239][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.604296][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.613703][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.624821][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.636102][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.644171][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.652893][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.661678][ T4197] device veth0_vlan entered promiscuous mode [ 57.679835][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.696323][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.715557][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.723743][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.732834][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.740673][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.748249][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.757321][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.773638][ T4197] device veth1_vlan entered promiscuous mode [ 57.784773][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.798009][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.811436][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.822594][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.836586][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.845863][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.859633][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.889257][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.897628][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.906673][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.915298][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.929850][ T4187] device veth0_macvtap entered promiscuous mode [ 57.961460][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.971110][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.979699][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.987964][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.002679][ T4187] device veth1_macvtap entered promiscuous mode [ 58.012499][ T4197] device veth0_macvtap entered promiscuous mode [ 58.023725][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.036837][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.045052][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.057467][ T4197] device veth1_macvtap entered promiscuous mode [ 58.087193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.095600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.105816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.126666][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.141132][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.152890][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.163692][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.175067][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.185784][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.196507][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.206705][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.218041][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.228927][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.246529][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.256486][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.269340][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.270605][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.279225][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.294965][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.310260][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.318950][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.328410][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.337341][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.348544][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.361129][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.371595][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.382058][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.392362][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.402798][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.413684][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.425155][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.433013][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.441726][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.453553][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.463157][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.473944][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.481993][ T600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.495904][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.508515][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.518848][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.529352][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.539181][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.549732][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.561057][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.576245][ T4186] device veth0_vlan entered promiscuous mode [ 58.587595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.596393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.621188][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.631830][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.640945][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.649836][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.687536][ T4186] device veth1_vlan entered promiscuous mode [ 58.696178][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.708655][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.727334][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.741092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.744356][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.749175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.764450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.773401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.809229][ T4186] device veth0_macvtap entered promiscuous mode [ 58.858637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.873462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.882524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.919788][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.921224][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.936335][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.946222][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.976495][ T4186] device veth1_macvtap entered promiscuous mode [ 58.987842][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.002397][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.015054][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.051777][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.051789][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.051801][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.077174][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 59.077848][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.099991][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.101629][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 59.108492][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.137776][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.150537][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 59.156423][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.159728][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 59.170020][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.183304][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 59.189010][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.199759][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.215409][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.228801][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.242119][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.269934][ T4275] ======================================================= [ 59.269934][ T4275] WARNING: The mand mount option has been deprecated and [ 59.269934][ T4275] and is ignored by this kernel. Remove the mand [ 59.269934][ T4275] option from the mount to silence this warning. [ 59.269934][ T4275] ======================================================= [ 59.275216][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.304789][ C1] vkms_vblank_simulate: vblank timer overrun [ 59.328649][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.340674][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.350620][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.361053][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.372080][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.383293][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.394847][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.402818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.420543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.439260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.450248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.466237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.476157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.497622][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.508006][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.562206][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.572501][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.586823][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.597425][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.609569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.756311][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.769932][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.778080][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.840399][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.848713][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.881236][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.896289][ T4301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.908436][ T4301] jffs2: notice: (4301) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 60.055816][ T4311] device bridge_slave_1 left promiscuous mode [ 60.056549][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.092885][ T4311] device bridge_slave_0 left promiscuous mode [ 60.099149][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.278813][ T4329] binder: 4328:4329 ioctl c018620c 200000000440 returned -1 [ 60.363982][ T4336] netlink: 76 bytes leftover after parsing attributes in process `syz.1.34'. [ 61.056366][ T4377] FAULT_INJECTION: forcing a failure. [ 61.056366][ T4377] name failslab, interval 1, probability 0, space 0, times 1 [ 61.077267][ T4377] CPU: 0 PID: 4377 Comm: syz.0.51 Not tainted syzkaller #0 [ 61.084494][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.094576][ T4377] Call Trace: [ 61.097867][ T4377] [ 61.100810][ T4377] dump_stack_lvl+0x188/0x250 [ 61.105519][ T4377] ? show_regs_print_info+0x20/0x20 [ 61.110732][ T4377] ? load_image+0x410/0x410 [ 61.115249][ T4377] ? __might_sleep+0xf0/0xf0 [ 61.119852][ T4377] ? __lock_acquire+0x7d40/0x7d40 [ 61.124893][ T4377] should_fail+0x383/0x4b0 [ 61.129338][ T4377] should_failslab+0x5/0x20 [ 61.133848][ T4377] slab_pre_alloc_hook+0x51/0xc0 [ 61.138801][ T4377] ? fib_trie_unmerge+0x266/0xce0 [ 61.140346][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 61.143831][ T4377] kmem_cache_alloc+0x3d/0x280 [ 61.143859][ T4377] fib_trie_unmerge+0x266/0xce0 [ 61.159428][ T4377] fib_unmerge+0xbc/0x350 [ 61.163781][ T4377] fib4_rule_configure+0xe0/0xb00 [ 61.168836][ T4377] fib_nl_newrule+0x131a/0x1e00 [ 61.173724][ T4377] ? fib_rules_seq_read+0xf0/0xf0 [ 61.178764][ T4377] ? __mutex_lock_common+0x435/0x2400 [ 61.184171][ T4377] ? fib_rules_seq_read+0xf0/0xf0 [ 61.189186][ T4377] rtnetlink_rcv_msg+0x7f1/0xf10 [ 61.194114][ T4377] ? lock_chain_count+0x20/0x20 [ 61.198961][ T4377] ? rtnetlink_bind+0x80/0x80 [ 61.203631][ T4377] ? __local_bh_enable_ip+0x136/0x1c0 [ 61.208989][ T4377] ? lockdep_hardirqs_on+0x94/0x140 [ 61.214199][ T4377] ? __local_bh_enable_ip+0x136/0x1c0 [ 61.219560][ T4377] ? _local_bh_enable+0xa0/0xa0 [ 61.224410][ T4377] ? __dev_queue_xmit+0x1b64/0x2e50 [ 61.229608][ T4377] ? dev_queue_xmit+0x20/0x20 [ 61.234270][ T4377] ? memcpy+0x3c/0x60 [ 61.238234][ T4377] ? __copy_skb_header+0x3ba/0x4f0 [ 61.243335][ T4377] netlink_rcv_skb+0x1e9/0x430 [ 61.248083][ T4377] ? rtnetlink_bind+0x80/0x80 [ 61.252749][ T4377] ? netlink_ack+0xb10/0xb10 [ 61.257333][ T4377] netlink_unicast+0x78f/0x940 [ 61.262090][ T4377] netlink_sendmsg+0x8ba/0xbe0 [ 61.266849][ T4377] ? netlink_getsockopt+0x570/0x570 [ 61.272034][ T4377] ? aa_sock_msg_perm+0x94/0x150 [ 61.276960][ T4377] ? apparmor_socket_sendmsg+0x88/0x230 [ 61.282488][ T4377] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 61.287761][ T4377] ? security_socket_sendmsg+0x7c/0xa0 [ 61.293203][ T4377] ? netlink_getsockopt+0x570/0x570 [ 61.298389][ T4377] ____sys_sendmsg+0x5be/0x8f0 [ 61.303151][ T4377] ? __sys_sendmsg_sock+0x30/0x30 [ 61.308168][ T4377] ? import_iovec+0x6f/0xa0 [ 61.312661][ T4377] ___sys_sendmsg+0x236/0x2e0 [ 61.317328][ T4377] ? __sys_sendmsg+0x290/0x290 [ 61.322103][ T4377] __se_sys_sendmsg+0x1b7/0x2a0 [ 61.326940][ T4377] ? __x64_sys_sendmsg+0x80/0x80 [ 61.331864][ T4377] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 61.337836][ T4377] ? lockdep_hardirqs_on+0x94/0x140 [ 61.343021][ T4377] do_syscall_64+0x4c/0xa0 [ 61.347421][ T4377] ? clear_bhb_loop+0x30/0x80 [ 61.352085][ T4377] ? clear_bhb_loop+0x30/0x80 [ 61.356746][ T4377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.362635][ T4377] RIP: 0033:0x7fd3e60d41d9 [ 61.367038][ T4377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.386626][ T4377] RSP: 002b:00007fd3e432c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.395024][ T4377] RAX: ffffffffffffffda RBX: 00007fd3e635bfa0 RCX: 00007fd3e60d41d9 [ 61.402977][ T4377] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 61.410934][ T4377] RBP: 00007fd3e616b888 R08: 0000000000000000 R09: 0000000000000000 [ 61.418910][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.426867][ T4377] R13: 00007fd3e635c038 R14: 00007fd3e635bfa0 R15: 00007fff98377178 [ 61.434830][ T4377] [ 61.443570][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 61.469527][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 61.695422][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 61.806467][ T4391] overlayfs: conflicting options: userxattr,metacopy=on [ 61.878829][ T4262] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.155799][ T4416] input: syz0 as /devices/virtual/input/input5 [ 62.166008][ T4420] 9pnet_virtio: no channels available for device syz [ 62.242414][ T4262] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.283833][ T4425] Zero length message leads to an empty skb [ 62.308566][ T4262] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.383997][ T4262] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.698047][ T4418] chnl_net:caif_netlink_parms(): no params data found [ 62.764884][ T4448] bond0: (slave bond_slave_0): Releasing backup interface [ 62.879523][ T21] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 62.952301][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.960187][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.968211][ T4418] device bridge_slave_0 entered promiscuous mode [ 62.993271][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.011192][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.030019][ T4418] device bridge_slave_1 entered promiscuous mode [ 63.088380][ T4418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.133763][ T4418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.183011][ T4479] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.225430][ T4418] team0: Port device team_slave_0 added [ 63.234056][ T4418] team0: Port device team_slave_1 added [ 63.249649][ T21] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 63.266215][ T21] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 63.287384][ T21] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 63.318432][ T4418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.331386][ T4418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.340420][ T4487] input: syz0 as /devices/virtual/input/input6 [ 63.358286][ T4418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.383347][ T4418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.384227][ T21] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 63.397781][ T4418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.416427][ T21] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 63.449564][ T4418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.483070][ T21] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 63.569654][ T21] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 63.581721][ T21] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 63.584971][ T4418] device hsr_slave_0 entered promiscuous mode [ 63.612209][ T21] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 63.655291][ T4418] device hsr_slave_1 entered promiscuous mode [ 63.673863][ T4418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.684317][ T4508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.98'. [ 63.699434][ T4418] Cannot create hsr debugfs directory [ 63.892825][ T21] usb 2-1: string descriptor 0 read error: -22 [ 63.906369][ T21] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 63.922945][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.995834][ T21] adutux 2-1:168.0: interrupt endpoints not found [ 64.260459][ T26] Bluetooth: hci3: command 0x0409 tx timeout [ 64.417467][ T4262] device hsr_slave_0 left promiscuous mode [ 64.438506][ T4262] device hsr_slave_1 left promiscuous mode [ 64.485269][ T4262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.515491][ T4262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.555859][ T4262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.599622][ T4262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.619610][ T4261] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.640953][ T4262] device bridge_slave_1 left promiscuous mode [ 64.687283][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.727031][ T13] usb 2-1: USB disconnect, device number 2 [ 64.761749][ T4262] device bridge_slave_0 left promiscuous mode [ 64.768520][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.825415][ T4262] device veth1_macvtap left promiscuous mode [ 64.844924][ T4262] device veth0_macvtap left promiscuous mode [ 64.870604][ T4261] usb 1-1: Using ep0 maxpacket: 16 [ 64.888581][ T4262] device veth1_vlan left promiscuous mode [ 64.908974][ T4262] device veth0_vlan left promiscuous mode [ 65.010593][ T4261] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 65.018790][ T4261] usb 1-1: config 0 has no interface number 0 [ 65.047265][ T4246] Bluetooth: hci5: Frame reassembly failed (-84) [ 65.065530][ T4565] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 65.236089][ T4261] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 65.250148][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.258168][ T4261] usb 1-1: Product: syz [ 65.288653][ T4261] usb 1-1: Manufacturer: syz [ 65.299967][ T4261] usb 1-1: SerialNumber: syz [ 65.315940][ T4261] usb 1-1: config 0 descriptor?? [ 65.376793][ T4261] hub 1-1:0.132: bad descriptor, ignoring hub [ 65.395997][ T4261] hub: probe of 1-1:0.132 failed with error -5 [ 65.413602][ T4261] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input7 [ 65.705732][ T4262] team0 (unregistering): Port device team_slave_1 removed [ 65.753059][ T4262] team0 (unregistering): Port device team_slave_0 removed [ 65.796250][ T4262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.833016][ T4262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.866221][ T4261] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 65.919230][ T4261] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 65.963694][ T4262] bond0 (unregistering): Released all slaves [ 66.008847][ T4418] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.074222][ T4418] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.147995][ T4418] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.156618][ T4261] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 66.181600][ T4418] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.196529][ T4189] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 66.306314][ T4418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.336408][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.343776][ T4189] Bluetooth: hci3: command 0x041b tx timeout [ 66.368532][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.402273][ T4418] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.435456][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.471674][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.506906][ T3034] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.514040][ T3034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.561524][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.600766][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.627352][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.651503][ T3034] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.652136][ T4573] ceph: No mds server is up or the cluster is laggy [ 66.658590][ T3034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.674274][ T4593] team0: No ports can be present during mode change [ 66.683770][ T4189] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 66.697201][ T4576] ceph: No mds server is up or the cluster is laggy [ 66.736218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.745135][ T2302] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 66.783254][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.844482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.871501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.891315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.920274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.963907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.003878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.023616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.059759][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 67.072061][ T4418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.076093][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 67.115981][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.116953][ T4604] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 67.146506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.176441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.454020][ T4616] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 67.476697][ T4616] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 67.653524][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.668833][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.713011][ T4418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.244576][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.276665][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.326562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.341473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.371258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.379072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.393048][ T4418] device veth0_vlan entered promiscuous mode [ 68.419678][ T4175] Bluetooth: hci3: command 0x040f tx timeout [ 68.439366][ T4418] device veth1_vlan entered promiscuous mode [ 68.517577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.532292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.571899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.591560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.608286][ T4418] device veth0_macvtap entered promiscuous mode [ 68.616231][ T4676] tipc: Started in network mode [ 68.625751][ T4676] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 68.646415][ T4676] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 68.673126][ T4676] tipc: Enabled bearer , priority 10 [ 68.700629][ T4418] device veth1_macvtap entered promiscuous mode [ 68.741977][ T4418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.779476][ T4418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.803374][ T4418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.828776][ T4418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.852407][ T4418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.883816][ T4418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.920849][ T4418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.946507][ T4418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.972064][ T4418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.013287][ T4696] IPVS: stopping backup sync thread 4698 ... [ 69.019877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.027981][ T4698] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 69.045770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.067759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.089157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.100577][ T4418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.118673][ T4418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.119375][ T4702] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000003) at rIP: 0xffffffff812efd22 (__mcheck_cpu_init_clear_banks+0x112/0x1f0) [ 69.129336][ T4418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.143866][ T4702] Call Trace: [ 69.143875][ T4702] [ 69.143887][ T4702] mce_cpu_restart+0xc7/0x1a0 [ 69.143915][ T4702] smp_call_function_many_cond+0x8f0/0xd80 [ 69.143943][ T4702] ? mce_restart+0x1c0/0x1c0 [ 69.143964][ T4702] ? smp_call_function_many+0x30/0x30 [ 69.143986][ T4702] ? timer_delete_sync+0x20/0x20 [ 69.144015][ T4702] ? mce_restart+0x1c0/0x1c0 [ 69.144032][ T4702] on_each_cpu_cond_mask+0x3b/0x80 [ 69.144055][ T4702] mce_restart+0x134/0x1c0 [ 69.144074][ T4702] set_bank+0x23f/0x3a0 [ 69.144093][ T4702] ? show_bank+0x2a0/0x2a0 [ 69.159448][ T4232] Bluetooth: hci5: command 0x1001 tx timeout [ 69.160675][ T4702] ? sysfs_kf_write+0x183/0x2a0 [ 69.167147][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 69.171122][ T4702] ? sysfs_kf_read+0x350/0x350 [ 69.171142][ T4702] kernfs_fop_write_iter+0x3a8/0x500 [ 69.171168][ T4702] vfs_write+0x748/0xd70 [ 69.171195][ T4702] ? file_end_write+0x250/0x250 [ 69.171230][ T4702] ? mutex_lock_nested+0x17/0x20 [ 69.171248][ T4702] ? __fdget_pos+0x2bf/0x370 [ 69.181246][ T4418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.186086][ T4702] ? ksys_write+0x70/0x260 [ 69.186112][ T4702] ksys_write+0x153/0x260 [ 69.186133][ T4702] ? __ia32_sys_read+0x80/0x80 [ 69.193874][ T4418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.195801][ T4702] ? lockdep_hardirqs_on+0x94/0x140 [ 69.195831][ T4702] do_syscall_64+0x4c/0xa0 [ 69.202436][ T4418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.204366][ T4702] ? clear_bhb_loop+0x30/0x80 [ 69.204389][ T4702] ? clear_bhb_loop+0x30/0x80 [ 69.208853][ T4418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.214749][ T4702] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.214771][ T4702] RIP: 0033:0x7fd7e6bca1d9 [ 69.214787][ T4702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.214801][ T4702] RSP: 002b:00007fd7e4e22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.214821][ T4702] RAX: ffffffffffffffda RBX: 00007fd7e6e51fa0 RCX: 00007fd7e6bca1d9 [ 69.214834][ T4702] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000003 [ 69.214845][ T4702] RBP: 00007fd7e6c61888 R08: 0000000000000000 R09: 0000000000000000 [ 69.214857][ T4702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.214868][ T4702] R13: 00007fd7e6e52038 R14: 00007fd7e6e51fa0 R15: 00007ffeb5764508 [ 69.214895][ T4702] [ 69.229648][ T4418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.423746][ T4418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.449529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.478333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.501655][ T4418] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.526477][ T4418] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.566111][ T4418] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.595805][ T4418] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.639300][ T4715] jffs2: notice: (4715) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 69.654743][ T4717] ubi16: attaching mtd0 [ 69.672086][ T4717] ubi16 error: ubi_attach_mtd_dev: bad VID header (1048576) or data offsets (1048640) [ 69.749806][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.770700][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.782678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.804618][ T4261] tipc: Node number set to 1 [ 69.875860][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.908217][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.924113][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.962873][ T4724] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 69.979569][ T4724] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 69.979751][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 70.060942][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.60'. [ 70.099524][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.60'. [ 70.138955][ T4731] device wlan0 entered promiscuous mode [ 70.274797][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 70.357790][ T13] usb 1-1: USB disconnect, device number 2 [ 70.399715][ T4232] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 70.415843][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.435888][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.459322][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.483213][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.509832][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.519775][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.544374][ T4175] Bluetooth: hci3: command 0x0419 tx timeout [ 70.649580][ T2302] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 70.799574][ T4232] usb 2-1: usb_control_msg returned -32 [ 70.805885][ T4232] usbtmc 2-1:16.0: can't read capabilities [ 71.019714][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.070383][ T2302] usb 6-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 71.086913][ T2302] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.142967][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.149313][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.189787][ T4813] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 71.219495][ T4232] Bluetooth: hci5: command 0x1009 tx timeout [ 71.299831][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 71.320286][ T2302] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.333992][ T2302] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 71.344416][ T2302] usb 6-1: Product: syz [ 71.348687][ T2302] usb 6-1: Manufacturer: syz [ 71.356881][ T2302] usb 6-1: SerialNumber: syz [ 71.369264][ T2302] usb 6-1: config 0 descriptor?? [ 71.393624][ T4261] usb 2-1: USB disconnect, device number 3 [ 71.429794][ T13] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 71.448516][ T13] usb 1-1: config 179 has no interface number 0 [ 71.464347][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 71.483052][ T2302] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 71.490151][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 71.503703][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 71.515938][ T13] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 71.538237][ T13] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 71.541421][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.556568][ T13] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 71.582362][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.619826][ T4773] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 71.650193][ T4601] usb 6-1: USB disconnect, device number 2 [ 71.875115][ T4261] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 72.042869][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 72.073386][ T4261] usb 1-1: USB disconnect, device number 3 [ 72.079459][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 72.088310][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 72.099909][ T4261] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 72.210072][ T4872] printk: console [ttyS0] disabled [ 72.217272][ T4872] printk: console [ttyS0] enabled [ 72.373657][ T4891] FAULT_INJECTION: forcing a failure. [ 72.373657][ T4891] name failslab, interval 1, probability 0, space 0, times 0 [ 72.401987][ T4891] CPU: 1 PID: 4891 Comm: syz.4.191 Not tainted syzkaller #0 [ 72.409311][ T4891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.419386][ T4891] Call Trace: [ 72.422678][ T4891] [ 72.425618][ T4891] dump_stack_lvl+0x188/0x250 [ 72.430415][ T4891] ? show_regs_print_info+0x20/0x20 [ 72.435634][ T4891] ? load_image+0x410/0x410 [ 72.440152][ T4891] ? __might_sleep+0xf0/0xf0 [ 72.444756][ T4891] ? __lock_acquire+0x7d40/0x7d40 [ 72.449797][ T4891] should_fail+0x383/0x4b0 [ 72.454230][ T4891] should_failslab+0x5/0x20 [ 72.458744][ T4891] slab_pre_alloc_hook+0x51/0xc0 [ 72.463698][ T4891] kmem_cache_alloc_trace+0x47/0x290 [ 72.469004][ T4891] ? __list_lru_init+0x535/0xac0 [ 72.473953][ T4891] __list_lru_init+0x535/0xac0 [ 72.478722][ T4891] alloc_super+0x787/0x970 [ 72.483174][ T4891] ? kill_litter_super+0xa0/0xa0 [ 72.488106][ T4891] sget_fc+0x2d4/0x6f0 [ 72.492167][ T4891] ? kill_litter_super+0xa0/0xa0 [ 72.497096][ T4891] ? bpf_get_tree+0x20/0x20 [ 72.501598][ T4891] get_tree_nodev+0x26/0x160 [ 72.506199][ T4891] vfs_get_tree+0x88/0x270 [ 72.510609][ T4891] do_new_mount+0x247/0xa40 [ 72.515107][ T4891] __se_sys_mount+0x2e3/0x3d0 [ 72.519778][ T4891] ? __x64_sys_mount+0xc0/0xc0 [ 72.524538][ T4891] ? lockdep_hardirqs_on+0x94/0x140 [ 72.529727][ T4891] ? __x64_sys_mount+0x1c/0xc0 [ 72.534482][ T4891] do_syscall_64+0x4c/0xa0 [ 72.538890][ T4891] ? clear_bhb_loop+0x30/0x80 [ 72.543559][ T4891] ? clear_bhb_loop+0x30/0x80 [ 72.548228][ T4891] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.554111][ T4891] RIP: 0033:0x7fd7e6bca1d9 [ 72.558520][ T4891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.578120][ T4891] RSP: 002b:00007fd7e4e22028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.586536][ T4891] RAX: ffffffffffffffda RBX: 00007fd7e6e51fa0 RCX: 00007fd7e6bca1d9 [ 72.594504][ T4891] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 72.602468][ T4891] RBP: 00007fd7e6c61888 R08: 0000000000000000 R09: 0000000000000000 [ 72.610434][ T4891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.618393][ T4891] R13: 00007fd7e6e52038 R14: 00007fd7e6e51fa0 R15: 00007ffeb5764508 [ 72.626374][ T4891] [ 72.629514][ C1] vkms_vblank_simulate: vblank timer overrun [ 72.686343][ T4903] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.195:4903 [ 73.176858][ T4950] comedi comedi1: pcl730: I/O port conflict (0x140,4) [ 73.310442][ T4964] binder: 4963:4964 ioctl c018620c 200000000440 returned -22 [ 73.869493][ T2302] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.257407][ T4993] capability: warning: `syz.4.233' uses 32-bit capabilities (legacy support in use) [ 74.289646][ T2302] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.308423][ T2302] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 74.338904][ T2302] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.339954][ T4232] Bluetooth: hci3: command 0x0000 tx timeout [ 74.360592][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 74.369510][ T2302] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 74.409435][ T2302] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 74.529568][ T4232] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 74.571852][ T2302] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.596524][ T2302] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.639530][ T2302] usb 6-1: Product: syz [ 74.643754][ T2302] usb 6-1: Manufacturer: syz [ 74.701834][ T4997] syz.4.235 uses obsolete (PF_INET,SOCK_PACKET) [ 74.731030][ T2302] cdc_wdm 6-1:1.0: skipping garbage [ 74.736258][ T2302] cdc_wdm 6-1:1.0: skipping garbage [ 74.756537][ T2302] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 74.764635][ T2302] cdc_wdm 6-1:1.0: Unknown control protocol [ 74.990173][ T5012] netlink: 'syz.1.242': attribute type 10 has an invalid length. [ 75.075791][ T5012] team0 (unregistering): Port device team_slave_0 removed [ 75.120394][ T5012] team0 (unregistering): Port device team_slave_1 removed [ 75.135815][ T2302] usb 6-1: USB disconnect, device number 3 [ 76.049116][ T5066] FAULT_INJECTION: forcing a failure. [ 76.049116][ T5066] name failslab, interval 1, probability 0, space 0, times 0 [ 76.086092][ T5066] CPU: 0 PID: 5066 Comm: syz.5.267 Not tainted syzkaller #0 [ 76.093416][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.103465][ T5066] Call Trace: [ 76.106752][ T5066] [ 76.109670][ T5066] dump_stack_lvl+0x188/0x250 [ 76.114341][ T5066] ? show_regs_print_info+0x20/0x20 [ 76.119525][ T5066] ? load_image+0x410/0x410 [ 76.124017][ T5066] ? __might_sleep+0xf0/0xf0 [ 76.128597][ T5066] ? __lock_acquire+0x7d40/0x7d40 [ 76.133616][ T5066] should_fail+0x383/0x4b0 [ 76.138028][ T5066] should_failslab+0x5/0x20 [ 76.142518][ T5066] slab_pre_alloc_hook+0x51/0xc0 [ 76.147449][ T5066] kmem_cache_alloc_trace+0x47/0x290 [ 76.152720][ T5066] ? __list_lru_init+0x535/0xac0 [ 76.157646][ T5066] __list_lru_init+0x535/0xac0 [ 76.162407][ T5066] alloc_super+0x787/0x970 [ 76.166816][ T5066] ? kill_litter_super+0xa0/0xa0 [ 76.171743][ T5066] sget_fc+0x2d4/0x6f0 [ 76.175798][ T5066] ? kill_litter_super+0xa0/0xa0 [ 76.180719][ T5066] ? mqueue_get_tree+0xe0/0xe0 [ 76.185475][ T5066] get_tree_nodev+0x26/0x160 [ 76.190057][ T5066] vfs_get_tree+0x88/0x270 [ 76.194463][ T5066] fc_mount+0x18/0xa0 [ 76.198439][ T5066] mq_init_ns+0x39d/0x510 [ 76.202758][ T5066] copy_ipcs+0x2ea/0x4b0 [ 76.206989][ T5066] create_new_namespaces+0x212/0x700 [ 76.212272][ T5066] unshare_nsproxy_namespaces+0x116/0x160 [ 76.217979][ T5066] ksys_unshare+0x4f6/0x8e0 [ 76.222471][ T5066] ? __lock_acquire+0x7d40/0x7d40 [ 76.227487][ T5066] ? sighand_ctor+0x40/0x40 [ 76.231977][ T5066] ? lock_chain_count+0x20/0x20 [ 76.236820][ T5066] ? syscall_enter_from_user_mode+0x21/0x70 [ 76.242704][ T5066] __x64_sys_unshare+0x34/0x40 [ 76.247456][ T5066] do_syscall_64+0x4c/0xa0 [ 76.251904][ T5066] ? clear_bhb_loop+0x30/0x80 [ 76.256568][ T5066] ? clear_bhb_loop+0x30/0x80 [ 76.261233][ T5066] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.267115][ T5066] RIP: 0033:0x7fd80f4571d9 [ 76.271520][ T5066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.291114][ T5066] RSP: 002b:00007fd80d6af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 76.299519][ T5066] RAX: ffffffffffffffda RBX: 00007fd80f6defa0 RCX: 00007fd80f4571d9 [ 76.307484][ T5066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 76.315441][ T5066] RBP: 00007fd80f4ee888 R08: 0000000000000000 R09: 0000000000000000 [ 76.323397][ T5066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.331354][ T5066] R13: 00007fd80f6df038 R14: 00007fd80f6defa0 R15: 00007fffb66c31b8 [ 76.339325][ T5066] [ 76.622659][ T5089] ima: policy update failed [ 76.661357][ T25] audit: type=1802 audit(1791785280.212:2): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.277" res=0 errno=0 [ 76.738994][ T5097] dlm: no locking on control device [ 76.919518][ T5109] program syz.0.285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.938187][ T5106] FAULT_INJECTION: forcing a failure. [ 76.938187][ T5106] name failslab, interval 1, probability 0, space 0, times 0 [ 76.951189][ T5106] CPU: 1 PID: 5106 Comm: syz.5.281 Not tainted syzkaller #0 [ 76.958464][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.968500][ T5106] Call Trace: [ 76.971764][ T5106] [ 76.974678][ T5106] dump_stack_lvl+0x188/0x250 [ 76.979343][ T5106] ? show_regs_print_info+0x20/0x20 [ 76.984528][ T5106] ? load_image+0x410/0x410 [ 76.989024][ T5106] should_fail+0x383/0x4b0 [ 76.993434][ T5106] should_failslab+0x5/0x20 [ 76.997928][ T5106] slab_pre_alloc_hook+0x51/0xc0 [ 77.002850][ T5106] ? __sigqueue_alloc+0x3a6/0x4b0 [ 77.007857][ T5106] kmem_cache_alloc+0x3d/0x280 [ 77.012606][ T5106] __sigqueue_alloc+0x3a6/0x4b0 [ 77.017442][ T5106] __send_signal+0x223/0xd40 [ 77.022016][ T5106] do_notify_parent+0xa90/0xc90 [ 77.026851][ T5106] ? trace_signal_generate+0x1c0/0x1c0 [ 77.032296][ T5106] ? __lock_acquire+0x7d40/0x7d40 [ 77.037317][ T5106] release_task+0x1190/0x15f0 [ 77.041984][ T5106] ? do_exit+0x14e2/0x2110 [ 77.046383][ T5106] ? delayed_put_task_struct+0x260/0x260 [ 77.052002][ T5106] ? _raw_write_lock_irq+0xb7/0xf0 [ 77.057097][ T5106] ? _raw_write_lock_irqsave+0x100/0x100 [ 77.062713][ T5106] ? _raw_write_unlock_irq+0x1f/0x40 [ 77.067980][ T5106] ? lockdep_hardirqs_on+0x94/0x140 [ 77.073165][ T5106] do_exit+0x14e2/0x2110 [ 77.077392][ T5106] ? put_task_struct+0x80/0x80 [ 77.082157][ T5106] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.088125][ T5106] ? _raw_spin_lock_irq+0xb7/0xf0 [ 77.093135][ T5106] do_group_exit+0x12c/0x2f0 [ 77.097709][ T5106] ? lockdep_hardirqs_on+0x94/0x140 [ 77.102890][ T5106] get_signal+0x7eb/0x12e0 [ 77.107302][ T5106] arch_do_signal_or_restart+0xe6/0x12a0 [ 77.112932][ T5106] ? futex_exit_release+0x1c0/0x1c0 [ 77.118115][ T5106] ? get_sigframe_size+0x10/0x10 [ 77.123037][ T5106] ? __context_tracking_exit+0x4c/0x80 [ 77.128482][ T5106] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.134447][ T5106] ? exit_to_user_mode_loop+0x3b/0x130 [ 77.139890][ T5106] exit_to_user_mode_loop+0x9e/0x130 [ 77.145157][ T5106] exit_to_user_mode_prepare+0xee/0x180 [ 77.150684][ T5106] syscall_exit_to_user_mode+0x16/0x40 [ 77.156126][ T5106] do_syscall_64+0x58/0xa0 [ 77.160522][ T5106] ? clear_bhb_loop+0x30/0x80 [ 77.165182][ T5106] ? clear_bhb_loop+0x30/0x80 [ 77.169844][ T5106] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.175719][ T5106] RIP: 0033:0x7fd80f4571d9 [ 77.180116][ T5106] Code: Unable to access opcode bytes at RIP 0x7fd80f4571af. [ 77.187459][ T5106] RSP: 002b:00007fd80d6af0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.195864][ T5106] RAX: fffffffffffffe00 RBX: 00007fd80f6defa8 RCX: 00007fd80f4571d9 [ 77.203818][ T5106] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd80f6defa8 [ 77.211770][ T5106] RBP: 00007fd80f6defa0 R08: 0000000000000000 R09: 0000000000000000 [ 77.219725][ T5106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.227678][ T5106] R13: 00007fd80f6df038 R14: 00007fffb66c30d0 R15: 00007fffb66c31b8 [ 77.235641][ T5106] [ 77.238713][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.534446][ T4261] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.809734][ T4261] usb 4-1: Using ep0 maxpacket: 8 [ 77.985075][ T4261] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.999670][ T4261] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.103913][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.120442][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.137634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.254909][ T4261] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 78.269537][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.300575][ T4261] usb 4-1: Product: syz [ 78.304760][ T4261] usb 4-1: Manufacturer: syz [ 78.309362][ T4261] usb 4-1: SerialNumber: syz [ 78.332526][ T4261] usb 4-1: config 0 descriptor?? [ 78.391993][ T5160] block nbd4: shutting down sockets [ 78.488145][ T25] audit: type=1800 audit(1791785282.042:3): pid=5167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.303" name=03 dev="sda1" ino=2050 res=0 errno=0 [ 78.573746][ T21] usb 4-1: USB disconnect, device number 2 [ 78.739493][ T4232] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.896163][ T5190] input: syz0 as /devices/virtual/input/input10 [ 78.989594][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 79.109774][ T4232] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 79.129131][ T4232] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 79.151353][ T4232] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 79.191551][ T4232] usb 1-1: config 250 has no interface number 0 [ 79.208538][ T4232] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 79.233956][ T4232] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 79.278655][ T4232] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 79.308097][ T5217] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 79.315199][ T5220] FAULT_INJECTION: forcing a failure. [ 79.315199][ T5220] name failslab, interval 1, probability 0, space 0, times 0 [ 79.326645][ T5217] overlayfs: missing 'lowerdir' [ 79.338307][ T4232] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 79.353988][ T5222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.319'. [ 79.358776][ T5220] CPU: 1 PID: 5220 Comm: syz.1.317 Not tainted syzkaller #0 [ 79.370305][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.380364][ T5220] Call Trace: [ 79.383646][ T5220] [ 79.386584][ T5220] dump_stack_lvl+0x188/0x250 [ 79.391281][ T5220] ? show_regs_print_info+0x20/0x20 [ 79.396490][ T5220] ? load_image+0x410/0x410 [ 79.401005][ T5220] ? __might_sleep+0xf0/0xf0 [ 79.405603][ T5220] ? __lock_acquire+0x7d40/0x7d40 [ 79.410645][ T5220] should_fail+0x383/0x4b0 [ 79.415079][ T5220] should_failslab+0x5/0x20 [ 79.419588][ T5220] slab_pre_alloc_hook+0x51/0xc0 [ 79.424541][ T5220] kmem_cache_alloc_trace+0x47/0x290 [ 79.429835][ T5220] ? assoc_array_insert+0x3da/0x2e70 [ 79.435139][ T5220] assoc_array_insert+0x3da/0x2e70 [ 79.440278][ T5220] ? key_payload_reserve+0x3b0/0x3b0 [ 79.445571][ T5220] ? do_raw_spin_unlock+0x11d/0x230 [ 79.450779][ T5220] ? rwsem_write_trylock+0x135/0x1c0 [ 79.456086][ T5220] __key_link_begin+0xd2/0x1e0 [ 79.460864][ T5220] key_link+0xd6/0x350 [ 79.464948][ T5220] call_sbin_request_key+0x437/0xc70 [ 79.470253][ T5220] ? rcu_lock_release+0x20/0x20 [ 79.475147][ T5220] ? request_key_auth_rcu_disposal+0x20/0x20 [ 79.481148][ T5220] ? up_write+0x1b6/0x410 [ 79.485499][ T5220] request_key_and_link+0xd98/0x13b0 [ 79.490804][ T5220] ? complete_request_key+0xa0/0xa0 [ 79.496017][ T5220] ? __might_sleep+0xf0/0xf0 [ 79.500616][ T5220] ? restrict_link_reject+0x10/0x10 [ 79.505824][ T5220] ? keyring_search_rcu+0x280/0x280 [ 79.511038][ T5220] ? down_read+0x1aa/0x2e0 [ 79.515468][ T5220] __se_sys_request_key+0x293/0x350 [ 79.520679][ T5220] ? __x64_sys_request_key+0xa0/0xa0 [ 79.525981][ T5220] ? lockdep_hardirqs_on+0x94/0x140 [ 79.531202][ T5220] do_syscall_64+0x4c/0xa0 [ 79.535627][ T5220] ? clear_bhb_loop+0x30/0x80 [ 79.540314][ T5220] ? clear_bhb_loop+0x30/0x80 [ 79.545006][ T5220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.550905][ T5220] RIP: 0033:0x7f9a7d6171d9 [ 79.555332][ T5220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.574944][ T5220] RSP: 002b:00007f9a7b86f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 79.583370][ T5220] RAX: ffffffffffffffda RBX: 00007f9a7d89efa0 RCX: 00007f9a7d6171d9 [ 79.591351][ T5220] RDX: 00002000000000c0 RSI: 0000200000001ffb RDI: 0000200000000040 [ 79.599334][ T5220] RBP: 00007f9a7d6ae888 R08: 0000000000000000 R09: 0000000000000000 [ 79.607308][ T5220] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 79.615281][ T5220] R13: 00007f9a7d89f038 R14: 00007f9a7d89efa0 R15: 00007ffcb790bd98 [ 79.623278][ T5220] [ 79.626390][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.634344][ T4232] usb 1-1: config 250 interface 228 has no altsetting 0 [ 79.759737][ T4232] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 79.768851][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 79.789286][ T4232] usb 1-1: Product: syz [ 79.812842][ T4232] usb 1-1: SerialNumber: syz [ 79.880664][ T4232] hub 1-1:250.228: bad descriptor, ignoring hub [ 79.895321][ T4232] hub: probe of 1-1:250.228 failed with error -5 [ 80.102804][ T4232] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 80.122896][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.192068][ T5266] binder: 5262:5266 ioctl c0306201 0 returned -14 [ 80.221241][ T5269] netlink: 165 bytes leftover after parsing attributes in process `syz.3.340'. [ 80.449474][ C1] usblp0: nonzero read bulk status received: -71 [ 80.479528][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 80.529838][ T13] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.564286][ T21] usb 1-1: USB disconnect, device number 5 [ 80.639783][ T13] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.760326][ T5165] usblp0: removed [ 80.809763][ T13] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 80.823826][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.856375][ T13] usb 5-1: Product: syz [ 80.859807][ T4232] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.869425][ T13] usb 5-1: Manufacturer: syz [ 80.873366][ T4232] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 80.877844][ T13] usb 5-1: SerialNumber: syz [ 80.894695][ T4232] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.920028][ T4232] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 80.961051][ T13] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 80.968475][ T4232] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 80.985564][ T13] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 81.016351][ T13] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 81.058201][ T21] sony 0005:054C:03D5.0001: UNIQ does not contain a MAC address; duplicate check skipped [ 81.069729][ T5307] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 81.084852][ T21] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0001/input/input11 [ 81.114236][ T5314] ubi0: attaching mtd0 [ 81.121385][ T5314] ubi0: scanning is finished [ 81.127099][ T5314] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 81.134500][ T4232] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.160388][ T21] sony 0005:054C:03D5.0001: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 81.174400][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.193274][ T5314] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 81.194185][ T4232] usb 2-1: Product: syz [ 81.207676][ T4232] usb 2-1: Manufacturer: syz [ 81.250436][ T4232] cdc_wdm 2-1:1.0: skipping garbage [ 81.255676][ T4232] cdc_wdm 2-1:1.0: skipping garbage [ 81.294116][ T4232] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 81.334447][ T4232] cdc_wdm 2-1:1.0: Unknown control protocol [ 81.384057][ T1107] cfg80211: failed to load regulatory.db [ 81.417979][ T5320] fido_id[5320]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.587983][ T5340] device syzkaller0 entered promiscuous mode [ 81.588036][ T5337] FAULT_INJECTION: forcing a failure. [ 81.588036][ T5337] name failslab, interval 1, probability 0, space 0, times 0 [ 81.613858][ T5337] CPU: 0 PID: 5337 Comm: syz.3.362 Not tainted syzkaller #0 [ 81.621180][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.631245][ T5337] Call Trace: [ 81.634531][ T5337] [ 81.637467][ T5337] dump_stack_lvl+0x188/0x250 [ 81.642160][ T5337] ? show_regs_print_info+0x20/0x20 [ 81.647370][ T5337] ? load_image+0x410/0x410 [ 81.651884][ T5337] ? __might_sleep+0xf0/0xf0 [ 81.656484][ T5337] ? __lock_acquire+0x7d40/0x7d40 [ 81.661520][ T5337] ? __lock_acquire+0x7d40/0x7d40 [ 81.666560][ T5337] should_fail+0x383/0x4b0 [ 81.670990][ T5337] should_failslab+0x5/0x20 [ 81.675499][ T5337] slab_pre_alloc_hook+0x51/0xc0 [ 81.680450][ T5337] ? __sys_setsockopt+0x2bf/0x3d0 [ 81.685486][ T5337] __kmalloc_track_caller+0x69/0x330 [ 81.690777][ T5337] ? __sys_setsockopt+0x2bf/0x3d0 [ 81.695817][ T5337] sctp_setsockopt+0x7d/0xf80 [ 81.700504][ T5337] ? sock_common_recvmsg+0x1c0/0x1c0 [ 81.705796][ T5337] __sys_setsockopt+0x2bf/0x3d0 [ 81.710658][ T5337] __x64_sys_setsockopt+0xb1/0xc0 [ 81.715697][ T5337] do_syscall_64+0x4c/0xa0 [ 81.720120][ T5337] ? clear_bhb_loop+0x30/0x80 [ 81.724807][ T5337] ? clear_bhb_loop+0x30/0x80 [ 81.727729][ T1107] usb 2-1: USB disconnect, device number 4 [ 81.729494][ T5337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.729519][ T5337] RIP: 0033:0x7f23158b21d9 [ 81.729536][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.729551][ T5337] RSP: 002b:00007f2313b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.729570][ T5337] RAX: ffffffffffffffda RBX: 00007f2315b39fa0 RCX: 00007f23158b21d9 [ 81.729583][ T5337] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 81.729594][ T5337] RBP: 00007f2315949888 R08: 0000000000000009 R09: 0000000000000000 [ 81.729606][ T5337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.729617][ T5337] R13: 00007f2315b3a038 R14: 00007f2315b39fa0 R15: 00007fff3a1ae8e8 [ 81.729640][ T5337] [ 81.729648][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 81.730698][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 81.730857][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 81.730871][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 81.766755][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.097382][ T5365] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 82.137012][ T5365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.155638][ T5365] bond1: (slave geneve2): making interface the new active one [ 82.165504][ T5365] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 82.175013][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 82.192272][ T5365] syz.3.369 (5365) used greatest stack depth: 20112 bytes left [ 82.207749][ T5376] Cannot find set identified by id 0 to match [ 82.273258][ T5382] Unsupported ieee802154 address type: 0 [ 82.286351][ T5384] netlink: 52 bytes leftover after parsing attributes in process `syz.0.379'. [ 82.377747][ T1201] block nbd0: Attempted send on invalid socket [ 82.384773][ T1201] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.398348][ T1201] block nbd0: Attempted send on invalid socket [ 82.404575][ T1201] blk_update_request: I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.407477][ T5391] FAULT_INJECTION: forcing a failure. [ 82.407477][ T5391] name failslab, interval 1, probability 0, space 0, times 0 [ 82.415652][ T5392] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 82.416072][ T1201] block nbd0: Attempted send on invalid socket [ 82.446014][ T1201] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.457199][ T5392] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 82.467161][ T5392] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 82.475795][ T5392] UDF-fs: Scanning with blocksize 512 failed [ 82.482655][ T1201] block nbd0: Attempted send on invalid socket [ 82.488849][ T1201] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.500089][ T1201] block nbd0: Attempted send on invalid socket [ 82.506284][ T1201] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.517389][ T5392] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 82.532502][ T150] block nbd0: Attempted send on invalid socket [ 82.538721][ T150] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.540608][ T5391] CPU: 1 PID: 5391 Comm: syz.3.383 Not tainted syzkaller #0 [ 82.554220][ T5392] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 82.557006][ T5391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.557019][ T5391] Call Trace: [ 82.557026][ T5391] [ 82.557032][ T5391] dump_stack_lvl+0x188/0x250 [ 82.587402][ T5391] ? show_regs_print_info+0x20/0x20 [ 82.592596][ T5391] ? load_image+0x410/0x410 [ 82.597093][ T5391] ? __lock_acquire+0x7d40/0x7d40 [ 82.602112][ T5391] should_fail+0x383/0x4b0 [ 82.606527][ T5391] should_failslab+0x5/0x20 [ 82.611019][ T5391] slab_pre_alloc_hook+0x51/0xc0 [ 82.615946][ T5391] ? dup_fd+0x54/0xc70 [ 82.620004][ T5391] kmem_cache_alloc+0x3d/0x280 [ 82.624761][ T5391] dup_fd+0x54/0xc70 [ 82.628653][ T5391] ? apparmor_task_alloc+0x7c/0x230 [ 82.633867][ T5391] ? memcpy+0x3c/0x60 [ 82.637844][ T5391] ? apparmor_task_alloc+0x1b9/0x230 [ 82.643122][ T5391] copy_files+0x72/0xe0 [ 82.647275][ T5391] copy_process+0x1666/0x3e70 [ 82.651961][ T5391] ? __pidfd_prepare+0x140/0x140 [ 82.656892][ T5391] ? verify_lock_unused+0x140/0x140 [ 82.662088][ T5391] kernel_clone+0x23f/0x990 [ 82.666584][ T5391] ? create_io_thread+0x180/0x180 [ 82.671610][ T5391] __x64_sys_clone+0x19a/0x210 [ 82.676365][ T5391] ? __ia32_sys_vfork+0x130/0x130 [ 82.681392][ T5391] ? lockdep_hardirqs_on+0x94/0x140 [ 82.686587][ T5391] do_syscall_64+0x4c/0xa0 [ 82.690991][ T5391] ? clear_bhb_loop+0x30/0x80 [ 82.695659][ T5391] ? clear_bhb_loop+0x30/0x80 [ 82.700323][ T5391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.706204][ T5391] RIP: 0033:0x7f23158b21d9 [ 82.710607][ T5391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.730196][ T5391] RSP: 002b:00007f2313b09fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 82.738596][ T5391] RAX: ffffffffffffffda RBX: 00007f2315b39fa0 RCX: 00007f23158b21d9 [ 82.746557][ T5391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.754516][ T5391] RBP: 00007f2315949888 R08: 0000000000000000 R09: 0000000000000000 [ 82.762476][ T5391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.770429][ T5391] R13: 00007f2315b3a038 R14: 00007f2315b39fa0 R15: 00007fff3a1ae8e8 [ 82.778401][ T5391] [ 82.781424][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.804529][ T5392] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 82.815509][ T5392] UDF-fs: Scanning with blocksize 1024 failed [ 82.824119][ T1201] block nbd0: Attempted send on invalid socket [ 82.830667][ T1201] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.850950][ T150] block nbd0: Attempted send on invalid socket [ 82.857179][ T150] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.871812][ T5402] dlm: dev_write: no op 0 0 [ 82.876445][ T5392] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 82.900021][ T150] block nbd0: Attempted send on invalid socket [ 82.906233][ T150] blk_update_request: I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.921043][ T5392] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 82.932285][ T5392] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 82.939898][ T5392] UDF-fs: Scanning with blocksize 2048 failed [ 82.946639][ T150] block nbd0: Attempted send on invalid socket [ 82.952911][ T150] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 82.964211][ T5392] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 82.998094][ T5392] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 83.008011][ T5392] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 83.023401][ T5392] UDF-fs: Scanning with blocksize 4096 failed [ 83.032824][ T5392] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 83.212519][ T5425] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 83.356037][ T5445] 9pnet_virtio: no channels available for device syz [ 83.539340][ T5458] netlink: 68 bytes leftover after parsing attributes in process `syz.1.406'. [ 83.829547][ T4175] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.949654][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.069572][ T4175] usb 4-1: Using ep0 maxpacket: 32 [ 84.197035][ T4175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.208231][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 84.214573][ T4175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.226081][ T4175] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.240362][ T4175] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 84.260193][ T4175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.284947][ T4175] usb 4-1: config 0 descriptor?? [ 84.379543][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.474607][ T21] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 84.494709][ T21] usb 2-1: config 0 has no interface number 0 [ 84.514899][ T21] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 84.538012][ T21] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 84.548438][ T21] usb 2-1: config 0 interface 88 has no altsetting 0 [ 84.671307][ T5240] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 84.714971][ T5240] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 84.751872][ T26] usb 5-1: USB disconnect, device number 2 [ 84.777648][ T26] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 84.801961][ T21] usb 2-1: string descriptor 0 read error: -22 [ 84.808215][ T21] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 84.819671][ T4261] Bluetooth: hci5: command 0x1003 tx timeout [ 84.824529][ T26] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 84.825808][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 84.837005][ T4175] usbhid 4-1:0.0: can't add hid device: -71 [ 84.856023][ T4175] usbhid: probe of 4-1:0.0 failed with error -71 [ 84.862699][ T21] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 84.874901][ T26] ti_usb_3410_5052 5-1:2.0: device disconnected [ 84.893553][ T4175] usb 4-1: USB disconnect, device number 3 [ 84.907857][ T21] usb 2-1: config 0 descriptor?? [ 84.976104][ T21] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input13 [ 85.036266][ T5570] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 85.086125][ T4176] udevd[4176]: Error opening device "/dev/input/event4": Input/output error [ 85.113933][ T5570] bond0: option slaves: unable to set because the bond device is up [ 85.125068][ T4176] udevd[4176]: Unable to EVIOCGABS device "/dev/input/event4" [ 85.138296][ T4176] udevd[4176]: Unable to EVIOCGABS device "/dev/input/event4" [ 85.179089][ T4175] usb 2-1: USB disconnect, device number 5 [ 85.456517][ T5609] FAULT_INJECTION: forcing a failure. [ 85.456517][ T5609] name failslab, interval 1, probability 0, space 0, times 0 [ 85.471461][ T5609] CPU: 0 PID: 5609 Comm: syz.4.436 Not tainted syzkaller #0 [ 85.478770][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.488827][ T5609] Call Trace: [ 85.492113][ T5609] [ 85.495050][ T5609] dump_stack_lvl+0x188/0x250 [ 85.499747][ T5609] ? show_regs_print_info+0x20/0x20 [ 85.504958][ T5609] ? load_image+0x410/0x410 [ 85.509474][ T5609] ? __lock_acquire+0x7d40/0x7d40 [ 85.514516][ T5609] should_fail+0x383/0x4b0 [ 85.518952][ T5609] should_failslab+0x5/0x20 [ 85.523462][ T5609] slab_pre_alloc_hook+0x51/0xc0 [ 85.528411][ T5609] kmem_cache_alloc_trace+0x47/0x290 [ 85.529474][ T26] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 85.533696][ T5609] ? fanotify_alloc_overflow_event+0x4a/0x140 [ 85.533730][ T5609] fanotify_alloc_overflow_event+0x4a/0x140 [ 85.553113][ T5609] __se_sys_fanotify_init+0x417/0x7b0 [ 85.558507][ T5609] do_syscall_64+0x4c/0xa0 [ 85.562936][ T5609] ? clear_bhb_loop+0x30/0x80 [ 85.567623][ T5609] ? clear_bhb_loop+0x30/0x80 [ 85.572314][ T5609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.578218][ T5609] RIP: 0033:0x7fd7e6bca1d9 [ 85.582641][ T5609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.602349][ T5609] RSP: 002b:00007fd7e4e22028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 85.610769][ T5609] RAX: ffffffffffffffda RBX: 00007fd7e6e51fa0 RCX: 00007fd7e6bca1d9 [ 85.618748][ T5609] RDX: 0000000000000000 RSI: 0000000000008000 RDI: 0000000000000020 [ 85.626723][ T5609] RBP: 00007fd7e6c61888 R08: 0000000000000000 R09: 0000000000000000 [ 85.634699][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.642676][ T5609] R13: 00007fd7e6e52038 R14: 00007fd7e6e51fa0 R15: 00007ffeb5764508 [ 85.650667][ T5609] [ 85.705031][ T5624] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.924678][ T26] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 85.944580][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.119701][ T26] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.133364][ T26] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 86.150647][ T26] usb 1-1: Product: syz [ 86.158017][ T26] usb 1-1: Manufacturer: syz [ 86.163850][ T26] usb 1-1: SerialNumber: syz [ 86.173705][ T26] usb 1-1: config 0 descriptor?? [ 86.219032][ T26] usb 1-1: selecting invalid altsetting 0 [ 86.359761][ T5671] MTD: Couldn't look up 'mtd0/file0': -2 [ 86.437635][ T5590] usb 1-1: selecting invalid altsetting 0 [ 86.461084][ T5590] usb 1-1: 0:0: usb_set_interface failed (-22) [ 86.481993][ T4175] usb 1-1: USB disconnect, device number 6 [ 86.687215][ T5691] FAULT_INJECTION: forcing a failure. [ 86.687215][ T5691] name failslab, interval 1, probability 0, space 0, times 0 [ 86.705069][ T5691] CPU: 0 PID: 5691 Comm: syz.3.467 Not tainted syzkaller #0 [ 86.712383][ T5691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.722463][ T5691] Call Trace: [ 86.725745][ T5691] [ 86.728677][ T5691] dump_stack_lvl+0x188/0x250 [ 86.733365][ T5691] ? show_regs_print_info+0x20/0x20 [ 86.738569][ T5691] ? load_image+0x410/0x410 [ 86.743084][ T5691] ? __might_sleep+0xf0/0xf0 [ 86.747683][ T5691] ? __lock_acquire+0x7d40/0x7d40 [ 86.752718][ T5691] should_fail+0x383/0x4b0 [ 86.757148][ T5691] should_failslab+0x5/0x20 [ 86.761654][ T5691] slab_pre_alloc_hook+0x51/0xc0 [ 86.766603][ T5691] ? __kernfs_new_node+0xe3/0x6b0 [ 86.771640][ T5691] kmem_cache_alloc+0x3d/0x280 [ 86.776413][ T5691] __kernfs_new_node+0xe3/0x6b0 [ 86.781294][ T5691] ? __lock_acquire+0x7d40/0x7d40 [ 86.786330][ T5691] ? kernfs_new_node+0x250/0x250 [ 86.791289][ T5691] ? kernfs_activate+0x1eb/0x210 [ 86.796238][ T5691] kernfs_new_node+0x148/0x250 [ 86.801015][ T5691] __kernfs_create_file+0x47/0x2e0 [ 86.806141][ T5691] sysfs_add_file_mode_ns+0x2d2/0x390 [ 86.811523][ T5691] internal_create_group+0x492/0xd00 [ 86.816822][ T5691] ? kobject_add+0x230/0x230 [ 86.821418][ T5691] ? sysfs_create_group+0x20/0x20 [ 86.826467][ T5691] sysfs_slab_add+0x16e/0x2a0 [ 86.831152][ T5691] __kmem_cache_create+0x51f/0x6c0 [ 86.836275][ T5691] kmem_cache_create_usercopy+0x186/0x310 [ 86.842005][ T5691] kmem_cache_create+0xf/0x20 [ 86.846686][ T5691] copy_pid_ns+0x436/0x8a0 [ 86.851114][ T5691] ? rcu_lock_release+0x20/0x20 [ 86.855974][ T5691] ? copy_ipcs+0x8e/0x4b0 [ 86.860315][ T5691] create_new_namespaces+0x2a6/0x700 [ 86.865621][ T5691] unshare_nsproxy_namespaces+0x116/0x160 [ 86.871352][ T5691] ksys_unshare+0x4f6/0x8e0 [ 86.875863][ T5691] ? __lock_acquire+0x7d40/0x7d40 [ 86.880910][ T5691] ? sighand_ctor+0x40/0x40 [ 86.885421][ T5691] ? lock_chain_count+0x20/0x20 [ 86.890290][ T5691] ? syscall_enter_from_user_mode+0x21/0x70 [ 86.896194][ T5691] __x64_sys_unshare+0x34/0x40 [ 86.900969][ T5691] do_syscall_64+0x4c/0xa0 [ 86.905388][ T5691] ? clear_bhb_loop+0x30/0x80 [ 86.910057][ T5691] ? clear_bhb_loop+0x30/0x80 [ 86.914733][ T5691] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.920608][ T5691] RIP: 0033:0x7f23158b21d9 [ 86.925005][ T5691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.944604][ T5691] RSP: 002b:00007f2313b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 86.953007][ T5691] RAX: ffffffffffffffda RBX: 00007f2315b39fa0 RCX: 00007f23158b21d9 [ 86.960980][ T5691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 86.968934][ T5691] RBP: 00007f2315949888 R08: 0000000000000000 R09: 0000000000000000 [ 86.976887][ T5691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.984843][ T5691] R13: 00007f2315b3a038 R14: 00007f2315b39fa0 R15: 00007fff3a1ae8e8 [ 86.992821][ T5691] [ 87.002689][ T2302] Bluetooth: hci5: command 0x1001 tx timeout [ 87.009196][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 87.017200][ T5691] kmem_cache_create_usercopy(pid_3) failed with error -12 [ 87.025613][ T5691] CPU: 0 PID: 5691 Comm: syz.3.467 Not tainted syzkaller #0 [ 87.032919][ T5691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 87.042981][ T5691] Call Trace: [ 87.046266][ T5691] [ 87.049196][ T5691] dump_stack_lvl+0x188/0x250 [ 87.053884][ T5691] ? show_regs_print_info+0x20/0x20 [ 87.059089][ T5691] ? load_image+0x410/0x410 [ 87.063599][ T5691] ? kfree+0xef/0x2a0 [ 87.067592][ T5691] kmem_cache_create_usercopy+0x28d/0x310 [ 87.073328][ T5691] kmem_cache_create+0xf/0x20 [ 87.078016][ T5691] copy_pid_ns+0x436/0x8a0 [ 87.082448][ T5691] ? rcu_lock_release+0x20/0x20 [ 87.087311][ T5691] ? copy_ipcs+0x8e/0x4b0 [ 87.091659][ T5691] create_new_namespaces+0x2a6/0x700 [ 87.096966][ T5691] unshare_nsproxy_namespaces+0x116/0x160 [ 87.102695][ T5691] ksys_unshare+0x4f6/0x8e0 [ 87.107209][ T5691] ? __lock_acquire+0x7d40/0x7d40 [ 87.112264][ T5691] ? sighand_ctor+0x40/0x40 [ 87.116776][ T5691] ? lock_chain_count+0x20/0x20 [ 87.121643][ T5691] ? syscall_enter_from_user_mode+0x21/0x70 [ 87.127552][ T5691] __x64_sys_unshare+0x34/0x40 [ 87.132323][ T5691] do_syscall_64+0x4c/0xa0 [ 87.136743][ T5691] ? clear_bhb_loop+0x30/0x80 [ 87.141427][ T5691] ? clear_bhb_loop+0x30/0x80 [ 87.146116][ T5691] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.152017][ T5691] RIP: 0033:0x7f23158b21d9 [ 87.156438][ T5691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.176047][ T5691] RSP: 002b:00007f2313b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 87.184459][ T5691] RAX: ffffffffffffffda RBX: 00007f2315b39fa0 RCX: 00007f23158b21d9 [ 87.192427][ T5691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 87.200391][ T5691] RBP: 00007f2315949888 R08: 0000000000000000 R09: 0000000000000000 [ 87.208352][ T5691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.216312][ T5691] R13: 00007f2315b3a038 R14: 00007f2315b39fa0 R15: 00007fff3a1ae8e8 [ 87.224282][ T5691] [ 87.265131][ T5697] tipc: Started in network mode [ 87.271462][ T5697] tipc: Node identity ac1414aa, cluster identity 4711 [ 87.288822][ T5697] tipc: New replicast peer: 172.20.20.187 8[ 87.313940][ T5697] tipc: Enabled bearer , priority 10 [ 87.434958][ T5718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.438531][ T5716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 87.466078][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 87.485562][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 87.498035][ T5716] netlink: 108 bytes leftover after parsing attributes in process `syz.1.479'. [ 87.509155][ T5716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 87.517491][ T25] audit: type=1326 audit(1791785291.062:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5722 comm="syz.0.482" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3e60d41d9 code=0x0 [ 87.519012][ T5716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 87.783764][ T5737] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 87.796126][ T5737] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 88.218017][ T4199] Bluetooth: Wrong link type (-22) [ 88.345274][ T13] tipc: Node number set to 2886997162 syzkaller syzkaller login: [ 88.526431][ T4199] Bluetooth: Unknown LE signaling command 0x83 [ 88.533707][ T4199] Bluetooth: Wrong link type (-22) [ 89.060555][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 89.112327][ T5780] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 89.377901][ T5793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 89.473526][ T5800] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 89.768494][ T4262] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 89.777222][ T5823] tmpfs: Unknown parameter 'usr? P6ode_hardlomit' [ 89.796708][ T4262] Bluetooth: hci6: Frame reassembly failed (-84) [ 90.155892][ T5840] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20 [ 91.631146][ T144] wlan1: Trigger new scan to find an IBSS to join [ 91.699518][ T4175] Bluetooth: hci0: command 0x0c24 tx timeout [ 91.783696][ T4175] Bluetooth: hci6: command 0x1003 tx timeout [ 91.803588][ T4203] Bluetooth: hci6: sending frame failed (-49) [ 92.416063][ T5879] binder: 5878:5879 ioctl c0306201 200000000240 returned -14 [ 92.718434][ T5891] ip_tables: iptables: counters copy to user failed while replacing table [ 93.512914][ T5902] 9pnet_virtio: no channels available for device syz [ 93.571560][ T5898] FAULT_INJECTION: forcing a failure. [ 93.571560][ T5898] name failslab, interval 1, probability 0, space 0, times 0 [ 93.589482][ T5898] CPU: 0 PID: 5898 Comm: syz.5.553 Not tainted syzkaller #0 [ 93.597516][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.608581][ T5898] Call Trace: [ 93.612188][ T5898] [ 93.615413][ T5898] dump_stack_lvl+0x188/0x250 [ 93.620564][ T5898] ? show_regs_print_info+0x20/0x20 [ 93.626288][ T5898] ? load_image+0x410/0x410 [ 93.631243][ T5898] ? __might_sleep+0xf0/0xf0 [ 93.636306][ T5898] ? __lock_acquire+0x7d40/0x7d40 [ 93.641844][ T5898] should_fail+0x383/0x4b0 [ 93.646715][ T5898] should_failslab+0x5/0x20 [ 93.651671][ T5898] slab_pre_alloc_hook+0x51/0xc0 [ 93.657098][ T5898] ? __kernfs_new_node+0xe3/0x6b0 [ 93.662622][ T5898] kmem_cache_alloc+0x3d/0x280 [ 93.667864][ T5898] __kernfs_new_node+0xe3/0x6b0 [ 93.673214][ T5898] ? kernfs_new_node+0x250/0x250 [ 93.678662][ T5898] ? sysfs_do_create_link_sd+0x75/0x110 [ 93.684775][ T5898] ? __lock_acquire+0x7d40/0x7d40 [ 93.690306][ T5898] ? do_raw_spin_lock+0x128/0x2f0 [ 93.695839][ T5898] kernfs_new_node+0x148/0x250 [ 93.701092][ T5898] kernfs_create_link+0xa3/0x200 [ 93.706521][ T5898] sysfs_do_create_link_sd+0x83/0x110 [ 93.712469][ T5898] device_add+0x6fc/0x1050 [ 93.717319][ T5898] input_register_device+0xa03/0x10c0 [ 93.723222][ T5898] ? lockdep_hardirqs_on+0x94/0x140 [ 93.728932][ T5898] psmouse_attr_set_protocol+0xb91/0x14a0 [ 93.735226][ T5898] ? psmouse_attr_show_protocol+0x70/0x70 [ 93.741527][ T5898] ? lockdep_hardirqs_on+0x94/0x140 [ 93.747235][ T5898] ? psmouse_attr_show_protocol+0x70/0x70 [ 93.753554][ T5898] psmouse_attr_set_helper+0x46a/0x880 [ 93.759557][ T5898] ? sysfs_kf_read+0x350/0x350 [ 93.764783][ T5898] kernfs_fop_write_iter+0x3a8/0x500 [ 93.770587][ T5898] vfs_write+0x748/0xd70 [ 93.775242][ T5898] ? file_end_write+0x250/0x250 [ 93.780578][ T5898] ? mutex_lock_nested+0x17/0x20 [ 93.785995][ T5898] ? __fdget_pos+0x2bf/0x370 [ 93.791025][ T5898] ? ksys_write+0x70/0x260 [ 93.795866][ T5898] ksys_write+0x153/0x260 [ 93.800611][ T5898] ? __ia32_sys_read+0x80/0x80 [ 93.805834][ T5898] ? lockdep_hardirqs_on+0x94/0x140 [ 93.811540][ T5898] do_syscall_64+0x4c/0xa0 [ 93.816378][ T5898] ? clear_bhb_loop+0x30/0x80 [ 93.821503][ T5898] ? clear_bhb_loop+0x30/0x80 [ 93.826628][ T5898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.833118][ T5898] RIP: 0033:0x7fd80f4571d9 [ 93.837958][ T5898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.859500][ T5898] RSP: 002b:00007fd80d6af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.868735][ T5898] RAX: ffffffffffffffda RBX: 00007fd80f6defa0 RCX: 00007fd80f4571d9 [ 93.877492][ T5898] RDX: 0000000000000004 RSI: 0000200000000780 RDI: 0000000000000004 [ 93.886251][ T5898] RBP: 00007fd80f4ee888 R08: 0000000000000000 R09: 0000000000000000 [ 93.895010][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.903765][ T5898] R13: 00007fd80f6df038 R14: 00007fd80f6defa0 R15: 00007fffb66c31b8 [ 93.912543][ T5898] [ 93.915919][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.918245][ T26] Bluetooth: hci6: command 0x1001 tx timeout [ 93.937409][ T4198] Bluetooth: hci6: sending frame failed (-49) [ 94.523403][ T5932] netlink: 136 bytes leftover after parsing attributes in process `syz.3.568'. [ 94.563918][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 94.661201][ T4262] wlan1: Trigger new scan to find an IBSS to join [ 95.101915][ T2302] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 95.379599][ T2302] usb 6-1: Using ep0 maxpacket: 8 [ 95.433664][ T5965] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 95.447355][ T5965] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 95.534871][ T2302] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 95.548155][ T2302] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.578828][ T2302] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.597680][ T2302] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.598921][ T5977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'. [ 95.608964][ T2302] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.640101][ T2302] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.655634][ T2302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.659323][ T5977] netlink: 'syz.3.584': attribute type 7 has an invalid length. [ 95.676193][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 95.699612][ T5977] device ifb0 entered promiscuous mode [ 95.708842][ T5977] device ifb0 left promiscuous mode [ 95.819698][ T4261] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.848388][ T5982] 9pnet_virtio: no channels available for device syz [ 95.949547][ T2302] usb 6-1: usb_control_msg returned -32 [ 95.956067][ T2302] usbtmc 6-1:16.0: can't read capabilities [ 96.025814][ T2302] Bluetooth: hci6: command 0x1009 tx timeout [ 96.069542][ T4261] usb 5-1: Using ep0 maxpacket: 8 [ 96.209643][ T4261] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 96.218766][ T4261] usb 5-1: config 179 has no interface number 0 [ 96.226082][ T4261] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 96.240197][ T4261] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 96.252775][ T4261] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.265262][ T4261] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 96.278041][ T4261] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 96.292823][ T4261] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 96.304128][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.350566][ T5972] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 96.421607][ T5988] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 96.591947][ T2302] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input16 [ 96.624212][ T26] usb 6-1: USB disconnect, device number 4 [ 96.779699][ T21] usb 5-1: USB disconnect, device number 3 [ 96.789455][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 96.798653][ T21] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 97.366056][ T6009] netlink: 'syz.4.596': attribute type 5 has an invalid length. [ 97.630994][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.645710][ T6022] binder: 6016:6022 ioctl c00c6211 200000002640 returned -22 [ 97.657420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.887109][ T6036] 9pnet_virtio: no channels available for device syz [ 97.969306][ T6040] program syz.3.609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.160958][ T6046] using random self ethernet address [ 98.167072][ T6046] using random host ethernet address [ 98.279595][ T21] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 98.509499][ T4175] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.759607][ T4175] usb 5-1: Using ep0 maxpacket: 8 [ 98.819764][ T21] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 98.840021][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.879289][ T21] usb 6-1: Product: syz [ 98.884346][ T4175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.906730][ T21] usb 6-1: Manufacturer: syz [ 98.916920][ T4175] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.937601][ T21] usb 6-1: SerialNumber: syz [ 98.948731][ T4175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.978319][ T4175] usb 5-1: config 0 descriptor?? [ 99.241803][ T4175] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 99.422813][ T21] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 99.481384][ T4189] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 99.909561][ T4189] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 99.929427][ T4189] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.114867][ T4189] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.125265][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.148867][ T4189] usb 4-1: Product: syz [ 100.157004][ T4189] usb 4-1: Manufacturer: syz [ 100.167951][ T4189] usb 4-1: SerialNumber: syz [ 100.171440][ T6063] ip_tables: iptables: counters copy to user failed while replacing table [ 100.184967][ T4189] usb 4-1: config 0 descriptor?? [ 100.261774][ T4189] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 100.317849][ T5318] udevd[5318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.439548][ T21] usb 4-1: USB disconnect, device number 4 [ 101.012515][ T6078] 9pnet_virtio: no channels available for device syz [ 101.019007][ T4261] usb 6-1: USB disconnect, device number 5 [ 101.231158][ T4261] usblp1: removed [ 101.291302][ T21] usb 5-1: USB disconnect, device number 4 [ 101.419967][ T2302] input: syz0 as /devices/virtual/misc/uhid/0003:057E:0306.0002/input/input17 [ 101.430003][ T4189] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.456955][ T2302] hid-generic 0003:057E:0306.0002: input,hidraw0: USB HID v0.03 Gamepad [syz0] on syz0 [ 101.550718][ T6095] fido_id[6095]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.709453][ T4189] usb 4-1: Using ep0 maxpacket: 32 [ 101.849815][ T4189] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 101.868700][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.638'. [ 102.051546][ T4189] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 102.073042][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 102.092143][ T4189] usb 4-1: Product: syz [ 102.102353][ T4189] usb 4-1: Manufacturer: syz [ 102.116360][ T4189] usb 4-1: SerialNumber: syz [ 102.134712][ T4189] usb 4-1: config 0 descriptor?? [ 102.179793][ T6084] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.205453][ T4189] hub 4-1:0.0: bad descriptor, ignoring hub [ 102.219436][ T4189] hub: probe of 4-1:0.0 failed with error -5 [ 102.519691][ T26] usb 4-1: USB disconnect, device number 5 [ 103.123957][ T25] audit: type=1800 audit(1791785306.682:5): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.652" name=08 dev="sda1" ino=2052 res=0 errno=0 [ 103.219129][ T6146] program syz.5.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.260483][ T6148] netlink: 'syz.5.655': attribute type 12 has an invalid length. [ 103.316708][ T6069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.859517][ T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.099597][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 104.225182][ T26] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 104.248322][ T26] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.259670][ T26] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.270848][ T26] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.285091][ T26] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.299709][ T4232] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 104.308126][ T26] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.318202][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.372599][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.399563][ T6185] chnl_net:caif_netlink_parms(): no params data found [ 104.452023][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.507213][ T6222] 9pnet_virtio: no channels available for device syz [ 104.541668][ T6185] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.552002][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.561020][ T6185] device bridge_slave_0 entered promiscuous mode [ 104.583373][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.591465][ T26] usb 2-1: GET_CAPABILITIES returned 0 [ 104.597936][ T26] usbtmc 2-1:16.0: can't read capabilities [ 104.605478][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.627523][ T6185] device bridge_slave_1 entered promiscuous mode [ 104.642764][ T25] audit: type=1800 audit(1791785308.202:6): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.682" name="idProduct" dev="configfs" ino=42224 res=0 errno=0 [ 104.661415][ T4232] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 104.702755][ T4232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.721396][ T4232] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 104.741935][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.764727][ T6235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.685'. [ 104.784121][ T6185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.801049][ T4601] usb 2-1: USB disconnect, device number 6 [ 104.809633][ T4232] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 104.825962][ T4232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.844941][ T6239] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 104.853375][ T6185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.874079][ T4232] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 104.906559][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.966042][ T6185] team0: Port device team_slave_0 added [ 104.994911][ T4232] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 105.011337][ T6185] team0: Port device team_slave_1 added [ 105.014930][ T4232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.051282][ T4232] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 105.131653][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.141055][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.171912][ T6185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.225269][ T6185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.251580][ T6185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.280558][ T6185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.293191][ T9] tipc: Disabling bearer [ 105.306016][ T9] tipc: Left network mode [ 105.319890][ T4232] usb 4-1: string descriptor 0 read error: -22 [ 105.332599][ T4232] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.343278][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.390865][ T4232] adutux 4-1:168.0: interrupt endpoints not found [ 105.444526][ T6185] device hsr_slave_0 entered promiscuous mode [ 105.491497][ T6185] device hsr_slave_1 entered promiscuous mode [ 105.509566][ T6185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.518558][ T6185] Cannot create hsr debugfs directory [ 105.619147][ T13] usb 4-1: USB disconnect, device number 6 [ 105.855918][ T6296] netlink: 34 bytes leftover after parsing attributes in process `syz.4.704'. [ 105.859021][ T6185] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 105.899973][ T4232] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.928397][ T6185] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 105.956297][ T6185] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 105.988006][ T6185] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.025749][ T26] Bluetooth: hci5: command 0x0409 tx timeout [ 106.157598][ T4203] Bluetooth: hci0: hardware error 0x03 [ 106.213512][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.248625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.265483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.269720][ T4232] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.288200][ T4232] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 106.289343][ T4262] Bluetooth: hci1: Frame reassembly failed (-84) [ 106.298307][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.318615][ T154] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 106.322834][ T6185] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.358107][ T4232] as10x_usb: device has been detected [ 106.365275][ T4232] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 106.374905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.384718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.394292][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.402130][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.406827][ T4232] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 106.431699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.445226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.455427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.466108][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.473880][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.483793][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.484808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.506132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.515473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.525927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.528578][ T4232] as10x_usb: error during firmware upload part1 [ 106.536458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.553653][ T4232] Registered device Abilis Systems DVB-Titan [ 106.576631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.593930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.609534][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.625011][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.635743][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.652378][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.661314][ T4231] Bluetooth: hci2: command 0x0401 tx timeout [ 106.682762][ T6185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.716202][ T9] device hsr_slave_0 left promiscuous mode [ 106.727609][ T9] device hsr_slave_1 left promiscuous mode [ 106.767158][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.793903][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.813246][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.840246][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.869042][ T9] device bridge_slave_1 left promiscuous mode [ 106.879789][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.882299][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.905448][ T9] device bridge_slave_0 left promiscuous mode [ 106.910723][ T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 106.912333][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.937065][ T9] device veth1_macvtap left promiscuous mode [ 106.948964][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.959642][ T9] device veth0_macvtap left promiscuous mode [ 106.959771][ T9] device veth1_vlan left promiscuous mode [ 106.959889][ T9] device veth0_vlan left promiscuous mode [ 106.978354][ T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.016191][ T13] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 107.030891][ T13] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 107.041049][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.099728][ T6320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 107.122268][ T13] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 107.142887][ T13] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 107.156072][ T13] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 107.178888][ T13] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 107.193766][ T13] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 107.205798][ T13] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 107.219243][ T13] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 107.373268][ T9] team0 (unregistering): Port device team_slave_1 removed [ 107.397720][ T9] team0 (unregistering): Port device team_slave_0 removed [ 107.419037][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.451924][ T13] usb 4-1: USB disconnect, device number 7 [ 107.477935][ T13] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 107.503757][ T13] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 107.519114][ T13] keyspan 4-1:1.0: device disconnected [ 107.543840][ T9] bond0 (unregistering): Released all slaves [ 107.667166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.693520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.711638][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.807569][ T1323] usb 2-1: USB disconnect, device number 7 [ 107.868318][ T1323] Unregistered device Abilis Systems DVB-Titan [ 107.884137][ T1323] as10x_usb: device has been disconnected [ 108.100517][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 108.231450][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.245876][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.338772][ T6185] device veth0_vlan entered promiscuous mode [ 108.349559][ T4261] Bluetooth: hci1: command 0x1003 tx timeout [ 108.356813][ T4202] Bluetooth: hci1: sending frame failed (-49) [ 108.382751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.398610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.433368][ T6185] device veth1_vlan entered promiscuous mode [ 108.449700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.466527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.495422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.558240][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.576128][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.588761][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.606150][ T6185] device veth0_macvtap entered promiscuous mode [ 108.666966][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 108.756116][ T6185] device veth1_macvtap entered promiscuous mode [ 108.798393][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.821254][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.839629][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.857790][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.869442][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.890696][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.917438][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.932342][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.967233][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.986983][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.004543][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.027022][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.043850][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.069996][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.088093][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.100832][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.117760][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.154665][ T6185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.170892][ T6185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.189137][ T6185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.202510][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.220107][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.240793][ T6185] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.275111][ T6185] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.290145][ T6185] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.302612][ T6185] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.497653][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.514321][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.538222][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.566609][ T6441] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.583681][ T3034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.615020][ T3034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.653512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.787160][ T6457] netlink: 112 bytes leftover after parsing attributes in process `syz.6.662'. [ 109.932918][ T4231] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 110.090052][ T6485] jffs2: notice: (6485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.185109][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 110.202743][ T4231] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 110.368647][ T4202] Bluetooth: hci3: link tx timeout [ 110.374738][ T4202] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.424297][ T4175] Bluetooth: hci1: command 0x1001 tx timeout [ 110.433877][ T4202] Bluetooth: hci1: sending frame failed (-49) [ 110.634545][ T6523] netlink: 96 bytes leftover after parsing attributes in process `syz.1.766'. [ 110.736915][ T4232] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 110.745464][ T6470] ceph: No mds server is up or the cluster is laggy [ 110.746893][ T6530] loop5: detected capacity change from 0 to 7 [ 110.837007][ T5318] Dev loop5: unable to read RDB block 7 [ 110.860534][ T4262] loop: Write error at byte offset 4, length 3584. [ 110.884662][ T5318] loop5: unable to read partition table [ 110.909163][ T5318] loop5: partition table beyond EOD, truncated [ 110.920808][ C1] print_req_error: 2 callbacks suppressed [ 110.920820][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 110.939636][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 110.963698][ T6544] FAULT_INJECTION: forcing a failure. [ 110.963698][ T6544] name failslab, interval 1, probability 0, space 0, times 0 [ 110.982649][ T6536] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 110.987620][ T6544] CPU: 0 PID: 6544 Comm: syz.6.772 Not tainted syzkaller #0 [ 110.999324][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.005425][ T6530] Dev loop5: unable to read RDB block 7 [ 111.010380][ T6544] Call Trace: [ 111.010390][ T6544] [ 111.010398][ T6544] dump_stack_lvl+0x188/0x250 [ 111.010424][ T6544] ? show_regs_print_info+0x20/0x20 [ 111.034109][ T6544] ? load_image+0x410/0x410 [ 111.035308][ T6536] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 111.039066][ T6544] ? __might_sleep+0xf0/0xf0 [ 111.039091][ T6544] ? __lock_acquire+0x7d40/0x7d40 [ 111.053786][ T6530] loop5: unable to read partition table [ 111.058939][ T6544] should_fail+0x383/0x4b0 [ 111.069942][ T6544] should_failslab+0x5/0x20 [ 111.074894][ T6544] slab_pre_alloc_hook+0x51/0xc0 [ 111.076508][ T6530] loop5: partition table beyond EOD, [ 111.080319][ T6544] __kmalloc+0x6b/0x340 [ 111.080339][ T6544] ? ops_init+0x8a/0x5f0 [ 111.080361][ T6544] ops_init+0x8a/0x5f0 [ 111.080386][ T6544] setup_net+0x39e/0xa10 [ 111.080405][ T6544] ? copy_net_ns+0x5b0/0x5b0 [ 111.103985][ T6530] truncated [ 111.104586][ T6544] ? copy_net_ns+0x324/0x5b0 [ 111.118030][ T6544] ? down_read_killable+0x1ce/0x340 [ 111.118704][ T6530] loop_reread_partitions: partition scan of loop5 (كWý* 4FLQk݊5) failed (rc=-5) [ 111.123746][ T6544] copy_net_ns+0x33e/0x5b0 [ 111.123772][ T6544] create_new_namespaces+0x3ce/0x700 [ 111.123803][ T6544] unshare_nsproxy_namespaces+0x116/0x160 [ 111.123825][ T6544] ksys_unshare+0x4f6/0x8e0 [ 111.123842][ T6544] ? __lock_acquire+0x7d40/0x7d40 [ 111.123869][ T6544] ? sighand_ctor+0x40/0x40 [ 111.123887][ T6544] ? lock_chain_count+0x20/0x20 [ 111.123910][ T6544] ? syscall_enter_from_user_mode+0x21/0x70 [ 111.123933][ T6544] __x64_sys_unshare+0x34/0x40 [ 111.123951][ T6544] do_syscall_64+0x4c/0xa0 [ 111.189765][ T6544] ? clear_bhb_loop+0x30/0x80 [ 111.194900][ T6544] ? clear_bhb_loop+0x30/0x80 [ 111.200056][ T6544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.206541][ T6544] RIP: 0033:0x7f86313a21d9 [ 111.211382][ T6544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.232927][ T6544] RSP: 002b:00007f862f5fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.242166][ T6544] RAX: ffffffffffffffda RBX: 00007f8631629fa0 RCX: 00007f86313a21d9 [ 111.250913][ T6544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 111.259659][ T6544] RBP: 00007f8631439888 R08: 0000000000000000 R09: 0000000000000000 [ 111.268406][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.277151][ T6544] R13: 00007f863162a038 R14: 00007f8631629fa0 R15: 00007ffe0c4cb958 [ 111.285933][ T6544] [ 111.289324][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.458450][ T6554] process 'syz.3.775' launched './file0' with NULL argv: empty string added [ 111.498825][ T4202] Bluetooth: hci3: link tx timeout [ 111.504655][ T4202] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.598598][ T13] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 111.632572][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.780'. [ 111.860818][ T4261] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 112.259518][ T4601] Bluetooth: hci5: command 0x0419 tx timeout [ 112.410610][ T4261] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 112.419677][ T4601] Bluetooth: hci3: command 0x0406 tx timeout [ 112.499669][ T4601] Bluetooth: hci1: command 0x1009 tx timeout [ 112.637534][ T6647] x_tables: eb_tables: limit.0 match: invalid size 32 (kernel) != (user) 40 [ 112.669687][ T6554] ceph: No mds server is up or the cluster is laggy [ 112.950051][ T25] audit: type=1800 audit(1791785316.502:7): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.810" name=03 dev="sda1" ino=2050 res=0 errno=0 [ 113.298070][ T4202] Bluetooth: hci3: link tx timeout [ 113.304160][ T4202] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.727917][ T6716] jffs2: notice: (6716) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 113.832309][ T6726] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.870115][ T6726] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 113.898476][ T6716] overlayfs: failed to resolve './file0': -2 [ 114.059564][ T4175] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.152164][ T6742] jffs2: notice: (6742) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 114.189379][ T6745] netlink: 68 bytes leftover after parsing attributes in process `syz.6.832'. [ 114.270350][ T6740] syz.1.829 (6740) used greatest stack depth: 18608 bytes left [ 114.299456][ T4175] usb 5-1: Using ep0 maxpacket: 8 [ 114.401161][ T6759] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 114.419792][ T4175] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.461528][ T4175] usb 5-1: config 0 has no interfaces? [ 114.483280][ T6765] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 114.596987][ T6776] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 114.619737][ T4261] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 114.669585][ T4175] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 114.687236][ T4175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.712415][ T4175] usb 5-1: Product: syz [ 114.717379][ T4175] usb 5-1: Manufacturer: syz [ 114.728754][ T4175] usb 5-1: SerialNumber: syz [ 114.749267][ T4175] usb 5-1: config 0 descriptor?? [ 114.805644][ T4198] Bluetooth: hci3: link tx timeout [ 114.812419][ T4198] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.935211][ T6794] [ 114.937802][ T6794] ====================================================== [ 114.945514][ T6794] WARNING: possible circular locking dependency detected [ 114.953238][ T6794] syzkaller #0 Not tainted [ 114.958081][ T6794] ------------------------------------------------------ [ 114.965788][ T6794] syz.3.844/6794 is trying to acquire lock: [ 114.972266][ T6794] ffff888079d3cfe0 ((work_completion)(&hdev->discov_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 114.984318][ T6794] [ 114.984318][ T6794] but task is already holding lock: [ 114.992405][ T6794] ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 114.993541][ T6723] FAULT_INJECTION: forcing a failure. [ 114.993541][ T6723] name failslab, interval 1, probability 0, space 0, times 0 [ 115.003020][ T6794] [ 115.003020][ T6794] which lock already depends on the new lock. [ 115.003020][ T6794] [ 115.003028][ T6794] [ 115.003028][ T6794] the existing dependency chain (in reverse order) is: [ 115.016834][ T6723] CPU: 1 PID: 6723 Comm: syz.4.827 Not tainted syzkaller #0 [ 115.028251][ T6794] [ 115.028251][ T6794] -> #4 ( [ 115.038139][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.046116][ T6794] rfkill_global_mutex [ 115.051704][ T6723] Call Trace: [ 115.051713][ T6723] [ 115.062735][ T6794] ){+.+.}-{3:3} [ 115.067082][ T6723] dump_stack_lvl+0x188/0x250 [ 115.070663][ T6794] : [ 115.070681][ T6794] __mutex_lock_common+0x1e5/0x2400 [ 115.073868][ T6723] ? page_vma_mapped_walk+0xa1f/0x16e0 [ 115.077639][ T6794] mutex_lock_nested+0x17/0x20 [ 115.082752][ T6723] ? show_regs_print_info+0x20/0x20 [ 115.085378][ T6794] rfkill_register+0x2f/0x970 [ 115.091635][ T6723] ? load_image+0x410/0x410 [ 115.097604][ T6794] hci_register_dev+0x459/0x980 [ 115.103383][ T6723] ? do_raw_spin_lock+0x128/0x2f0 [ 115.109066][ T6794] vhci_create_device+0x32e/0x5c0 [ 115.114748][ T6723] ? __rwlock_init+0x140/0x140 [ 115.119664][ T6794] vhci_write+0x389/0x440 [ 115.125540][ T6723] ? do_raw_spin_unlock+0x11d/0x230 [ 115.131030][ T6794] vfs_write+0x748/0xd70 [ 115.137093][ T6723] should_fail+0x383/0x4b0 [ 115.142295][ T6794] ksys_write+0x153/0x260 [ 115.147598][ T6723] should_failslab+0x5/0x20 [ 115.153273][ T6794] do_syscall_64+0x4c/0xa0 [ 115.158479][ T6723] slab_pre_alloc_hook+0x51/0xc0 [ 115.163299][ T6794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.168599][ T6723] ? xas_create+0x1047/0x15a0 [ 115.173517][ T6794] [ 115.173517][ T6794] -> #3 ( [ 115.178910][ T6723] kmem_cache_alloc+0x3d/0x280 [ 115.184321][ T6794] &data->open_mutex){+.+.}-{3:3} [ 115.191345][ T6723] ? xas_descend+0x210/0x3b0 [ 115.196451][ T6794] : [ 115.196456][ T6794] __mutex_lock_common+0x1e5/0x2400 [ 115.202039][ T6723] xas_create+0x1047/0x15a0 [ 115.207243][ T6794] mutex_lock_nested+0x17/0x20 [ 115.212644][ T6723] xas_create_range+0x1e4/0x810 [ 115.217649][ T6794] vhci_send_frame+0x88/0x100 [ 115.220284][ T6723] add_to_swap_cache+0xbb3/0x1470 [ 115.226534][ T6794] hci_send_frame+0x1a9/0x2e0 [ 115.231460][ T6723] ? get_swap_page+0x5da/0x780 [ 115.237235][ T6794] hci_tx_work+0x9b5/0x16d0 [ 115.242534][ T6723] ? get_shadow_from_swap_cache+0xc0/0xc0 [ 115.248215][ T6794] process_one_work+0x867/0xff0 [ 115.253712][ T6723] ? free_swap_slot+0x310/0x310 [ 115.259394][ T6794] worker_thread+0xad7/0x12a0 [ 115.264602][ T6723] ? unwind_next_frame+0x11ec/0x1cf0 [ 115.270091][ T6794] kthread+0x42e/0x520 [ 115.276345][ T6723] ? page_referenced+0x5b0/0x5b0 [ 115.282216][ T6794] ret_from_fork+0x1f/0x30 [ 115.287519][ T6723] ? page_get_anon_vma+0x320/0x320 [ 115.293200][ T6794] [ 115.293200][ T6794] -> #2 ( [ 115.298977][ T6723] ? page_mapping+0x319/0x440 [ 115.303990][ T6794] (work_completion)(&hdev->tx_work) [ 115.309386][ T6723] add_to_swap+0x1a9/0x270 [ 115.314780][ T6794] ){+.+.}-{0:0} [ 115.320369][ T6723] shrink_page_list+0x3de5/0x6de0 [ 115.325955][ T6794] : [ 115.325960][ T6794] __flush_work+0x116/0x210 [ 115.331078][ T6723] ? reclaim_clean_pages_from_list+0xaf0/0xaf0 [ 115.336751][ T6794] hci_dev_do_close+0x201/0x1020 [ 115.341573][ T6723] ? arch_stack_walk+0xf2/0x140 [ 115.345344][ T6794] hci_unregister_dev+0x2eb/0x590 [ 115.350842][ T6723] ? rcu_is_watching+0x11/0xa0 [ 115.353463][ T6794] vhci_release+0x73/0xc0 [ 115.358975][ T6723] ? lock_release+0xb5/0x8a0 [ 115.365708][ T6794] __fput+0x212/0x8c0 [ 115.371678][ T6723] ? format_decode+0x19b/0x1330 [ 115.376979][ T6794] task_work_run+0x125/0x1a0 [ 115.383043][ T6723] ? rcu_lock_release+0x5/0x20 [ 115.388246][ T6794] do_exit+0x635/0x2110 [ 115.393557][ T6723] ? kasan_set_track+0x62/0x70 [ 115.398579][ T6794] do_group_exit+0x12c/0x2f0 [ 115.403496][ T6723] ? slab_free_freelist_hook+0xec/0x170 [ 115.408797][ T6794] __x64_sys_exit_group+0x3b/0x40 [ 115.414385][ T6723] ? rcu_is_watching+0x11/0xa0 [ 115.419593][ T6794] do_syscall_64+0x4c/0xa0 [ 115.424724][ T6723] ? lock_acquire+0xc7/0x400 [ 115.429929][ T6794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.435520][ T6723] reclaim_pages+0x712/0x990 [ 115.441591][ T6794] [ 115.441591][ T6794] -> #1 ( [ 115.447672][ T6723] ? isolate_lru_page+0xbd0/0xbd0 [ 115.452868][ T6794] &hdev->req_lock [ 115.458269][ T6723] ? do_raw_spin_unlock+0x11d/0x230 [ 115.463285][ T6794] ){+.+.}-{3:3} [ 115.470305][ T6723] madvise_cold_or_pageout_pte_range+0x1680/0x1ea0 [ 115.475318][ T6794] : [ 115.475324][ T6794] __mutex_lock_common+0x1e5/0x2400 [ 115.480915][ T6723] ? rcu_lock_release+0x20/0x20 [ 115.486400][ T6794] mutex_lock_nested+0x17/0x20 [ 115.490374][ T6723] walk_pgd_range+0xb28/0x1370 [ 115.496059][ T6794] discov_update+0x369/0x850 [ 115.499840][ T6723] __walk_page_range+0x136/0x590 [ 115.506944][ T6794] process_one_work+0x867/0xff0 [ 115.509573][ T6723] ? vmacache_find+0x238/0x590 [ 115.515830][ T6794] worker_thread+0xad7/0x12a0 [ 115.521133][ T6723] ? find_vma+0xd2/0x230 [ 115.526909][ T6794] kthread+0x42e/0x520 [ 115.532116][ T6723] walk_page_range+0x3a3/0x550 [ 115.537704][ T6794] ret_from_fork+0x1f/0x30 [ 115.543107][ T6723] ? local_lock_release+0x97/0x170 [ 115.548985][ T6794] [ 115.548985][ T6794] -> #0 ( [ 115.554190][ T6723] ? page_mapped_in_vma+0x520/0x520 [ 115.559872][ T6794] (work_completion)(&hdev->discov_update) [ 115.564506][ T6723] ? lock_release+0xb5/0x8a0 [ 115.569521][ T6794] ){+.+.}-{0:0} [ 115.574732][ T6723] do_madvise+0x16a6/0x2aa0 [ 115.580133][ T6794] : [ 115.580143][ T6794] __lock_acquire+0x38f7/0x7d40 [ 115.585809][ T6723] ? futex_wait+0x55c/0x680 [ 115.591401][ T6794] lock_acquire+0x19f/0x400 [ 115.597081][ T6723] ? try_to_wake_up+0x69a/0x1020 [ 115.603342][ T6794] __flush_work+0x116/0x210 [ 115.608359][ T6723] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 115.612128][ T6794] __cancel_work_timer+0x3f4/0x560 [ 115.617052][ T6723] ? futex_wake+0x4a9/0x540 [ 115.619675][ T6794] hci_request_cancel_all+0xc0/0x300 [ 115.625554][ T6723] ? proc_fail_nth_write+0x180/0x200 [ 115.630470][ T6794] hci_dev_do_close+0x4e/0x1020 [ 115.635959][ T6723] ? proc_fail_nth_read+0x220/0x220 [ 115.641355][ T6794] hci_rfkill_set_block+0x101/0x180 [ 115.646853][ T6723] ? rcu_is_watching+0x11/0xa0 [ 115.652815][ T6794] rfkill_set_block+0x1c1/0x3c0 [ 115.658978][ T6723] ? lock_release+0xb5/0x8a0 [ 115.663897][ T6794] rfkill_fop_write+0x453/0x560 [ 115.670254][ T6723] ? __context_tracking_exit+0x4c/0x80 [ 115.676029][ T6794] vfs_write+0x304/0xd70 [ 115.681902][ T6723] ? read_lock_is_recursive+0x10/0x10 [ 115.687584][ T6794] ksys_write+0x153/0x260 [ 115.693845][ T6723] ? __lock_acquire+0x7d40/0x7d40 [ 115.699050][ T6794] do_syscall_64+0x4c/0xa0 [ 115.704925][ T6723] ? account_other_time+0x64/0x280 [ 115.709936][ T6794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.715808][ T6723] ? lock_chain_count+0x20/0x20 [ 115.721792][ T6794] [ 115.721792][ T6794] other info that might help us debug this: [ 115.721792][ T6794] [ 115.726986][ T6723] __x64_sys_madvise+0xa2/0xb0 [ 115.732855][ T6794] Chain exists of: [ 115.732855][ T6794] (work_completion)(&hdev->discov_update) [ 115.738156][ T6723] do_syscall_64+0x4c/0xa0 [ 115.743642][ T6794] --> &data->open_mutex [ 115.749041][ T6723] ? clear_bhb_loop+0x30/0x80 [ 115.754627][ T6794] --> rfkill_global_mutex [ 115.761642][ T6723] ? clear_bhb_loop+0x30/0x80 [ 115.766942][ T6794] [ 115.766942][ T6794] [ 115.766947][ T6794] Possible unsafe locking scenario: [ 115.766947][ T6794] [ 115.778161][ T6723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.783363][ T6794] CPU0 CPU1 [ 115.783369][ T6794] ---- ---- [ 115.793726][ T6723] RIP: 0033:0x7fd7e6bca1d9 [ 115.798548][ T6794] lock(rfkill_global_mutex [ 115.803182][ T6723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.808290][ T6794] ); [ 115.808295][ T6794] lock( [ 115.813110][ T6723] RSP: 002b:00007fd7e4e22028 EFLAGS: 00000246 [ 115.818224][ T6794] &data->open_mutex); [ 115.823141][ T6723] ORIG_RAX: 000000000000001c [ 115.831306][ T6794] lock(rfkill_global_mutex [ 115.837751][ T6723] RAX: ffffffffffffffda RBX: 00007fd7e6e51fa0 RCX: 00007fd7e6bca1d9 [ 115.843624][ T6794] ); [ 115.843629][ T6794] lock( [ 115.849494][ T6723] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 115.854315][ T6794] (work_completion)(&hdev->discov_update) [ 115.859329][ T6723] RBP: 00007fd7e6c61888 R08: 0000000000000000 R09: 0000000000000000 [ 115.880862][ T6794] ); [ 115.880867][ T6794] [ 115.880867][ T6794] *** DEADLOCK *** [ 115.880867][ T6794] [ 115.883587][ T6723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.889554][ T6794] 1 lock held by syz.3.844/6794: [ 115.896193][ T6723] R13: 00007fd7e6e52038 R14: 00007fd7e6e51fa0 R15: 00007ffeb5764508 [ 115.900539][ T6794] #0: ffffffff8e4d7308 [ 115.905655][ T6723] [ 115.913430][ T6794] (rfkill_global_mutex [ 115.984961][ T4203] Bluetooth: hci3: link tx timeout [ 115.986418][ T6794] ){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 115.991017][ T4203] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.994279][ T6794] [ 115.994279][ T6794] stack backtrace: [ 115.994292][ T6794] CPU: 0 PID: 6794 Comm: syz.3.844 Not tainted syzkaller #0 [ 116.034239][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.045277][ T6794] Call Trace: [ 116.048879][ T6794] [ 116.052079][ T6794] dump_stack_lvl+0x188/0x250 [ 116.057216][ T6794] ? load_image+0x410/0x410 [ 116.062140][ T6794] ? show_regs_print_info+0x20/0x20 [ 116.067838][ T6794] ? print_circular_bug+0x12b/0x1a0 [ 116.073526][ T6794] check_noncircular+0x2f8/0x400 [ 116.078930][ T6794] ? print_deadlock_bug+0x5d0/0x5d0 [ 116.084615][ T6794] ? lockdep_lock+0xf1/0x1f0 [ 116.089639][ T6794] ? mark_lock+0x94/0x320 [ 116.094372][ T6794] ? _find_first_zero_bit+0xd1/0xf0 [ 116.100066][ T6794] __lock_acquire+0x38f7/0x7d40 [ 116.105396][ T6794] ? lock_chain_count+0x20/0x20 [ 116.110703][ T6794] ? verify_lock_unused+0x140/0x140 [ 116.116388][ T6794] ? finish_lock_switch+0x12d/0x290 [ 116.122077][ T6794] ? finish_task_switch+0x12f/0x650 [ 116.127767][ T6794] ? __schedule+0x11cb/0x4350 [ 116.132888][ T6794] lock_acquire+0x19f/0x400 [ 116.137810][ T6794] ? __flush_work+0xfa/0x210 [ 116.142831][ T6794] ? read_lock_is_recursive+0x10/0x10 [ 116.148708][ T6794] ? mark_lock+0x94/0x320 [ 116.153438][ T6794] ? release_firmware_map_entry+0x190/0x190 [ 116.159892][ T6794] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.166445][ T6794] __flush_work+0x116/0x210 [ 116.171370][ T6794] ? __flush_work+0xfa/0x210 [ 116.176386][ T6794] ? flush_work+0x20/0x20 [ 116.181117][ T6794] ? try_to_grab_pending+0xfb/0x820 [ 116.186820][ T6794] ? mark_lock+0x94/0x320 [ 116.191555][ T6794] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.198100][ T6794] ? preempt_schedule_thunk+0x16/0x18 [ 116.203979][ T6794] ? lock_chain_count+0x20/0x20 [ 116.209286][ T6794] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 116.215833][ T6794] ? _raw_spin_unlock+0x40/0x40 [ 116.221137][ T6794] ? __cancel_work_timer+0x36a/0x560 [ 116.226923][ T6794] __cancel_work_timer+0x3f4/0x560 [ 116.232514][ T6794] ? cancel_work_sync+0x20/0x20 [ 116.237817][ T6794] ? remove_wait_queue+0x120/0x120 [ 116.243406][ T6794] ? __cancel_work+0x1f9/0x2e0 [ 116.248614][ T6794] ? __cancel_work+0x27b/0x2e0 [ 116.253819][ T6794] ? cancel_work+0x20/0x20 [ 116.258666][ T6794] hci_request_cancel_all+0xc0/0x300 [ 116.264454][ T6794] hci_dev_do_close+0x4e/0x1020 [ 116.269765][ T6794] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 116.276219][ T6794] ? _raw_spin_unlock+0x40/0x40 [ 116.281529][ T6794] hci_rfkill_set_block+0x101/0x180 [ 116.287225][ T6794] ? rcu_lock_release+0x20/0x20 [ 116.292534][ T6794] rfkill_set_block+0x1c1/0x3c0 [ 116.297848][ T6794] rfkill_fop_write+0x453/0x560 [ 116.303154][ T6794] ? rfkill_fop_read+0x560/0x560 [ 116.308555][ T6794] ? common_file_perm+0x160/0x1c0 [ 116.314048][ T6794] ? fsnotify_perm+0x5d/0x560 [ 116.319159][ T6794] ? security_file_permission+0x75/0xa0 [ 116.325230][ T6794] ? rfkill_fop_read+0x560/0x560 [ 116.330648][ T6794] vfs_write+0x304/0xd70 [ 116.335293][ T6794] ? file_end_write+0x250/0x250 [ 116.340597][ T6794] ? __fget_files+0x402/0x470 [ 116.345716][ T6794] ? __fdget_pos+0x1e2/0x370 [ 116.350737][ T6794] ? ksys_write+0x70/0x260 [ 116.355566][ T6794] ksys_write+0x153/0x260 [ 116.360298][ T6794] ? __ia32_sys_read+0x80/0x80 [ 116.365508][ T6794] ? lockdep_hardirqs_on+0x94/0x140 [ 116.371209][ T6794] do_syscall_64+0x4c/0xa0 [ 116.376057][ T6794] ? clear_bhb_loop+0x30/0x80 [ 116.381176][ T6794] ? clear_bhb_loop+0x30/0x80 [ 116.386295][ T6794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.392752][ T6794] RIP: 0033:0x7f23158b21d9 [ 116.397598][ T6794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.419135][ T6794] RSP: 002b:00007f2313b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.428381][ T6794] RAX: ffffffffffffffda RBX: 00007f2315b39fa0 RCX: 00007f23158b21d9 [ 116.437124][ T6794] RDX: 0000000000000008 RSI: 0000200000000900 RDI: 0000000000000004 [ 116.445864][ T6794] RBP: 00007f2315949888 R08: 0000000000000000 R09: 0000000000000000 [ 116.454627][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.463367][ T6794] R13: 00007f2315b3a038 R14: 00007f2315b39fa0 R15: 00007fff3a1ae8e8 [ 116.472119][ T6794] [ 116.475550][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.504394][ T4232] usb 5-1: USB disconnect, device number 5 [ 116.598411][ T4261] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 116.610749][ T4261] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.624796][ T4261] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 116.719639][ T4261] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 116.727807][ T4261] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.741233][ T4261] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 116.841228][ T4261] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 116.849644][ T4261] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 116.863023][ T4261] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 117.119546][ T4261] usb 7-1: string descriptor 0 read error: -22 [ 117.126455][ T4261] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 117.136878][ T4261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.191837][ T4261] adutux 7-1:168.0: interrupt endpoints not found [ 117.324546][ T4175] usb 7-1: USB disconnect, device number 2