last executing test programs: 9.095944235s ago: executing program 2 (id=107): unshare(0x64000600) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x21, 0xfffffffffffffffe, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) flock(0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, 0x0, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x41, 0x3, 0x80, 0xe5, 0x8, 0x2}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x3, [{0xcb, &(0x7f0000000500)=@string={0xcb, 0x3, "6b22013b0221c8c03218f45234c963393d44513cfa236bd1a918e5b48e48ca0e5b7c414f57ebb2316c53df9824e8c09d0bfa4f86c97974096dac801165cff96f02a6a8fd19c58f3f8fb7e55d34e614b7ee1490e7158f87d621e6e2303380cc75dd78f1fc6461d144cf3044df9eb042cb87c167628786a4ec2d940216bfd25ff0d4dd9e019165e658f0b91c60a2702ebd568e82bf35de21faec3167a189845fce22cc355a52c486c8ba3b9894e3e9b431392b5ef6482388ff9f455db62ec77d9b048b5597793b880db5"}}, {0xe0, &(0x7f0000000200)=@string={0xe0, 0x3, "44ee5a27083539b8f31f0b727544e769e8f2e827b6a8c3394000dbb4db37566b75f5a68f94f75ff65b62f5a33f866f88df0a229be97c1d5d44b6e75ad8af59af94847c7d1ab4b45f020caf1c9587ef44f17cd74c43fabc2638c070b65128ef4fce94ccaf880b251a0bb0f06a234c588be5f2c638bf6a72f203fab3397eb64f7d18602b87aa4b74a06ebb0f7c5df39791fd276979fa82c4c4bef6ad065276a45ba1aede65525ce322edff4bc6b771486b6a65197495e8cd6885bdb3903e7cbe93d02d975ca26cb4974eeb9ef3e468658d3f807f475a1b80aca8e23896b253"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x416}}]}) socket$kcm(0x10, 0x2, 0x0) keyctl$link(0x8, 0x0, 0xffffffffffffffff) 7.345612508s ago: executing program 2 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4091) 6.384874372s ago: executing program 2 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000005780)=""/4093, 0xffd}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f0000000180)=""/120, 0x78}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000000900)=""/4098, 0x1002}, {&(0x7f0000004740)=""/4093, 0xffd}], 0x2}, 0x900000}], 0x7, 0x0, 0x0) 6.384687442s ago: executing program 4 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.187054817s ago: executing program 1 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x28, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 5.985678452s ago: executing program 1 (id=111): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) syz_usb_ep_read(r0, 0x4, 0x0, 0x0) syz_usb_ep_write(r0, 0x83, 0x0, 0x0) 5.983795802s ago: executing program 4 (id=112): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda443000090401"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 5.465164904s ago: executing program 2 (id=113): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010025bd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000140), 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1', 0x1) 5.25430028s ago: executing program 2 (id=114): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4.02900082s ago: executing program 4 (id=117): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5d, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 3.331337267s ago: executing program 0 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) timerfd_create(0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/kernel_sys_info\x00', 0x1, 0x0) 3.056980524s ago: executing program 0 (id=122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) 2.902602207s ago: executing program 1 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.741163532s ago: executing program 0 (id=124): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000240)={{0x3, 0x0, 0x10, 0x0, 'syz1\x00', 0xfff}, 0x0, [0x5, 0xfffffffffffffff8, 0x72e, 0x9, 0x7ff, 0x5, 0x6, 0x88, 0x400, 0x38ac, 0x8, 0x4, 0x3, 0x20, 0x43f2, 0x2, 0x0, 0xab7, 0x2, 0x1, 0x3f36, 0xffffffffffff0001, 0x5, 0x8, 0x5, 0x6, 0x9, 0x1, 0x7ca, 0x30000000000, 0x0, 0x2, 0x8, 0x8000, 0x1, 0x5, 0x470eed96, 0x5, 0x5, 0x5, 0x4, 0xd, 0x2, 0xffffffff, 0x3, 0x4, 0x8000000000000001, 0x9, 0x1, 0x6, 0x5, 0x6, 0x7, 0x200, 0x1, 0x2, 0x0, 0x8000, 0x3, 0x4, 0x7, 0x0, 0x80, 0x134, 0xc00000000, 0x99, 0x2066, 0x1, 0x7fff, 0xfff, 0x1000000000, 0x500, 0x9, 0x7fffffffffffffff, 0x109, 0x9, 0x10, 0x100, 0x3, 0x4, 0x1, 0x851, 0xffffffffffff38d1, 0x7ff, 0x80000001, 0x8, 0xffffffffffff0000, 0x7, 0x1, 0x2, 0x3, 0x2fb9, 0x7, 0x3, 0x2, 0xfffffffffffffff9, 0x4, 0x100000000, 0x4a4, 0x9, 0x4f3, 0x4, 0x4, 0x7f, 0x401, 0x2, 0x7, 0x3, 0x31e0cd6, 0x0, 0xbd4, 0x8001, 0x1, 0x0, 0x8000, 0x55b8, 0x7, 0x4, 0x2, 0x100000000, 0x2, 0xfffffffffffffff7, 0x2, 0x5e7b5583, 0x6, 0x1, 0xd2a, 0x9]}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000056000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) 2.722243752s ago: executing program 0 (id=125): r0 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000180)={0x2, 0x3}) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) syncfs(r0) r3 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) write$binfmt_elf32(r3, &(0x7f0000000000)=ANY=[], 0x6200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000500000000000000800000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$uinput_user_dev(r4, &(0x7f0000000940)={'syz0\x00', {0xe45, 0x0, 0x22f, 0xff}, 0x17, [0xe4f, 0x1, 0xfba4, 0xa957, 0x2, 0x8001, 0x6, 0x800, 0x101, 0x0, 0x2, 0x5a4, 0x100, 0x1, 0xfff, 0x1, 0x9, 0x8, 0x7, 0xfffffff7, 0x8, 0x0, 0x1ff, 0x14d3, 0x80000001, 0x5, 0x15b2, 0x8, 0x3, 0x4, 0x8, 0xc9, 0x8001, 0x200, 0x3, 0x1, 0x40, 0x2, 0x5, 0x5, 0xe686, 0x9, 0xa6d7, 0x5, 0x5, 0x7, 0x5, 0x0, 0x3, 0x10000, 0x8, 0x2, 0x8001, 0x7, 0x10000, 0x8, 0x40, 0x101, 0x2, 0x3, 0x7, 0x7fffffff, 0x4, 0x6fd], [0x0, 0x916f, 0x5, 0x0, 0x6, 0x7, 0x5, 0x6, 0x8af5, 0x4, 0x19, 0x0, 0x1, 0x6, 0x100, 0xe5, 0xf8, 0x0, 0x7f, 0x6, 0x6, 0x0, 0xfffffff9, 0x5, 0x7f, 0x46b9b56b, 0x6, 0xfffffffc, 0xfffffff7, 0x2, 0x1000, 0xb4, 0xfff, 0x0, 0x8, 0x1000, 0x10000, 0x3, 0x7, 0x101, 0x0, 0xcbd, 0x4, 0x5, 0xfffffffd, 0x9, 0xe, 0x8001, 0x8107, 0x9, 0x7, 0x9, 0x4c3, 0x4, 0x6, 0x9, 0xd159, 0x92f, 0x80, 0x8, 0x6, 0x6, 0x7, 0x5], [0x24, 0xfffffff9, 0x9, 0x7, 0x7b73, 0x7, 0x0, 0xb8, 0x3, 0x1, 0xa56, 0x5f3, 0x3, 0x2, 0x7, 0xb, 0x6, 0x9494, 0x1, 0xffffffff, 0x10, 0x4d, 0x8, 0x9, 0x5, 0x4e54, 0x6, 0x401, 0x4, 0x7fff, 0x9, 0x9, 0x0, 0x3, 0x8, 0x5, 0x7, 0xc, 0xfffffff5, 0x6, 0x40000, 0xc, 0x9, 0x7ff, 0x3, 0x0, 0x4, 0x0, 0x9, 0x9, 0x9, 0x2, 0x100, 0x4, 0x6, 0x78ae, 0x6, 0x8001, 0x5, 0x8, 0x4, 0x200, 0x2, 0x7], [0x7, 0x3ff, 0x80000000, 0x3d6d, 0x6af, 0x3, 0x3, 0x5, 0x0, 0x1b, 0x9, 0x3, 0x8, 0x4, 0x1, 0x0, 0xc6f, 0x8, 0x401, 0x2, 0x5, 0x2, 0x2, 0x7, 0xe978, 0xca, 0x3, 0x800, 0x9, 0x6, 0x1000, 0x7, 0xc, 0x3, 0xff, 0xc0000000, 0x9, 0x5, 0xa1c, 0x5, 0x6, 0x3, 0x0, 0x33b, 0xa, 0x8, 0x2, 0x9, 0x982, 0x7ff, 0x6, 0x3, 0x0, 0x51aa, 0x9, 0x2c90, 0xfffffff8, 0x2, 0x1, 0x2, 0x6, 0xfff, 0x8, 0x2]}, 0x45c) 2.337996422s ago: executing program 1 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xf0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000600)='test2\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000500)='B', 0x1000) 2.264736394s ago: executing program 4 (id=127): msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0010"], 0x8, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/127}, 0x87, 0x3, 0x3800) 2.173532276s ago: executing program 4 (id=129): unshare(0x64000600) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x21, 0xfffffffffffffffe, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x52, 0x8000, 0xfffd, {0x0, 0x1}, {0x2, 0x2}, @cond=[{0x202, 0x5388, 0x6f5, 0x800, 0xc8, 0x202}, {0xd06, 0x5, 0x1, 0x1198, 0x2, 0x101}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12015002000008000000000000000102030109022400010109a0fe0904007f010701030909050102200081f8060905"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x4) keyctl$link(0x8, 0x0, 0xffffffffffffffff) 2.076834338s ago: executing program 1 (id=130): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x12) socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) r3 = inotify_init1(0x800) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@rand_addr=0x64010101}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x10}}, 0x0) close(r4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[], 0x10}}, 0x0) r6 = inotify_add_watch(r3, &(0x7f0000000100)='./cgroup\x00', 0xd0000405) inotify_rm_watch(r3, r6) read(r3, &(0x7f0000000140)=""/115, 0x29) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01001fbd700000000000890000000a000300590b94bd7ca38bfa21583dff5c989b4ccff136e1e35fdc96bcc05bcd27abd37be1b89c18358e766b539cf10c3edab4bc00120700000000000000156b9f4fcbc58226065470980f32bbf9f44ad47be992d006f018a18ca79301b43b167b168780840759421375139ac9ebfe00100000000000", @ANYRES32=r2, @ANYBLOB="18001d8014000080060005008c00000005000b0000000000"], 0x34}}, 0x10000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x4091) 2.025193279s ago: executing program 2 (id=131): unshare(0x64000600) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x21, 0xfffffffffffffffe, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) flock(0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, 0x0, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x41, 0x3, 0x80, 0xe5, 0x8, 0x2}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x2, [{0xcb, &(0x7f0000000500)=@string={0xcb, 0x3, "6b22013b0221c8c03218f45234c963393d44513cfa236bd1a918e5b48e48ca0e5b7c414f57ebb2316c53df9824e8c09d0bfa4f86c97974096dac801165cff96f02a6a8fd19c58f3f8fb7e55d34e614b7ee1490e7158f87d621e6e2303380cc75dd78f1fc6461d144cf3044df9eb042cb87c167628786a4ec2d940216bfd25ff0d4dd9e019165e658f0b91c60a2702ebd568e82bf35de21faec3167a189845fce22cc355a52c486c8ba3b9894e3e9b431392b5ef6482388ff9f455db62ec77d9b048b5597793b880db5"}}, {0xe0, &(0x7f0000000200)=@string={0xe0, 0x3, "44ee5a27083539b8f31f0b727544e769e8f2e827b6a8c3394000dbb4db37566b75f5a68f94f75ff65b62f5a33f866f88df0a229be97c1d5d44b6e75ad8af59af94847c7d1ab4b45f020caf1c9587ef44f17cd74c43fabc2638c070b65128ef4fce94ccaf880b251a0bb0f06a234c588be5f2c638bf6a72f203fab3397eb64f7d18602b87aa4b74a06ebb0f7c5df39791fd276979fa82c4c4bef6ad065276a45ba1aede65525ce322edff4bc6b771486b6a65197495e8cd6885bdb3903e7cbe93d02d975ca26cb4974eeb9ef3e468658d3f807f475a1b80aca8e23896b253"}}]}) socket$kcm(0x10, 0x2, 0x0) keyctl$link(0x8, 0x0, 0xffffffffffffffff) 2.024962149s ago: executing program 3 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) timerfd_create(0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/kernel_sys_info\x00', 0x1, 0x0) 1.810618625s ago: executing program 1 (id=133): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@mcast1, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x1000, 0x0, 0xfffffffffffff801, 0x2, 0x0, 0x4000000, 0xffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x8a}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2c, 0x0, 0x0, 0x400004}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.623686639s ago: executing program 3 (id=134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @empty, 0x2}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffe3c}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.228092289s ago: executing program 3 (id=135): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd1200e1fd0000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES8=r1], 0xfdef) 801.10858ms ago: executing program 3 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) syz_open_pts(0xffffffffffffffff, 0x200) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 648.880293ms ago: executing program 4 (id=137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5d, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 614.657334ms ago: executing program 3 (id=138): capset(0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x1000000, 0xd, 0x0, "13ea57ffffffdfff018000000000000000000100000000088b0500", 0x30323953}) 528.815776ms ago: executing program 3 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000, 0x1}}) 518.418806ms ago: executing program 0 (id=140): socket$inet(0x2, 0x1, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 0s ago: executing program 0 (id=141): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000840)={0x14, 0x0, 0x0}, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x0, 0x16, 0x6, "2143b489af73"}, 0x0, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000940)={0x20, 0x81, 0x2, "2ff8"}, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x84, 0x1, '#'}, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) capset(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 50.200019][ T4173] cgroup: Unknown subsys name 'net' [ 50.311661][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.522483][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.155844][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 53.262241][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.270276][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.278500][ T4187] device bridge_slave_0 entered promiscuous mode [ 53.305521][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.312778][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.320600][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.343306][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.354548][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.403110][ T4187] team0: Port device team_slave_0 added [ 53.425304][ T4187] team0: Port device team_slave_1 added [ 53.438406][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 53.487149][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.494138][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.520177][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.534904][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.542045][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.568010][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.583950][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 53.607831][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 53.647914][ T4187] device hsr_slave_0 entered promiscuous mode [ 53.654695][ T4187] device hsr_slave_1 entered promiscuous mode [ 53.681137][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 53.716475][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.723613][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.731364][ T4186] device bridge_slave_0 entered promiscuous mode [ 53.745547][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.752845][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.761056][ T4186] device bridge_slave_1 entered promiscuous mode [ 53.816900][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.845265][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.897736][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.904892][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.912673][ T4192] device bridge_slave_0 entered promiscuous mode [ 53.921045][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.928264][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.936307][ T4192] device bridge_slave_1 entered promiscuous mode [ 53.953710][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.960954][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.969152][ T4198] device bridge_slave_0 entered promiscuous mode [ 53.977338][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.984393][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.992605][ T4196] device bridge_slave_0 entered promiscuous mode [ 54.011587][ T4186] team0: Port device team_slave_0 added [ 54.017626][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.024702][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.032863][ T4198] device bridge_slave_1 entered promiscuous mode [ 54.040183][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.047511][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.055099][ T4196] device bridge_slave_1 entered promiscuous mode [ 54.070079][ T4186] team0: Port device team_slave_1 added [ 54.078723][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.112980][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.124521][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.153763][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.182003][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.193870][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.204730][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.211851][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.238018][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.265677][ T4192] team0: Port device team_slave_0 added [ 54.278530][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.285530][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.311693][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.325031][ T4196] team0: Port device team_slave_0 added [ 54.333035][ T4196] team0: Port device team_slave_1 added [ 54.340629][ T4192] team0: Port device team_slave_1 added [ 54.372468][ T4198] team0: Port device team_slave_0 added [ 54.398850][ T4198] team0: Port device team_slave_1 added [ 54.414992][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.422085][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.448454][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.459963][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.467219][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.493450][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.510742][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.517820][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.543752][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.558731][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.565554][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.572335][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.580409][ T4186] Cannot create hsr debugfs directory [ 54.586396][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.593337][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.619399][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.657601][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.664667][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.690746][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.719525][ T4196] device hsr_slave_0 entered promiscuous mode [ 54.726535][ T4196] device hsr_slave_1 entered promiscuous mode [ 54.733090][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.740768][ T4196] Cannot create hsr debugfs directory [ 54.758696][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.765678][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.791938][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.818051][ T4192] device hsr_slave_0 entered promiscuous mode [ 54.824774][ T4192] device hsr_slave_1 entered promiscuous mode [ 54.831743][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.839522][ T4192] Cannot create hsr debugfs directory [ 54.876309][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.907940][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.919616][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.929361][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.944187][ T4198] device hsr_slave_0 entered promiscuous mode [ 54.950943][ T4198] device hsr_slave_1 entered promiscuous mode [ 54.959218][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.966879][ T4198] Cannot create hsr debugfs directory [ 55.046988][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 55.054659][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 55.056308][ T26] Bluetooth: hci1: command 0x0409 tx timeout [ 55.072104][ T26] Bluetooth: hci0: command 0x0409 tx timeout [ 55.079044][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 55.173172][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.183456][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.209208][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.227240][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.280793][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.290665][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.319266][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.335034][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.368129][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.375524][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.389654][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.403954][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.413758][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.449377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.460370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.502435][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.517720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.526958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.535775][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.542996][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.569261][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.584009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.592520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.601906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.611898][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.619046][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.629340][ T4198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.645913][ T4198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.665970][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.682220][ T4198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.691518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.701593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.709560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.717570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.725587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.738229][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.752035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.761768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.771461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.780151][ T4198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.800297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.808869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.819584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.828065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.837054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.846624][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.859267][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.870660][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.884384][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.896554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.904986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.914893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.923663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.932643][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.939777][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.949264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.958120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.966635][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.973686][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.981648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.026927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.043381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.052429][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.059544][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.068016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.075643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.083591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.093066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.101617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.111306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.119941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.129934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.138449][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.145508][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.153267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.161969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.170999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.179449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.193365][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.212285][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.224264][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.235792][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.246393][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.278802][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.287386][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.295898][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.321869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.330807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.340477][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.347580][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.356197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.364487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.373512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.382107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.390798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.398355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.405859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.414734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.423377][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.430487][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.438252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.456516][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.474613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.483488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.492543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.502203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.510880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.519659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.530701][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.552419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.563454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.572781][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.614305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.625152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.638864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.655476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.666203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.674592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.683707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.692681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.701961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.718356][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.735477][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.761213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.778273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.799011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.816944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.836014][ T4187] device veth0_vlan entered promiscuous mode [ 56.862091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.874459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.888074][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.910579][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.918905][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.938138][ T4187] device veth1_vlan entered promiscuous mode [ 56.951089][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.964919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.975152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.990596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.000753][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.007851][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.015702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.024528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.033002][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.040163][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.048018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.055470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.065945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.087819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.099678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.108235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.117124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.125778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.134149][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 57.140963][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 57.142238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.147109][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 57.147181][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 57.161270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.167311][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 57.189443][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.203416][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.218649][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.231773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.244792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.253927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.268095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.277433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.285633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.293763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.302150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.324157][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.352233][ T4187] device veth0_macvtap entered promiscuous mode [ 57.372289][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.387098][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.397259][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.416850][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.425642][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.455115][ T4187] device veth1_macvtap entered promiscuous mode [ 57.462786][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.472711][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.482182][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.491276][ T4196] device veth0_vlan entered promiscuous mode [ 57.520145][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.535482][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.545344][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.561160][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.575052][ T4196] device veth1_vlan entered promiscuous mode [ 57.595161][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.603005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.612036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.620904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.645184][ T4192] device veth0_vlan entered promiscuous mode [ 57.659964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.672222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.680519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.690398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.698886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.707612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.716337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.725020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.732932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.743609][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.773346][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.785446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.794599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.804601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.813028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.821629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.830253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.841423][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.850746][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.859569][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.868569][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.881150][ T4186] device veth0_vlan entered promiscuous mode [ 57.894244][ T4192] device veth1_vlan entered promiscuous mode [ 57.920668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.929661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.939398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.954901][ T4196] device veth0_macvtap entered promiscuous mode [ 57.965957][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.974369][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.983463][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.996548][ T4186] device veth1_vlan entered promiscuous mode [ 58.017879][ T4196] device veth1_macvtap entered promiscuous mode [ 58.085674][ T4198] device veth0_vlan entered promiscuous mode [ 58.096821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.105846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.114559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.122927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.135413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.143673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.152539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.160796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.178794][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.187532][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.196043][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.204425][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.212046][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.221384][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.232538][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.249217][ T4192] device veth0_macvtap entered promiscuous mode [ 58.260721][ T4198] device veth1_vlan entered promiscuous mode [ 58.272719][ T4186] device veth0_macvtap entered promiscuous mode [ 58.283396][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.294455][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.306741][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.329598][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.330782][ T4192] device veth1_macvtap entered promiscuous mode [ 58.345719][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.350476][ T4186] device veth1_macvtap entered promiscuous mode [ 58.361840][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.370334][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.380434][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.388522][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.396928][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.404818][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.414810][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.423749][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.437049][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.447777][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.459224][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.479007][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.489172][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.501751][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.511353][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.520569][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.529600][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.560743][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.577648][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.589024][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.599673][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.611485][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.630389][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.641704][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.653443][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.664223][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.674175][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.685069][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.697896][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.711120][ T4198] device veth0_macvtap entered promiscuous mode [ 58.724269][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.737275][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.747724][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.758395][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.769459][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.777607][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.787571][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.796644][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.805224][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.815094][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.825291][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.834014][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.843353][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.855568][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.891342][ T4264] FAULT_INJECTION: forcing a failure. [ 58.891342][ T4264] name failslab, interval 1, probability 0, space 0, times 1 [ 58.896820][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.914303][ T4264] CPU: 0 PID: 4264 Comm: syz.2.3 Not tainted syzkaller #0 [ 58.921441][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.921514][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.931512][ T4264] Call Trace: [ 58.940896][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.943498][ T4264] [ 58.952507][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.955086][ T4264] dump_stack_lvl+0x188/0x250 [ 58.968399][ T4264] ? show_regs_print_info+0x20/0x20 [ 58.972740][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.973603][ T4264] ? load_image+0x410/0x410 [ 58.984938][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.988488][ T4264] should_fail+0x383/0x4b0 [ 58.988517][ T4264] should_failslab+0x5/0x20 [ 58.988534][ T4264] slab_pre_alloc_hook+0x51/0xc0 [ 58.988550][ T4264] ? anon_vma_clone+0xbc/0x4d0 [ 58.988567][ T4264] kmem_cache_alloc+0x3d/0x280 [ 58.988586][ T4264] anon_vma_clone+0xbc/0x4d0 [ 58.988611][ T4264] copy_vma+0x5c5/0x800 [ 58.988641][ T4264] move_vma+0x3f4/0xbc0 [ 58.988662][ T4264] ? arch_get_unmapped_area+0x640/0x640 [ 58.999458][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.002834][ T4264] ? vma_expandable+0x110/0x110 [ 59.012770][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.016974][ T4264] ? cap_mmap_addr+0x153/0x2c0 [ 59.016997][ T4264] ? bpf_lsm_file_free_security+0x10/0x10 [ 59.017015][ T4264] ? security_mmap_addr+0x6e/0x90 [ 59.017034][ T4264] ? get_unmapped_area+0x2f0/0x360 [ 59.022385][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.026355][ T4264] mremap_to+0x556/0x6b0 [ 59.026383][ T4264] __se_sys_mremap+0x412/0x950 [ 59.030872][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.034667][ T4264] ? __x64_sys_mremap+0xc0/0xc0 [ 59.041856][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.050565][ T4264] ? lock_chain_count+0x20/0x20 [ 59.050600][ T4264] ? lockdep_hardirqs_on+0x94/0x140 [ 59.050618][ T4264] ? __x64_sys_mremap+0x1c/0xc0 [ 59.068818][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.069991][ T4264] do_syscall_64+0x4c/0xa0 [ 59.075698][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.080692][ T4264] ? clear_bhb_loop+0x30/0x80 [ 59.080712][ T4264] ? clear_bhb_loop+0x30/0x80 [ 59.080728][ T4264] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.080762][ T4264] RIP: 0033:0x7fd9edf281d9 [ 59.086692][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.096220][ T4264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.096236][ T4264] RSP: 002b:00007fd9ec180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 59.096255][ T4264] RAX: ffffffffffffffda RBX: 00007fd9ee1affa0 RCX: 00007fd9edf281d9 [ 59.096267][ T4264] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 59.096277][ T4264] RBP: 00007fd9edfbf888 R08: 0000200000ffd000 R09: 0000000000000000 [ 59.096287][ T4264] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 59.096296][ T4264] R13: 00007fd9ee1b0038 R14: 00007fd9ee1affa0 R15: 00007fff51fc9818 [ 59.096321][ T4264] [ 59.267018][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.267201][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 59.288549][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 59.290429][ T4198] device veth1_macvtap entered promiscuous mode [ 59.301557][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 59.308767][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 59.315777][ T4175] Bluetooth: hci4: command 0x040f tx timeout [ 59.322652][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.339420][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.350061][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.374730][ T4266] FAULT_INJECTION: forcing a failure. [ 59.374730][ T4266] name failslab, interval 1, probability 0, space 0, times 0 [ 59.382697][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.396691][ T4266] CPU: 1 PID: 4266 Comm: syz.2.6 Not tainted syzkaller #0 [ 59.404637][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.405011][ T4266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.405024][ T4266] Call Trace: [ 59.415521][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.424865][ T4266] [ 59.424876][ T4266] dump_stack_lvl+0x188/0x250 [ 59.424902][ T4266] ? show_regs_print_info+0x20/0x20 [ 59.424919][ T4266] ? load_image+0x410/0x410 [ 59.424938][ T4266] ? __lock_acquire+0x7d40/0x7d40 [ 59.424963][ T4266] should_fail+0x383/0x4b0 [ 59.424988][ T4266] should_failslab+0x5/0x20 [ 59.425004][ T4266] slab_pre_alloc_hook+0x51/0xc0 [ 59.425022][ T4266] ? sk_prot_alloc+0x57/0x210 [ 59.425038][ T4266] kmem_cache_alloc+0x3d/0x280 [ 59.425057][ T4266] sk_prot_alloc+0x57/0x210 [ 59.434520][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.438720][ T4266] ? sk_alloc+0x1d/0x310 [ 59.438749][ T4266] sk_alloc+0x2f/0x310 [ 59.438766][ T4266] unix_create1+0xad/0x610 [ 59.438788][ T4266] unix_create+0x139/0x1f0 [ 59.438806][ T4266] __sock_create+0x473/0x910 [ 59.438830][ T4266] __sys_socketpair+0x1bd/0x540 [ 59.442516][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.446404][ T4266] __x64_sys_socketpair+0x97/0xb0 [ 59.446427][ T4266] do_syscall_64+0x4c/0xa0 [ 59.446444][ T4266] ? clear_bhb_loop+0x30/0x80 [ 59.446461][ T4266] ? clear_bhb_loop+0x30/0x80 [ 59.446478][ T4266] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.446496][ T4266] RIP: 0033:0x7fd9edf281d9 [ 59.446512][ T4266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.446526][ T4266] RSP: 002b:00007fd9ec180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 59.446546][ T4266] RAX: ffffffffffffffda RBX: 00007fd9ee1affa0 RCX: 00007fd9edf281d9 [ 59.446558][ T4266] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 59.446568][ T4266] RBP: 00007fd9edfbf888 R08: 0000000000000000 R09: 0000000000000000 [ 59.446579][ T4266] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 59.446590][ T4266] R13: 00007fd9ee1b0038 R14: 00007fd9ee1affa0 R15: 00007fff51fc9818 [ 59.446615][ T4266] [ 59.638329][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.648438][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.658976][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.670939][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.691760][ T4268] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.722789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.733173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.757509][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.772343][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.782498][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.793300][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.803507][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.814444][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.824522][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.837223][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.850870][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.891069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.911081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.983488][ T4198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.998374][ T4198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.014482][ T4198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.029120][ T4198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.054429][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.090073][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.090347][ T1544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.097700][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.114260][ T1544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.119801][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.150919][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.161312][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.169927][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.226871][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.234730][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.282019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.317069][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.328275][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.344841][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.353415][ T1544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.359996][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.366719][ T1544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.396953][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.418030][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.434967][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.466532][ T4273] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 60.485283][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.516086][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.585766][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.619572][ T4276] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 60.735510][ T4283] FAULT_INJECTION: forcing a failure. [ 60.735510][ T4283] name failslab, interval 1, probability 0, space 0, times 0 [ 60.754344][ T4283] CPU: 1 PID: 4283 Comm: syz.2.8 Not tainted syzkaller #0 [ 60.761500][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.771572][ T4283] Call Trace: [ 60.774858][ T4283] [ 60.777795][ T4283] dump_stack_lvl+0x188/0x250 [ 60.782480][ T4283] ? show_regs_print_info+0x20/0x20 [ 60.787667][ T4283] ? load_image+0x410/0x410 [ 60.792183][ T4283] ? __might_sleep+0xf0/0xf0 [ 60.796762][ T4283] ? __lock_acquire+0x7d40/0x7d40 [ 60.801799][ T4283] should_fail+0x383/0x4b0 [ 60.806210][ T4283] should_failslab+0x5/0x20 [ 60.810724][ T4283] slab_pre_alloc_hook+0x51/0xc0 [ 60.815686][ T4283] kmem_cache_alloc_trace+0x47/0x290 [ 60.820969][ T4283] ? __request_region+0x5b/0xd0 [ 60.825817][ T4283] __request_region+0x5b/0xd0 [ 60.830493][ T4283] __comedi_request_region+0x66/0x130 [ 60.835877][ T4283] das16m1_attach+0xc2/0xad0 [ 60.840463][ T4283] ? __raw_spin_lock_init+0x41/0x100 [ 60.846179][ T4283] comedi_device_attach+0x522/0x710 [ 60.851387][ T4283] comedi_unlocked_ioctl+0x674/0x1240 [ 60.856761][ T4283] ? kfree+0xef/0x2a0 [ 60.860762][ T4283] ? comedi_poll+0x8d0/0x8d0 [ 60.865385][ T4283] ? bpf_lsm_file_ioctl+0x5/0x10 [ 60.870308][ T4283] ? security_file_ioctl+0x7c/0xa0 [ 60.875419][ T4283] ? comedi_poll+0x8d0/0x8d0 [ 60.880005][ T4283] __se_sys_ioctl+0xfa/0x170 [ 60.884604][ T4283] do_syscall_64+0x4c/0xa0 [ 60.889016][ T4283] ? clear_bhb_loop+0x30/0x80 [ 60.893702][ T4283] ? clear_bhb_loop+0x30/0x80 [ 60.898397][ T4283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.904299][ T4283] RIP: 0033:0x7fd9edf281d9 [ 60.908710][ T4283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.928315][ T4283] RSP: 002b:00007fd9ec180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.936734][ T4283] RAX: ffffffffffffffda RBX: 00007fd9ee1affa0 RCX: 00007fd9edf281d9 [ 60.944718][ T4283] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000005 [ 60.952694][ T4283] RBP: 00007fd9edfbf888 R08: 0000000000000000 R09: 0000000000000000 [ 60.960689][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.968665][ T4283] R13: 00007fd9ee1b0038 R14: 00007fd9ee1affa0 R15: 00007fff51fc9818 [ 60.976672][ T4283] [ 60.990317][ T4283] comedi comedi2: das16m1: I/O port conflict (0x540,8) [ 61.108803][ T4286] jffs2: notice: (4286) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 61.156414][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.168846][ T4289] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.282613][ T4299] tipc: Started in network mode [ 61.309202][ T4299] tipc: Node identity 52acac878c6f, cluster identity 4711 [ 61.328994][ T4299] tipc: Enabled bearer , priority 0 [ 61.338805][ T4294] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 61.352109][ T4294] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 61.366576][ T4210] Bluetooth: hci4: command 0x0419 tx timeout [ 61.373136][ T4210] Bluetooth: hci2: command 0x0419 tx timeout [ 61.386747][ T4299] device syzkaller0 entered promiscuous mode [ 61.391201][ T4210] Bluetooth: hci0: command 0x0419 tx timeout [ 61.411566][ T4210] Bluetooth: hci1: command 0x0419 tx timeout [ 61.417779][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 61.424060][ T4210] Bluetooth: hci3: command 0x0419 tx timeout [ 61.430913][ T4296] tipc: Resetting bearer [ 61.479030][ T4296] tipc: Disabling bearer [ 61.564182][ T4234] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 61.573937][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.595781][ T4307] FAULT_INJECTION: forcing a failure. [ 61.595781][ T4307] name failslab, interval 1, probability 0, space 0, times 0 [ 61.609343][ T4307] CPU: 1 PID: 4307 Comm: syz.4.17 Not tainted syzkaller #0 [ 61.616572][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.626671][ T4307] Call Trace: [ 61.629960][ T4307] [ 61.632894][ T4307] dump_stack_lvl+0x188/0x250 [ 61.637591][ T4307] ? show_regs_print_info+0x20/0x20 [ 61.642813][ T4307] ? load_image+0x410/0x410 [ 61.647334][ T4307] ? __might_sleep+0xf0/0xf0 [ 61.651939][ T4307] ? __lock_acquire+0x7d40/0x7d40 [ 61.656213][ T13] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 61.656976][ T4307] should_fail+0x383/0x4b0 [ 61.657007][ T4307] should_failslab+0x5/0x20 [ 61.673353][ T4307] slab_pre_alloc_hook+0x51/0xc0 [ 61.678299][ T4307] ? ptlock_alloc+0x1c/0x60 [ 61.683243][ T4307] kmem_cache_alloc+0x3d/0x280 [ 61.688021][ T4307] ptlock_alloc+0x1c/0x60 [ 61.692350][ T4307] pte_alloc_one+0xc0/0x310 [ 61.696843][ T4307] ? rcu_lock_release+0x20/0x20 [ 61.701685][ T4307] ? __might_sleep+0xf0/0xf0 [ 61.706295][ T4307] ? __lock_acquire+0x7d40/0x7d40 [ 61.711312][ T4307] ? validate_mm+0x593/0xa50 [ 61.715890][ T4307] __pte_alloc+0x21/0x150 [ 61.720210][ T4307] move_page_tables+0xfcd/0x1830 [ 61.725143][ T4307] ? do_mprotect_pkey+0x910/0x910 [ 61.730162][ T4307] move_vma+0x429/0xbc0 [ 61.734310][ T4307] ? vma_expandable+0x110/0x110 [ 61.739145][ T4307] ? cap_mmap_addr+0x153/0x2c0 [ 61.743896][ T4307] ? bpf_lsm_file_free_security+0x10/0x10 [ 61.749602][ T4307] ? security_mmap_addr+0x6e/0x90 [ 61.754616][ T4307] ? get_unmapped_area+0x2f0/0x360 [ 61.759722][ T4307] mremap_to+0x556/0x6b0 [ 61.763960][ T4307] __se_sys_mremap+0x412/0x950 [ 61.768716][ T4307] ? __x64_sys_mremap+0xc0/0xc0 [ 61.773570][ T4307] ? lock_chain_count+0x20/0x20 [ 61.778433][ T4307] ? lockdep_hardirqs_on+0x94/0x140 [ 61.783626][ T4307] ? __x64_sys_mremap+0x1c/0xc0 [ 61.788479][ T4307] do_syscall_64+0x4c/0xa0 [ 61.792892][ T4307] ? clear_bhb_loop+0x30/0x80 [ 61.797560][ T4307] ? clear_bhb_loop+0x30/0x80 [ 61.802222][ T4307] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.808102][ T4307] RIP: 0033:0x7f8b0bc331d9 [ 61.812504][ T4307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.832098][ T4307] RSP: 002b:00007f8b09e8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 61.840507][ T4307] RAX: ffffffffffffffda RBX: 00007f8b0bebafa0 RCX: 00007f8b0bc331d9 [ 61.848471][ T4307] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 61.856429][ T4307] RBP: 00007f8b0bcca888 R08: 0000200000ffd000 R09: 0000000000000000 [ 61.864390][ T4307] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 61.872346][ T4307] R13: 00007f8b0bebb038 R14: 00007f8b0bebafa0 R15: 00007ffcb0692948 [ 61.880318][ T4307] [ 61.985646][ T4316] FAULT_INJECTION: forcing a failure. [ 61.985646][ T4316] name failslab, interval 1, probability 0, space 0, times 0 [ 62.008514][ T4316] CPU: 0 PID: 4316 Comm: syz.4.20 Not tainted syzkaller #0 [ 62.015772][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.025842][ T4316] Call Trace: [ 62.029143][ T4316] [ 62.032090][ T4316] dump_stack_lvl+0x188/0x250 [ 62.036786][ T4316] ? show_regs_print_info+0x20/0x20 [ 62.042002][ T4316] ? load_image+0x410/0x410 [ 62.046525][ T4316] ? __might_sleep+0xf0/0xf0 [ 62.051165][ T4316] ? __lock_acquire+0x7d40/0x7d40 [ 62.056219][ T4316] should_fail+0x383/0x4b0 [ 62.060661][ T4316] should_failslab+0x5/0x20 [ 62.065193][ T4316] slab_pre_alloc_hook+0x51/0xc0 [ 62.070162][ T4316] __kmalloc+0x6b/0x340 [ 62.074329][ T4316] ? comedi_alloc_subdevices+0x46/0x230 [ 62.079888][ T4316] ? comedi_8254_init+0x572/0x6b0 [ 62.084971][ T4316] comedi_alloc_subdevices+0x46/0x230 [ 62.090362][ T4316] das16m1_attach+0x312/0xad0 [ 62.095037][ T4316] ? __raw_spin_lock_init+0x41/0x100 [ 62.100338][ T4316] comedi_device_attach+0x522/0x710 [ 62.105546][ T4316] comedi_unlocked_ioctl+0x674/0x1240 [ 62.110917][ T4316] ? kfree+0xef/0x2a0 [ 62.114892][ T4316] ? comedi_poll+0x8d0/0x8d0 [ 62.119518][ T4316] ? bpf_lsm_file_ioctl+0x5/0x10 [ 62.124445][ T4316] ? security_file_ioctl+0x7c/0xa0 [ 62.129545][ T4316] ? comedi_poll+0x8d0/0x8d0 [ 62.134135][ T4316] __se_sys_ioctl+0xfa/0x170 [ 62.138720][ T4316] do_syscall_64+0x4c/0xa0 [ 62.143219][ T4316] ? clear_bhb_loop+0x30/0x80 [ 62.147911][ T4316] ? clear_bhb_loop+0x30/0x80 [ 62.152579][ T4316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.158557][ T4316] RIP: 0033:0x7f8b0bc331d9 [ 62.162960][ T4316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.182560][ T4316] RSP: 002b:00007f8b09e8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.190973][ T4316] RAX: ffffffffffffffda RBX: 00007f8b0bebafa0 RCX: 00007f8b0bc331d9 [ 62.198934][ T4316] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000005 [ 62.206896][ T4316] RBP: 00007f8b0bcca888 R08: 0000000000000000 R09: 0000000000000000 [ 62.214859][ T4316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.222841][ T4316] R13: 00007f8b0bebb038 R14: 00007f8b0bebafa0 R15: 00007ffcb0692948 [ 62.230820][ T4316] [ 62.247824][ T4234] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 62.270764][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.287409][ T4234] usb 2-1: Product: syz [ 62.291626][ T4234] usb 2-1: Manufacturer: syz [ 62.297230][ T4234] usb 2-1: SerialNumber: syz [ 62.318878][ T4234] usb 2-1: config 0 descriptor?? [ 62.324880][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.370323][ T4234] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 62.576156][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 62.666437][ T13] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 62.676000][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.724017][ T13] usb 4-1: Product: syz [ 62.728658][ T13] usb 4-1: Manufacturer: syz [ 62.733765][ T13] usb 4-1: SerialNumber: syz [ 62.766417][ T13] usb 4-1: config 0 descriptor?? [ 62.849028][ T4339] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 62.857372][ T4339] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 62.928403][ T4345] tipc: Started in network mode [ 62.933573][ T4345] tipc: Node identity baf17013fcc4, cluster identity 4711 [ 62.941206][ T4345] tipc: Enabled bearer , priority 0 [ 62.999055][ T4345] device syzkaller0 entered promiscuous mode [ 63.029597][ T13] usb 4-1: ignoring: probably an ADSL modem [ 63.059416][ T4344] tipc: Resetting bearer [ 63.078697][ T4349] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 63.090312][ T4349] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 63.109456][ T4344] tipc: Disabling bearer [ 63.203672][ T4360] FAULT_INJECTION: forcing a failure. [ 63.203672][ T4360] name failslab, interval 1, probability 0, space 0, times 0 [ 63.246276][ T4360] CPU: 1 PID: 4360 Comm: syz.0.30 Not tainted syzkaller #0 [ 63.253523][ T4360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.263588][ T4360] Call Trace: [ 63.266872][ T4360] [ 63.269813][ T4360] dump_stack_lvl+0x188/0x250 [ 63.274507][ T4360] ? show_regs_print_info+0x20/0x20 [ 63.279712][ T4360] ? load_image+0x410/0x410 [ 63.284231][ T4360] ? __might_sleep+0xf0/0xf0 [ 63.288840][ T4360] ? __lock_acquire+0x7d40/0x7d40 [ 63.293890][ T4360] should_fail+0x383/0x4b0 [ 63.298335][ T4360] should_failslab+0x5/0x20 [ 63.302856][ T4360] slab_pre_alloc_hook+0x51/0xc0 [ 63.307839][ T4360] ? ptlock_alloc+0x1c/0x60 [ 63.312371][ T4360] kmem_cache_alloc+0x3d/0x280 [ 63.317194][ T4360] ptlock_alloc+0x1c/0x60 [ 63.321536][ T4360] pte_alloc_one+0xc0/0x310 [ 63.326045][ T4360] ? rcu_lock_release+0x20/0x20 [ 63.330896][ T4360] ? __might_sleep+0xf0/0xf0 [ 63.335530][ T4360] ? do_raw_spin_lock+0x128/0x2f0 [ 63.340573][ T4360] ? __rwlock_init+0x140/0x140 [ 63.345335][ T4360] __pte_alloc+0x21/0x150 [ 63.349657][ T4360] move_page_tables+0xfcd/0x1830 [ 63.354602][ T4360] ? do_mprotect_pkey+0x910/0x910 [ 63.359622][ T4360] move_vma+0x429/0xbc0 [ 63.363771][ T4360] ? vma_expandable+0x110/0x110 [ 63.368603][ T4360] ? cap_mmap_addr+0x153/0x2c0 [ 63.373350][ T4360] ? bpf_lsm_file_free_security+0x10/0x10 [ 63.379051][ T4360] ? security_mmap_addr+0x6e/0x90 [ 63.384061][ T4360] ? get_unmapped_area+0x2f0/0x360 [ 63.389158][ T4360] mremap_to+0x556/0x6b0 [ 63.393392][ T4360] __se_sys_mremap+0x412/0x950 [ 63.398152][ T4360] ? __x64_sys_mremap+0xc0/0xc0 [ 63.402989][ T4360] ? lock_chain_count+0x20/0x20 [ 63.407828][ T4360] ? lockdep_hardirqs_on+0x94/0x140 [ 63.413013][ T4360] ? __x64_sys_mremap+0x1c/0xc0 [ 63.417850][ T4360] do_syscall_64+0x4c/0xa0 [ 63.422249][ T4360] ? clear_bhb_loop+0x30/0x80 [ 63.427430][ T4360] ? clear_bhb_loop+0x30/0x80 [ 63.432096][ T4360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.437973][ T4360] RIP: 0033:0x7f3c393871d9 [ 63.442374][ T4360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.461967][ T4360] RSP: 002b:00007f3c375df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 63.470374][ T4360] RAX: ffffffffffffffda RBX: 00007f3c3960efa0 RCX: 00007f3c393871d9 [ 63.478331][ T4360] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 63.486289][ T4360] RBP: 00007f3c3941e888 R08: 0000200000ffd000 R09: 0000000000000000 [ 63.494244][ T4360] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 63.502198][ T4360] R13: 00007f3c3960f038 R14: 00007f3c3960efa0 R15: 00007ffe79fbd408 [ 63.510167][ T4360] [ 63.566501][ T13] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 63.606317][ T13] usb 4-1: USB disconnect, device number 2 [ 64.025886][ T4327] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.114241][ T4369] FAULT_INJECTION: forcing a failure. [ 64.114241][ T4369] name failslab, interval 1, probability 0, space 0, times 0 [ 64.133518][ T4369] CPU: 0 PID: 4369 Comm: syz.3.35 Not tainted syzkaller #0 [ 64.140765][ T4369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.150863][ T4369] Call Trace: [ 64.154138][ T4369] [ 64.157059][ T4369] dump_stack_lvl+0x188/0x250 [ 64.161729][ T4369] ? show_regs_print_info+0x20/0x20 [ 64.166914][ T4369] ? load_image+0x410/0x410 [ 64.171409][ T4369] ? __might_sleep+0xf0/0xf0 [ 64.175986][ T4369] ? __lock_acquire+0x7d40/0x7d40 [ 64.181000][ T4369] should_fail+0x383/0x4b0 [ 64.185408][ T4369] should_failslab+0x5/0x20 [ 64.189906][ T4369] slab_pre_alloc_hook+0x51/0xc0 [ 64.194844][ T4369] kmem_cache_alloc_trace+0x47/0x290 [ 64.200116][ T4369] ? __request_region+0x5b/0xd0 [ 64.204962][ T4369] __request_region+0x5b/0xd0 [ 64.209628][ T4369] __comedi_request_region+0x66/0x130 [ 64.214994][ T4369] das16m1_attach+0xc2/0xad0 [ 64.219573][ T4369] ? __raw_spin_lock_init+0x41/0x100 [ 64.224854][ T4369] comedi_device_attach+0x522/0x710 [ 64.230044][ T4369] comedi_unlocked_ioctl+0x674/0x1240 [ 64.235409][ T4369] ? kfree+0xef/0x2a0 [ 64.239383][ T4369] ? comedi_poll+0x8d0/0x8d0 [ 64.244001][ T4369] ? bpf_lsm_file_ioctl+0x5/0x10 [ 64.248923][ T4369] ? security_file_ioctl+0x7c/0xa0 [ 64.254023][ T4369] ? comedi_poll+0x8d0/0x8d0 [ 64.258596][ T4369] __se_sys_ioctl+0xfa/0x170 [ 64.263174][ T4369] do_syscall_64+0x4c/0xa0 [ 64.267580][ T4369] ? clear_bhb_loop+0x30/0x80 [ 64.272245][ T4369] ? clear_bhb_loop+0x30/0x80 [ 64.276907][ T4369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.282843][ T4369] RIP: 0033:0x7f985b3ad1d9 [ 64.287245][ T4369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.306843][ T4369] RSP: 002b:00007f9859605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.315248][ T4369] RAX: ffffffffffffffda RBX: 00007f985b634fa0 RCX: 00007f985b3ad1d9 [ 64.323208][ T4369] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000005 [ 64.331178][ T4369] RBP: 00007f985b444888 R08: 0000000000000000 R09: 0000000000000000 [ 64.339249][ T4369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.347224][ T4369] R13: 00007f985b635038 R14: 00007f985b634fa0 R15: 00007ffcd20326e8 [ 64.355203][ T4369] [ 64.363057][ T4369] comedi comedi2: das16m1: I/O port conflict (0x540,8) [ 64.486572][ T4327] usb 1-1: Using ep0 maxpacket: 32 [ 64.535713][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.606448][ T4234] gspca_sunplus: reg_r err -71 [ 64.614430][ T4234] sunplus: probe of 2-1:0.0 failed with error -71 [ 64.654603][ T4234] usb 2-1: USB disconnect, device number 2 [ 64.687104][ T4327] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.771676][ T4327] usb 1-1: config 12 has an invalid interface number: 193 but max is 0 [ 64.790518][ T4327] usb 1-1: config 12 has no interface number 0 [ 64.805307][ T4327] usb 1-1: config 12 interface 193 has no altsetting 0 [ 65.087143][ T4327] usb 1-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=20.3e [ 65.118591][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.150221][ T4327] usb 1-1: Product: syz [ 65.178250][ T4327] usb 1-1: Manufacturer: syz [ 65.196443][ T4327] usb 1-1: SerialNumber: syz [ 65.440636][ T4385] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 65.448851][ T4385] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 65.557373][ T4327] usb 1-1: USB disconnect, device number 2 [ 66.788451][ T1544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.094375][ T4408] netlink: 'syz.3.54': attribute type 3 has an invalid length. [ 67.386211][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.474438][ T4422] FAULT_INJECTION: forcing a failure. [ 67.474438][ T4422] name failslab, interval 1, probability 0, space 0, times 0 [ 67.509341][ T4422] CPU: 0 PID: 4422 Comm: syz.1.48 Not tainted syzkaller #0 [ 67.516594][ T4422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.526660][ T4422] Call Trace: [ 67.529943][ T4422] [ 67.532873][ T4422] dump_stack_lvl+0x188/0x250 [ 67.537562][ T4422] ? show_regs_print_info+0x20/0x20 [ 67.542774][ T4422] ? load_image+0x410/0x410 [ 67.547294][ T4422] ? __might_sleep+0xf0/0xf0 [ 67.551885][ T4422] ? __lock_acquire+0x7d40/0x7d40 [ 67.556917][ T4422] should_fail+0x383/0x4b0 [ 67.561347][ T4422] should_failslab+0x5/0x20 [ 67.565855][ T4422] slab_pre_alloc_hook+0x51/0xc0 [ 67.570798][ T4422] ? ptlock_alloc+0x1c/0x60 [ 67.575305][ T4422] kmem_cache_alloc+0x3d/0x280 [ 67.580063][ T4422] ptlock_alloc+0x1c/0x60 [ 67.584385][ T4422] pte_alloc_one+0xc0/0x310 [ 67.588876][ T4422] ? rcu_lock_release+0x20/0x20 [ 67.593712][ T4422] ? __might_sleep+0xf0/0xf0 [ 67.598292][ T4422] ? __lock_acquire+0x7d40/0x7d40 [ 67.603314][ T4422] ? validate_mm+0x593/0xa50 [ 67.607897][ T4422] __pte_alloc+0x21/0x150 [ 67.612222][ T4422] move_page_tables+0xfcd/0x1830 [ 67.617158][ T4422] ? do_mprotect_pkey+0x910/0x910 [ 67.622182][ T4422] move_vma+0x429/0xbc0 [ 67.626330][ T4422] ? vma_expandable+0x110/0x110 [ 67.631167][ T4422] ? cap_mmap_addr+0x153/0x2c0 [ 67.635916][ T4422] ? bpf_lsm_file_free_security+0x10/0x10 [ 67.641623][ T4422] ? security_mmap_addr+0x6e/0x90 [ 67.646631][ T4422] ? get_unmapped_area+0x2f0/0x360 [ 67.651732][ T4422] mremap_to+0x556/0x6b0 [ 67.655970][ T4422] __se_sys_mremap+0x412/0x950 [ 67.660725][ T4422] ? __x64_sys_mremap+0xc0/0xc0 [ 67.665558][ T4422] ? lock_chain_count+0x20/0x20 [ 67.670397][ T4422] ? lockdep_hardirqs_on+0x94/0x140 [ 67.675585][ T4422] ? __x64_sys_mremap+0x1c/0xc0 [ 67.680419][ T4422] do_syscall_64+0x4c/0xa0 [ 67.684820][ T4422] ? clear_bhb_loop+0x30/0x80 [ 67.689492][ T4422] ? clear_bhb_loop+0x30/0x80 [ 67.694162][ T4422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.700042][ T4422] RIP: 0033:0x7f78453871d9 [ 67.704442][ T4422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.724032][ T4422] RSP: 002b:00007f78435df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 67.732435][ T4422] RAX: ffffffffffffffda RBX: 00007f784560efa0 RCX: 00007f78453871d9 [ 67.740393][ T4422] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 67.748525][ T4422] RBP: 00007f784541e888 R08: 0000200000ffd000 R09: 0000000000000000 [ 67.756487][ T4422] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 67.764445][ T4422] R13: 00007f784560f038 R14: 00007f784560efa0 R15: 00007ffc768196e8 [ 67.772414][ T4422] [ 67.906218][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 68.027017][ T1108] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 68.045670][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.216331][ T1108] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 68.235928][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.266044][ T1108] usb 5-1: Product: syz [ 68.276283][ T1108] usb 5-1: Manufacturer: syz [ 68.280909][ T1108] usb 5-1: SerialNumber: syz [ 68.297533][ T1108] usb 5-1: config 0 descriptor?? [ 68.349297][ T1108] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 68.376178][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 68.396177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 68.406162][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 68.426160][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.436152][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.446170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.456153][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.466148][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.766497][ T4188] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.030204][ T4188] usb 2-1: Using ep0 maxpacket: 32 [ 69.156349][ T4188] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 69.175967][ T4188] usb 2-1: config 0 has no interface number 0 [ 69.204751][ T4188] usb 2-1: config 0 interface 12 has no altsetting 0 [ 69.270873][ T4439] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 69.319581][ T4439] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 69.406525][ T4188] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 69.417157][ T4188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.435927][ T4188] usb 2-1: Product: syz [ 69.446052][ T4188] usb 2-1: Manufacturer: syz [ 69.466407][ T4188] usb 2-1: SerialNumber: syz [ 69.478860][ T4188] usb 2-1: config 0 descriptor?? [ 69.800687][ T4445] kvm: emulating exchange as write [ 69.824672][ T4445] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.982753][ T4448] FAULT_INJECTION: forcing a failure. [ 69.982753][ T4448] name failslab, interval 1, probability 0, space 0, times 0 [ 70.009019][ T4448] CPU: 0 PID: 4448 Comm: syz.2.65 Not tainted syzkaller #0 [ 70.016275][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.026366][ T4448] Call Trace: [ 70.029797][ T4448] [ 70.032723][ T4448] dump_stack_lvl+0x188/0x250 [ 70.037393][ T4448] ? show_regs_print_info+0x20/0x20 [ 70.042583][ T4448] ? load_image+0x410/0x410 [ 70.047084][ T4448] ? __might_sleep+0xf0/0xf0 [ 70.051664][ T4448] ? __lock_acquire+0x7d40/0x7d40 [ 70.056693][ T4448] should_fail+0x383/0x4b0 [ 70.061102][ T4448] should_failslab+0x5/0x20 [ 70.065581][ T4448] slab_pre_alloc_hook+0x51/0xc0 [ 70.070505][ T4448] ? radix_tree_node_alloc+0x7e/0x3a0 [ 70.075882][ T4448] kmem_cache_alloc+0x3d/0x280 [ 70.080641][ T4448] radix_tree_node_alloc+0x7e/0x3a0 [ 70.085851][ T4448] ? __mutex_trylock_common+0x15c/0x260 [ 70.091416][ T4448] radix_tree_extend+0x13a/0x5a0 [ 70.096342][ T4448] idr_get_free+0x1b3/0xa10 [ 70.100832][ T4448] idr_alloc+0x199/0x2e0 [ 70.105127][ T4448] ? idr_alloc_u32+0x330/0x330 [ 70.109880][ T4448] loop_add+0xe2/0x890 [ 70.113932][ T4448] loop_control_ioctl+0x124/0x550 [ 70.118939][ T4448] ? xor_init+0x60/0x60 [ 70.123084][ T4448] ? bpf_lsm_file_ioctl+0x5/0x10 [ 70.128005][ T4448] ? security_file_ioctl+0x7c/0xa0 [ 70.133110][ T4448] ? xor_init+0x60/0x60 [ 70.137248][ T4448] __se_sys_ioctl+0xfa/0x170 [ 70.141818][ T4448] do_syscall_64+0x4c/0xa0 [ 70.146215][ T4448] ? clear_bhb_loop+0x30/0x80 [ 70.150876][ T4448] ? clear_bhb_loop+0x30/0x80 [ 70.155537][ T4448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.161434][ T4448] RIP: 0033:0x7fd9edf281d9 [ 70.165831][ T4448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.185422][ T4448] RSP: 002b:00007fd9ec180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.193818][ T4448] RAX: ffffffffffffffda RBX: 00007fd9ee1affa0 RCX: 00007fd9edf281d9 [ 70.201794][ T4448] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 70.209750][ T4448] RBP: 00007fd9edfbf888 R08: 0000000000000000 R09: 0000000000000000 [ 70.217711][ T4448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.225668][ T4448] R13: 00007fd9ee1b0038 R14: 00007fd9ee1affa0 R15: 00007fff51fc9818 [ 70.233633][ T4448] [ 70.256536][ T1108] gspca_sunplus: reg_r err -71 [ 70.262269][ T1108] sunplus: probe of 5-1:0.0 failed with error -71 [ 70.316723][ T1108] usb 5-1: USB disconnect, device number 2 [ 70.412337][ T4451] netlink: 'syz.0.67': attribute type 3 has an invalid length. [ 70.807103][ T4269] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.505669][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.512382][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.556199][ T4269] usb 1-1: Using ep0 maxpacket: 8 [ 71.873908][ T4233] nvmet: connect request for invalid subsystem t! [ 71.886478][ T4269] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 71.892317][ T4468] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 71.895749][ T4269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.974170][ T4269] usb 1-1: Product: syz [ 71.978715][ T4269] usb 1-1: Manufacturer: syz [ 71.983318][ T4269] usb 1-1: SerialNumber: syz [ 72.016854][ T4269] usb 1-1: config 0 descriptor?? [ 72.264567][ T4472] page:ffffea0001cb0000 refcount:8 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72c00 [ 72.275932][ T4269] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 72.336335][ T4472] head:ffffea0001cb0000 order:3 compound_mapcount:0 compound_pincount:0 [ 72.399426][ T4472] flags: 0xfff00000010000(head|node=0|zone=1|lastcpupid=0x7ff) [ 72.481611][ T4472] raw: 00fff00000010000 0000000000000000 dead000000000122 0000000000000000 [ 72.516373][ T4472] raw: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 72.530436][ T4472] page dumped because: unmovable page [ 72.546524][ T4472] page_owner tracks the page as allocated [ 72.579740][ T4472] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, ts 43093307252, free_ts 17356779556 [ 72.643888][ T4472] get_page_from_freelist+0x24f6/0x2670 [ 72.763578][ T4472] __alloc_pages+0x1ee/0x480 [ 72.769174][ T4472] skb_page_frag_refill+0x225/0x4c0 [ 72.774662][ T4472] try_fill_recv+0x6c8/0x1720 [ 72.976366][ T4472] virtnet_poll+0x746/0xfb0 [ 72.981219][ T4472] __napi_poll+0xbb/0x430 [ 72.985650][ T4472] net_rx_action+0x522/0xa80 [ 73.000185][ T4472] handle_softirqs+0x336/0x830 [ 73.005344][ T4472] __irq_exit_rcu+0x13b/0x230 [ 73.012765][ T4472] irq_exit_rcu+0x5/0x20 [ 73.246821][ T4472] common_interrupt+0xb5/0xd0 [ 73.251662][ T4472] asm_common_interrupt+0x22/0x40 [ 73.282420][ T4472] default_idle+0xb/0x10 [ 73.302451][ T4472] default_idle_call+0x81/0xc0 [ 73.307877][ T4472] do_idle+0x3a1/0x650 [ 73.312092][ T4472] cpu_startup_entry+0x14/0x20 [ 73.366238][ T4472] page last free stack trace: [ 73.393630][ T4472] free_unref_page_prepare+0x637/0x6c0 [ 73.435705][ T4472] free_unref_page+0x8f/0x2a0 [ 73.441474][ T4487] loop1: detected capacity change from 0 to 256 [ 73.441741][ T4472] free_contig_range+0x96/0xf0 [ 73.545951][ T4487] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 73.589106][ T4472] destroy_args+0xef/0xa00 [ 73.596319][ T4188] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 73.626291][ T4188] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 73.644729][ T4472] debug_vm_pgtable+0x321/0x380 [ 73.665008][ T4188] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 73.677080][ T25] audit: type=1800 audit(1791529082.817:2): pid=4487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.79" name="file2" dev="loop1" ino=1048625 res=0 errno=0 [ 73.703215][ T4487] exFAT-fs (loop1): hint_cluster is invalid (17) [ 73.736472][ T4188] f81534: probe of 2-1:0.12 failed with error -71 [ 73.756391][ T4472] do_one_initcall+0x272/0x730 [ 73.789522][ T4188] usb 2-1: USB disconnect, device number 3 [ 73.796472][ T4472] do_initcall_level+0x13d/0x1f0 [ 73.812186][ T4472] do_initcalls+0x4b/0x90 [ 73.827067][ T4472] kernel_init_freeable+0x3d5/0x560 [ 73.839158][ T4472] kernel_init+0x19/0x1b0 [ 73.849247][ T4472] ret_from_fork+0x1f/0x30 [ 73.926353][ T4269] usb write operation failed. (-71) [ 74.000542][ T4269] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 74.060184][ T4498] netlink: 'syz.1.80': attribute type 3 has an invalid length. [ 74.070922][ T4269] dvbdev: DVB: registering new adapter (Terratec H7) [ 74.088823][ T4269] usb 1-1: media controller created [ 74.121296][ T4269] usb read operation failed. (-71) [ 74.166468][ T4269] usb write operation failed. (-71) [ 74.204936][ T4269] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 74.230744][ T4269] usb 1-1: USB disconnect, device number 3 [ 74.411365][ T4327] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.786198][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.339975][ T4269] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.497160][ T4327] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.576834][ T4327] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 75.598638][ T4327] usb 4-1: can't read configurations, error -71 [ 75.796719][ T4269] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 75.826246][ T4269] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.867199][ T4524] loop1: detected capacity change from 0 to 256 [ 75.871631][ T4269] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.892510][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.923193][ T4269] usb 1-1: config 0 descriptor?? [ 75.994619][ T4524] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 76.020032][ T4269] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 76.893457][ T4530] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.985181][ T25] audit: type=1800 audit(1791529086.117:3): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.90" name="file2" dev="loop1" ino=1048626 res=0 errno=0 [ 77.008691][ T4532] exFAT-fs (loop1): hint_cluster is invalid (17) [ 77.877837][ T4537] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.885777][ T4537] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 78.051449][ T4555] FAULT_INJECTION: forcing a failure. [ 78.051449][ T4555] name failslab, interval 1, probability 0, space 0, times 0 [ 78.090641][ T4555] CPU: 1 PID: 4555 Comm: syz.4.97 Not tainted syzkaller #0 [ 78.097876][ T4555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.107923][ T4555] Call Trace: [ 78.111216][ T4555] [ 78.114132][ T4555] dump_stack_lvl+0x188/0x250 [ 78.118818][ T4555] ? show_regs_print_info+0x20/0x20 [ 78.124002][ T4555] ? load_image+0x410/0x410 [ 78.128495][ T4555] ? __might_sleep+0xf0/0xf0 [ 78.133091][ T4555] ? __lock_acquire+0x7d40/0x7d40 [ 78.138105][ T4555] should_fail+0x383/0x4b0 [ 78.142520][ T4555] should_failslab+0x5/0x20 [ 78.147012][ T4555] slab_pre_alloc_hook+0x51/0xc0 [ 78.151935][ T4555] ? radix_tree_node_alloc+0x7e/0x3a0 [ 78.157297][ T4555] kmem_cache_alloc+0x3d/0x280 [ 78.162074][ T4555] radix_tree_node_alloc+0x7e/0x3a0 [ 78.167267][ T4555] idr_get_free+0x28b/0xa10 [ 78.171766][ T4555] idr_alloc+0x199/0x2e0 [ 78.176015][ T4555] ? idr_alloc_u32+0x330/0x330 [ 78.180803][ T4555] loop_add+0xe2/0x890 [ 78.184866][ T4555] loop_control_ioctl+0x124/0x550 [ 78.189879][ T4555] ? xor_init+0x60/0x60 [ 78.194024][ T4555] ? bpf_lsm_file_ioctl+0x5/0x10 [ 78.198948][ T4555] ? security_file_ioctl+0x7c/0xa0 [ 78.204047][ T4555] ? xor_init+0x60/0x60 [ 78.208193][ T4555] __se_sys_ioctl+0xfa/0x170 [ 78.212769][ T4555] do_syscall_64+0x4c/0xa0 [ 78.217169][ T4555] ? clear_bhb_loop+0x30/0x80 [ 78.221829][ T4555] ? clear_bhb_loop+0x30/0x80 [ 78.226498][ T4555] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.232397][ T4555] RIP: 0033:0x7f8b0bc331d9 [ 78.236810][ T4555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.256408][ T4555] RSP: 002b:00007f8b09e8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.264841][ T4555] RAX: ffffffffffffffda RBX: 00007f8b0bebafa0 RCX: 00007f8b0bc331d9 [ 78.272830][ T4555] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 78.280816][ T4555] RBP: 00007f8b0bcca888 R08: 0000000000000000 R09: 0000000000000000 [ 78.288813][ T4555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.296776][ T4555] R13: 00007f8b0bebb038 R14: 00007f8b0bebafa0 R15: 00007ffcb0692948 [ 78.304742][ T4555] [ 78.414253][ T4188] usb 1-1: USB disconnect, device number 4 [ 78.846210][ T4188] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 78.959751][ T4567] netlink: 60 bytes leftover after parsing attributes in process `syz.4.101'. [ 78.992146][ T4567] netlink: 60 bytes leftover after parsing attributes in process `syz.4.101'. [ 79.059721][ T4568] netlink: 60 bytes leftover after parsing attributes in process `syz.4.101'. [ 79.161635][ T4571] page:ffffea0001cb0000 refcount:8 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72c00 [ 79.192558][ T4571] head:ffffea0001cb0000 order:3 compound_mapcount:0 compound_pincount:0 [ 79.209923][ T4571] flags: 0xfff00000010000(head|node=0|zone=1|lastcpupid=0x7ff) [ 79.227874][ T4571] raw: 00fff00000010000 0000000000000000 dead000000000122 0000000000000000 [ 79.247089][ T4571] raw: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 79.255729][ T4571] page dumped because: unmovable page [ 79.282469][ T4571] page_owner tracks the page as allocated [ 79.290609][ T4571] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, ts 43093307252, free_ts 17356779556 [ 79.317549][ T4571] get_page_from_freelist+0x24f6/0x2670 [ 79.323150][ T4571] __alloc_pages+0x1ee/0x480 [ 79.357341][ T4571] skb_page_frag_refill+0x225/0x4c0 [ 79.366311][ T4571] try_fill_recv+0x6c8/0x1720 [ 79.371504][ T4571] virtnet_poll+0x746/0xfb0 [ 79.378038][ T4188] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 79.381692][ T4571] __napi_poll+0xbb/0x430 [ 79.397240][ T4188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.402115][ T4571] net_rx_action+0x522/0xa80 [ 79.405263][ T4188] usb 1-1: Product: syz [ 79.405286][ T4188] usb 1-1: Manufacturer: syz [ 79.405298][ T4188] usb 1-1: SerialNumber: syz [ 79.422354][ T4571] handle_softirqs+0x336/0x830 [ 79.428623][ T4571] __irq_exit_rcu+0x13b/0x230 [ 79.436383][ T4571] irq_exit_rcu+0x5/0x20 [ 79.446384][ T4571] common_interrupt+0xb5/0xd0 [ 79.456840][ T4571] asm_common_interrupt+0x22/0x40 [ 79.466578][ T4571] default_idle+0xb/0x10 [ 79.468440][ T4188] usb 1-1: config 0 descriptor?? [ 79.483799][ T4571] default_idle_call+0x81/0xc0 [ 79.496572][ T4571] do_idle+0x3a1/0x650 [ 79.500966][ T4571] cpu_startup_entry+0x14/0x20 [ 79.508160][ T4188] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 79.516475][ T4571] page last free stack trace: [ 79.521426][ T4571] free_unref_page_prepare+0x637/0x6c0 [ 79.536453][ T4571] free_unref_page+0x8f/0x2a0 [ 79.562206][ T4571] free_contig_range+0x96/0xf0 [ 79.576430][ T4571] destroy_args+0xef/0xa00 [ 79.596285][ T4571] debug_vm_pgtable+0x321/0x380 [ 79.622955][ T4571] do_one_initcall+0x272/0x730 [ 79.641850][ T4571] do_initcall_level+0x13d/0x1f0 [ 79.667423][ T4571] do_initcalls+0x4b/0x90 [ 79.692611][ T4571] kernel_init_freeable+0x3d5/0x560 [ 79.718754][ T4571] kernel_init+0x19/0x1b0 [ 79.740239][ T4571] ret_from_fork+0x1f/0x30 [ 79.766804][ T4572] page:ffffea0001800000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60000 [ 79.820109][ T4572] flags: 0xfff00000000002(referenced|node=0|zone=1|lastcpupid=0x7ff) [ 79.837869][ T4572] raw: 00fff00000000002 0000000000000000 dead000000000122 0000000000000000 [ 79.937238][ T4572] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 79.946447][ T4572] page dumped because: unmovable page [ 79.952133][ T4572] page_owner tracks the page as allocated [ 79.963123][ T4572] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 4489, ts 74097761066, free_ts 70713806565 [ 80.001297][ T4572] get_page_from_freelist+0x24f6/0x2670 [ 80.027963][ T4572] __alloc_pages+0x1ee/0x480 [ 80.097034][ T4572] __vmalloc_node_range+0x4b1/0x8b0 [ 80.166394][ T4572] vmalloc_user+0x70/0x80 [ 80.171613][ T4572] kcov_mmap+0x27/0x120 [ 80.175887][ T4572] mmap_file+0x5d/0xb0 [ 80.184010][ T4572] mmap_region+0x1048/0x1730 [ 80.188838][ T4572] do_mmap+0x801/0xe30 [ 80.194568][ T4572] vm_mmap_pgoff+0x1c1/0x2d0 [ 80.199348][ T4572] ksys_mmap_pgoff+0x4e2/0x790 [ 80.206198][ T4572] do_syscall_64+0x4c/0xa0 [ 80.210708][ T4572] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.217481][ T4572] page last free stack trace: [ 80.223573][ T4572] free_unref_page_prepare+0x637/0x6c0 [ 80.229789][ T4572] free_unref_page+0x8f/0x2a0 [ 80.235408][ T4572] genradix_free_recurse+0x5d/0xa0 [ 80.241957][ T4572] sctp_stream_free+0xcb/0x100 [ 80.248577][ T4572] sctp_association_free+0x269/0x7e0 [ 80.254546][ T4572] sctp_do_sm+0x379a/0x5690 [ 80.259330][ T4572] sctp_primitive_ABORT+0x94/0xc0 [ 80.266193][ T4572] sctp_close+0x2b0/0x890 [ 80.270593][ T4572] inet_release+0x139/0x180 [ 80.275868][ T4572] sock_close+0xbf/0x210 [ 80.283280][ T4572] __fput+0x212/0x8c0 [ 80.289938][ T4572] task_work_run+0x125/0x1a0 [ 80.295782][ T4572] exit_to_user_mode_loop+0x10f/0x130 [ 80.301927][ T4572] exit_to_user_mode_prepare+0xee/0x180 [ 80.308676][ T4572] syscall_exit_to_user_mode+0x16/0x40 [ 80.314859][ T4572] do_syscall_64+0x58/0xa0 [ 80.823135][ T4584] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.974124][ T4590] loop3: detected capacity change from 0 to 256 [ 81.013455][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 81.036026][ T4581] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 81.058587][ T4581] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 81.124876][ T4590] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 81.367107][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.428184][ T25] audit: type=1800 audit(1791529090.567:4): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.110" name="file2" dev="loop3" ino=1048627 res=0 errno=0 [ 81.452827][ T4596] exFAT-fs (loop3): hint_cluster is invalid (17) [ 81.466244][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.546698][ T1110] cfg80211: failed to load regulatory.db [ 81.726791][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.866639][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.916322][ T13] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 81.925864][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.935158][ T4188] gspca_stk1135: reg_w 0x2ff err -71 [ 81.941904][ T4188] gspca_stk1135: serial bus timeout: status=0x00 [ 81.948744][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.959304][ T13] usb 2-1: Product: syz [ 81.963479][ T13] usb 2-1: Manufacturer: syz [ 81.968536][ T1108] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 81.977978][ T4188] gspca_stk1135: Sensor write failed [ 81.983286][ T4188] gspca_stk1135: serial bus timeout: status=0x00 [ 81.990863][ T13] usb 2-1: SerialNumber: syz [ 81.996369][ T1108] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 82.015326][ T4188] gspca_stk1135: Sensor write failed [ 82.021134][ T4188] gspca_stk1135: serial bus timeout: status=0x00 [ 82.029241][ T1108] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 82.042811][ T4188] gspca_stk1135: Sensor read failed [ 82.050139][ T13] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 82.057172][ T4188] gspca_stk1135: serial bus timeout: status=0x00 [ 82.063675][ T1108] usb 5-1: config 1 interface 1 has no altsetting 1 [ 82.070870][ T4188] gspca_stk1135: Sensor read failed [ 82.076076][ T4188] gspca_stk1135: Detected sensor type unknown (0x0) [ 82.083281][ T4188] gspca_stk1135: serial bus timeout: status=0x00 [ 82.089939][ T4188] gspca_stk1135: Sensor read failed [ 82.095321][ T4188] gspca_stk1135: serial bus timeout: status=0x00 [ 82.103074][ T4188] gspca_stk1135: Sensor read failed [ 82.108746][ T4188] gspca_stk1135: serial bus timeout: status=0x00 [ 82.115080][ T4188] gspca_stk1135: Sensor write failed [ 82.121245][ T4188] gspca_stk1135: serial bus timeout: status=0x00 [ 82.127849][ T4188] gspca_stk1135: Sensor write failed [ 82.133568][ T4188] stk1135: probe of 1-1:0.0 failed with error -71 [ 82.143053][ T4188] usb 1-1: USB disconnect, device number 5 [ 82.236525][ T1108] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 82.245600][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.259778][ T1108] usb 5-1: Product: syz [ 82.263995][ T1108] usb 5-1: Manufacturer: syz [ 82.289732][ T1108] usb 5-1: SerialNumber: syz [ 82.346814][ T4233] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.706779][ T4233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.720368][ T1108] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 82.731940][ T4233] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.770179][ T1108] usb 5-1: USB disconnect, device number 3 [ 82.779009][ T4233] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.789060][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.822582][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.842817][ T4233] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 82.876236][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.616393][ T13] gspca_mr97310a: reg write [19] error -71 [ 83.622317][ T13] mr97310a: probe of 2-1:1.0 failed with error -71 [ 83.688275][ T13] usb 2-1: USB disconnect, device number 4 [ 84.116823][ T4233] [drm] Initialized gud 1.0.0 20200422 for 3-1:1.0 on minor 2 [ 84.412021][ T4639] loop0: detected capacity change from 0 to 256 [ 84.547553][ T4639] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 84.675882][ T4233] gud 3-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 84.756811][ T4233] usb 3-1: USB disconnect, device number 2 [ 84.813837][ T4642] jffs2: notice: (4642) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.891904][ T25] audit: type=1800 audit(1791529094.027:5): pid=4646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.125" name="file2" dev="loop0" ino=1048628 res=0 errno=0 [ 84.894157][ T4646] exFAT-fs (loop0): hint_cluster is invalid (17) [ 85.238193][ T4658] netlink: 'syz.1.130': attribute type 3 has an invalid length. [ 85.606753][ T1110] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 86.036442][ T1110] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.056245][ T1110] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.076198][ T1110] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 86.085881][ T1110] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.119455][ T1110] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 86.139678][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.575279][ T4682] 0x000000000000-0x000000010000 : "" [ 86.603975][ T4682] ftl_cs: FTL header not found. [ 86.633289][ T4682] FAULT_INJECTION: forcing a failure. [ 86.633289][ T4682] name failslab, interval 1, probability 0, space 0, times 0 [ 86.685908][ T4682] CPU: 0 PID: 4682 Comm: syz.3.139 Not tainted syzkaller #0 [ 86.693250][ T4682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.703331][ T4682] Call Trace: [ 86.706624][ T4682] [ 86.709569][ T4682] dump_stack_lvl+0x188/0x250 [ 86.714267][ T4682] ? show_regs_print_info+0x20/0x20 [ 86.719475][ T4682] ? load_image+0x410/0x410 [ 86.724030][ T4682] ? __might_sleep+0xf0/0xf0 [ 86.728625][ T4682] ? __lock_acquire+0x7d40/0x7d40 [ 86.733672][ T4682] should_fail+0x383/0x4b0 [ 86.738097][ T4682] should_failslab+0x5/0x20 [ 86.742601][ T4682] slab_pre_alloc_hook+0x51/0xc0 [ 86.747753][ T4682] ? __kernfs_new_node+0xe3/0x6b0 [ 86.752797][ T4682] kmem_cache_alloc+0x3d/0x280 [ 86.757554][ T4682] __kernfs_new_node+0xe3/0x6b0 [ 86.762392][ T4682] ? __lock_acquire+0x7d40/0x7d40 [ 86.767417][ T4682] ? kernfs_new_node+0x250/0x250 [ 86.772346][ T4682] ? kernfs_activate+0x1eb/0x210 [ 86.777265][ T4682] kernfs_new_node+0x148/0x250 [ 86.782012][ T4682] __kernfs_create_file+0x47/0x2e0 [ 86.787104][ T4682] sysfs_add_file_mode_ns+0x2d2/0x390 [ 86.792458][ T4682] internal_create_group+0x492/0xd00 [ 86.797740][ T4682] ? kobject_init+0x1c0/0x1c0 [ 86.802413][ T4682] ? sysfs_create_group+0x20/0x20 [ 86.807435][ T4682] blk_register_queue+0xdd/0x3a0 [ 86.812378][ T4682] device_add_disk+0x60f/0xde0 [ 86.817152][ T4682] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 86.822422][ T4682] mtdblock_add_mtd+0x186/0x240 [ 86.827257][ T4682] blktrans_notify_add+0x95/0xe0 [ 86.832177][ T4682] add_mtd_device+0xd40/0x1260 [ 86.836931][ T4682] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 86.842733][ T4682] ? mtd_cls_resume+0x130/0x130 [ 86.847577][ T4682] mtd_add_partition+0x25d/0x420 [ 86.852500][ T4682] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 86.857596][ T4682] ? shrink_ecclayout+0xab0/0xab0 [ 86.862620][ T4682] ? __might_fault+0xb3/0x110 [ 86.867282][ T4682] ? _copy_from_user+0x111/0x170 [ 86.872391][ T4682] mtdchar_ioctl+0x14cb/0x1d70 [ 86.877157][ T4682] ? mtdchar_close+0x180/0x180 [ 86.881903][ T4682] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.887888][ T4682] ? verify_lock_unused+0x140/0x140 [ 86.893162][ T4682] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 86.898798][ T4682] ? rcu_lock_release+0x5/0x20 [ 86.903569][ T4682] ? __mutex_trylock_common+0x15c/0x260 [ 86.909122][ T4682] ? rcu_lock_release+0x20/0x20 [ 86.913964][ T4682] ? __mutex_lock_common+0x435/0x2400 [ 86.919340][ T4682] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 86.924695][ T4682] ? mutex_lock_io_nested+0x60/0x60 [ 86.929883][ T4682] mtdchar_unlocked_ioctl+0xad/0xd0 [ 86.935062][ T4682] ? mtdchar_write+0x5a0/0x5a0 [ 86.939824][ T4682] __se_sys_ioctl+0xfa/0x170 [ 86.944423][ T4682] do_syscall_64+0x4c/0xa0 [ 86.948840][ T4682] ? clear_bhb_loop+0x30/0x80 [ 86.953500][ T4682] ? clear_bhb_loop+0x30/0x80 [ 86.958184][ T4682] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.964075][ T4682] RIP: 0033:0x7f985b3ad1d9 [ 86.968497][ T4682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.988355][ T4682] RSP: 002b:00007f9859605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.996757][ T4682] RAX: ffffffffffffffda RBX: 00007f985b634fa0 RCX: 00007f985b3ad1d9 [ 87.004730][ T4682] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000005 [ 87.012708][ T4682] RBP: 00007f985b444888 R08: 0000000000000000 R09: 0000000000000000 [ 87.020670][ T4682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.028638][ T4682] R13: 00007f985b635038 R14: 00007f985b634fa0 R15: 00007ffcd20326e8 [ 87.036618][ T4682] [ 87.111914][ T4682] ------------[ cut here ]------------ [ 87.129814][ T4682] WARNING: CPU: 1 PID: 4682 at block/genhd.c:554 device_add_disk+0x8d6/0xde0 [ 87.180517][ T4682] Modules linked in: [ 87.190428][ T4682] CPU: 1 PID: 4682 Comm: syz.3.139 Not tainted syzkaller #0 [ 87.215584][ T4682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.242681][ T4682] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 87.257319][ T4682] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 00 f4 70 8d e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 87.282029][ T4682] RSP: 0018:ffffc9000451f470 EFLAGS: 00010246 [ 87.297321][ T4682] RAX: ffffffff83d31e76 RBX: ffff888061645000 RCX: 0000000000080000 [ 87.305808][ T4682] RDX: ffffc9000e979000 RSI: 000000000007ffff RDI: 0000000000080000 [ 87.319692][ T4682] RBP: 000000000000001f R08: ffff88805fdee1db R09: 1ffff1100bfbdc3b [ 87.328952][ T4682] R10: dffffc0000000000 R11: ffffed100bfbdc3c R12: ffff8881408046c0 [ 87.351362][ T4682] R13: ffff888061645150 R14: dffffc0000000000 R15: ffff8881408046c0 [ 87.375422][ T4682] FS: 00007f98596056c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 87.397177][ T4682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.415024][ T4682] CR2: 0000001b3291eff8 CR3: 000000005fccd000 CR4: 00000000003506f0 [ 87.430362][ T4233] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 87.451504][ T4682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.470719][ T4682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.480453][ T4682] Call Trace: [ 87.483762][ T4682] [ 87.491084][ T4682] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 87.498227][ T4682] mtdblock_add_mtd+0x186/0x240 [ 87.503240][ T4682] blktrans_notify_add+0x95/0xe0 [ 87.512250][ T4682] add_mtd_device+0xd40/0x1260 [ 87.518296][ T4682] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 87.524135][ T4682] ? mtd_cls_resume+0x130/0x130 [ 87.533351][ T4682] mtd_add_partition+0x25d/0x420 [ 87.539652][ T4682] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 87.544803][ T4682] ? shrink_ecclayout+0xab0/0xab0 [ 87.554284][ T4682] ? __might_fault+0xb3/0x110 [ 87.560833][ T4682] ? _copy_from_user+0x111/0x170 [ 87.565801][ T4682] mtdchar_ioctl+0x14cb/0x1d70 [ 87.574937][ T4682] ? mtdchar_close+0x180/0x180 [ 87.581182][ T4682] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 87.601362][ T4682] ? verify_lock_unused+0x140/0x140 [ 87.611479][ T4682] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 87.631711][ T4682] ? rcu_lock_release+0x5/0x20 [ 87.646302][ T4682] ? __mutex_trylock_common+0x15c/0x260 [ 87.656467][ T4682] ? rcu_lock_release+0x20/0x20 [ 87.661548][ T4682] ? __mutex_lock_common+0x435/0x2400 [ 87.672674][ T4682] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 87.681612][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 87.683768][ T4682] ? mutex_lock_io_nested+0x60/0x60 [ 87.701833][ T4682] mtdchar_unlocked_ioctl+0xad/0xd0 [ 87.712737][ T4682] ? mtdchar_write+0x5a0/0x5a0 [ 87.728244][ T4682] __se_sys_ioctl+0xfa/0x170 [ 87.741433][ T4682] do_syscall_64+0x4c/0xa0 [ 87.745983][ T4682] ? clear_bhb_loop+0x30/0x80 [ 87.746349][ T1110] gud 2-1:1.0: USB-1: Failed to add TV modes (ret=-71) [ 87.764649][ T1110] gud 2-1:1.0: USB-1: Failed to add properties (ret=-71) [ 87.766545][ T4682] ? clear_bhb_loop+0x30/0x80 [ 87.779788][ T1110] gud 2-1:1.0: Failed to get connectors (error=-71) [ 87.791752][ T4682] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.794343][ T1110] gud: probe of 2-1:1.0 failed with error -71 [ 87.811989][ T4682] RIP: 0033:0x7f985b3ad1d9 [ 87.826515][ T1110] usb 2-1: USB disconnect, device number 5 [ 87.830933][ T4682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.902735][ T4682] RSP: 002b:00007f9859605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.921539][ T4682] RAX: ffffffffffffffda RBX: 00007f985b634fa0 RCX: 00007f985b3ad1d9 [ 87.942712][ T4682] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000005 [ 87.960512][ T4682] RBP: 00007f985b444888 R08: 0000000000000000 R09: 0000000000000000 [ 87.966598][ T4233] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 87.973594][ T4682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.986157][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.004425][ T4233] usb 1-1: Product: syz [ 88.004442][ T4682] R13: 00007f985b635038 R14: 00007f985b634fa0 R15: 00007ffcd20326e8 [ 88.008957][ T4233] usb 1-1: Manufacturer: syz [ 88.029335][ T4233] usb 1-1: SerialNumber: syz [ 88.047738][ T4682] [ 88.048351][ T4233] usb 1-1: config 0 descriptor?? [ 88.050807][ T4682] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.050819][ T4682] CPU: 1 PID: 4682 Comm: syz.3.139 Not tainted syzkaller #0 [ 88.070320][ T4682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.080558][ T4682] Call Trace: [ 88.083845][ T4682] [ 88.086779][ T4682] dump_stack_lvl+0x188/0x250 [ 88.091463][ T4682] ? show_regs_print_info+0x20/0x20 [ 88.096662][ T4682] ? load_image+0x410/0x410 [ 88.098088][ T4233] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 88.101175][ T4682] panic+0x2f8/0x850 [ 88.111643][ T4682] ? bpf_jit_dump+0xd0/0xd0 [ 88.116167][ T4682] ? device_add_disk+0x8d6/0xde0 [ 88.121116][ T4682] __warn+0x248/0x2b0 [ 88.125105][ T4682] ? device_add_disk+0x8d6/0xde0 [ 88.130085][ T4682] report_bug+0x1b9/0x2e0 [ 88.134429][ T4682] handle_bug+0x3a/0x70 [ 88.138592][ T4682] exc_invalid_op+0x16/0x40 [ 88.143109][ T4682] asm_exc_invalid_op+0x16/0x20 [ 88.147965][ T4682] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 88.153515][ T4682] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 00 f4 70 8d e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 88.173129][ T4682] RSP: 0018:ffffc9000451f470 EFLAGS: 00010246 [ 88.179215][ T4682] RAX: ffffffff83d31e76 RBX: ffff888061645000 RCX: 0000000000080000 [ 88.187203][ T4682] RDX: ffffc9000e979000 RSI: 000000000007ffff RDI: 0000000000080000 [ 88.195187][ T4682] RBP: 000000000000001f R08: ffff88805fdee1db R09: 1ffff1100bfbdc3b [ 88.203169][ T4682] R10: dffffc0000000000 R11: ffffed100bfbdc3c R12: ffff8881408046c0 [ 88.211151][ T4682] R13: ffff888061645150 R14: dffffc0000000000 R15: ffff8881408046c0 [ 88.219142][ T4682] ? device_add_disk+0x8d6/0xde0 [ 88.224111][ T4682] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 88.229426][ T4682] mtdblock_add_mtd+0x186/0x240 [ 88.234291][ T4682] blktrans_notify_add+0x95/0xe0 [ 88.239353][ T4682] add_mtd_device+0xd40/0x1260 [ 88.244140][ T4682] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 88.249955][ T4682] ? mtd_cls_resume+0x130/0x130 [ 88.254827][ T4682] mtd_add_partition+0x25d/0x420 [ 88.259773][ T4682] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 88.264920][ T4682] ? shrink_ecclayout+0xab0/0xab0 [ 88.269972][ T4682] ? __might_fault+0xb3/0x110 [ 88.274660][ T4682] ? _copy_from_user+0x111/0x170 [ 88.279603][ T4682] mtdchar_ioctl+0x14cb/0x1d70 [ 88.284373][ T4682] ? mtdchar_close+0x180/0x180 [ 88.289141][ T4682] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.295118][ T4682] ? verify_lock_unused+0x140/0x140 [ 88.300311][ T4682] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 88.305936][ T4682] ? rcu_lock_release+0x5/0x20 [ 88.310700][ T4682] ? __mutex_trylock_common+0x15c/0x260 [ 88.316246][ T4682] ? rcu_lock_release+0x20/0x20 [ 88.321107][ T4682] ? __mutex_lock_common+0x435/0x2400 [ 88.326480][ T4682] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 88.331876][ T4682] ? mutex_lock_io_nested+0x60/0x60 [ 88.337076][ T4682] mtdchar_unlocked_ioctl+0xad/0xd0 [ 88.342280][ T4682] ? mtdchar_write+0x5a0/0x5a0 [ 88.347031][ T4682] __se_sys_ioctl+0xfa/0x170 [ 88.351613][ T4682] do_syscall_64+0x4c/0xa0 [ 88.356034][ T4682] ? clear_bhb_loop+0x30/0x80 [ 88.360695][ T4682] ? clear_bhb_loop+0x30/0x80 [ 88.365378][ T4682] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.371258][ T4682] RIP: 0033:0x7f985b3ad1d9 [ 88.375668][ T4682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.395286][ T4682] RSP: 002b:00007f9859605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.403709][ T4682] RAX: ffffffffffffffda RBX: 00007f985b634fa0 RCX: 00007f985b3ad1d9 [ 88.411680][ T4682] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000005 [ 88.419673][ T4682] RBP: 00007f985b444888 R08: 0000000000000000 R09: 0000000000000000 [ 88.427655][ T4682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.435615][ T4682] R13: 00007f985b635038 R14: 00007f985b634fa0 R15: 00007ffcd20326e8 [ 88.443608][ T4682] [ 88.446779][ T4682] Kernel Offset: disabled [ 88.451235][ T4682] Rebooting in 86400 seconds..