last executing test programs: 17.610158276s ago: executing program 2 (id=353): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) 16.071251834s ago: executing program 2 (id=357): ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) 16.001184836s ago: executing program 2 (id=359): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 15.850419569s ago: executing program 2 (id=361): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xb, 0x80000100008b}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000019580)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000195c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000019600)=@e={0xff, 0xa, 0x9, 0x2, @generic=0x1, 0x10, 0x7, 0x8b}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x5) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r4, &(0x7f0000000480)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000019480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000194c0)=0x8000004, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000019500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000019540)=[{{0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 14.628266669s ago: executing program 1 (id=364): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000e40)={0x3, 0x2, 0x10, "0281acc4f2bb98257d4b5913372495a76fe6fb0b94afccb3517035ef14ffc2d5", 0x31303553}) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r3, 0x0) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) 14.505535082s ago: executing program 0 (id=366): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x800455cc, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060300000000004000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x50}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x24004044) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x10800) 13.434893929s ago: executing program 0 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) 13.39399379s ago: executing program 1 (id=369): syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002300)='./proc/sys/vm/nr_hugepages\x00', &(0x7f0000002340), 0x800) 11.684137112s ago: executing program 1 (id=371): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x40084) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) epoll_create1(0x0) 10.300171056s ago: executing program 2 (id=372): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400e8ff04080102"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 9.441077187s ago: executing program 4 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0xaa, 0x95c1, 0x80000000, 0xffffffffffffffaa, 0x17f3, 0x0}) sched_getparam(r2, &(0x7f00000005c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) unshare(0x2a020400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x40, 0x709, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4}]}}}}}) 8.448396252s ago: executing program 4 (id=376): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x290, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x48}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd5c}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe83}]}, @TIPC_NLA_NODE={0x1b4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0xc4, 0x3, "2a5bb3e489438301feddb1547cc648a178a8f8029c2a61f371c4e330437c9beff1b9d73108679bfe7aa15cfdaa7e5b6056bc450c032c0eba76627ed077b5dc9365089b1762aebd11a637b1e8c9b221e17f7831ee16a0642a48f9133dde5ea2b16ab56f859a352bd029958499fa82728a42d75a8e926e4adbef40d770d18634208991f2d0c60039c3b2b363dd6ea6d426ea3cf7000fe4b2c34e69bc7c390e7d63e33753d9735927a3d696ea0eef5f752b7d4674ebd780e45fa1cfecd0f169d583"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "fe4fd6a2809bed2e63a584da9caec7ad41a9d1cae03cb39e1b7025ce"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "00c8e74f8a39a7e65a391ff97ea4621630862adf148be977df57cf96480a351e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "901bf3261b9919132255ddcd1619d236ae24941474930eec791278852a"}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4c801}, 0x4040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) sendmsg$key(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001040)={0x2, 0x13, 0x8, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x10) 8.363127654s ago: executing program 0 (id=377): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback={0x4000000}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000320000000000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0) 6.964264218s ago: executing program 4 (id=378): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x800455cc, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060300000000004000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x50}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x24004044) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x10800) 6.90607127s ago: executing program 0 (id=379): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000e40)={0x3, 0x2, 0x10, "0281acc4f2bb98257d4b5913372495a76fe6fb0b94afccb3517035ef14ffc2d5", 0x31303553}) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r3, 0x0) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) 6.398118882s ago: executing program 4 (id=380): chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) 5.70323427s ago: executing program 3 (id=381): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 5.638531521s ago: executing program 0 (id=382): socket$inet(0x2, 0x3, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000001d00)=[{&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x2, 0x5, 0x0) 5.625425241s ago: executing program 4 (id=383): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/check_wx_pages\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x2, 0x0, 0x4007) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net\x00') io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f00000007c0)={0x6, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/168, 0xa8}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000500)=""/175, 0xaf}, {&(0x7f00000005c0)=""/38, 0x26}, {&(0x7f0000000600)=""/201, 0xc9}], &(0x7f0000000780), 0x5}, 0x20) r5 = dup(r3) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r3, r6, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) 5.578764473s ago: executing program 3 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xa0fe, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 5.514905474s ago: executing program 0 (id=385): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aa0100aa"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x3, 0x4) sendmmsg(r3, 0x0, 0x0, 0x4000041) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) close_range(r0, r4, 0x0) r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) 5.455248446s ago: executing program 1 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0xaa, 0x95c1, 0x80000000, 0xffffffffffffffaa, 0x17f3, 0x0}) sched_getparam(r2, &(0x7f00000005c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) unshare(0x2a020400) pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x40, 0x709, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4}]}}}}}) 5.354509518s ago: executing program 3 (id=387): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x0, 0x4}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x62) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_AG_GEOMETRY(r4, 0xc080583d, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) 3.366027417s ago: executing program 2 (id=388): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004001f"], 0x38}}, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$mtd(&(0x7f0000000700), 0x0, 0x2) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000740)={0x2, 0x0, 0x98, &(0x7f0000000780)={0x4, 0x10000, 0x1}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(0x0, 0x401, 0x145981) ioctl$BLKDISCARD(r5, 0x1277, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x97}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000580)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000005c0)={0x8}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) sendmmsg(r8, &(0x7f0000000640)=[{{&(0x7f0000000680)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) mlock(&(0x7f0000448000/0x4000)=nil, 0x4000) syz_open_dev$evdev(&(0x7f0000000300), 0xcf, 0x460080) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x0) 3.062539004s ago: executing program 1 (id=389): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000320000000000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0) 3.061914075s ago: executing program 3 (id=390): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x800455cc, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060300000000004000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x50}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x24004044) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x10800) 2.391035591s ago: executing program 3 (id=391): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019440)=0x80000000000003) unshare(0x6a040000) socket$nl_crypto(0x10, 0x3, 0x15) sendto$inet6(0xffffffffffffffff, &(0x7f0000019480), 0x0, 0x0, &(0x7f00000194c0)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) sigaltstack(&(0x7f0000019500)={0x0, 0x80000001}, 0x0) open$dir(&(0x7f0000000040)='\x00', 0x20000, 0x14) 132.653267ms ago: executing program 3 (id=392): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 49.415989ms ago: executing program 1 (id=393): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r4 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) ioctl$TIOCGPTPEER(r6, 0x5441, 0x8) syz_open_pts(r6, 0x41) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) 0s ago: executing program 4 (id=394): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, 0x0, 0x20044020) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 41.979352][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.989725][ T3851] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. syzkaller login: [ 61.656806][ T4173] cgroup: Unknown subsys name 'net' [ 61.815404][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.301015][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.941040][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 65.032704][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.049126][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.121453][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.132299][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.196076][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.203983][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.212666][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.221443][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.228516][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.237045][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.265768][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.273232][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.281510][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.289615][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.296700][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.305564][ T4194] device bridge_slave_1 entered promiscuous mode [ 65.378616][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.409286][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.420389][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.434250][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.441731][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.450027][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.457441][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.464878][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.474001][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.489441][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.510288][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.517364][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.525378][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.539698][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.546767][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.555398][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.576233][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.583530][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.592119][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.617540][ T4188] team0: Port device team_slave_0 added [ 65.631881][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.639939][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.648038][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.657402][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.677052][ T4194] team0: Port device team_slave_0 added [ 65.684804][ T4188] team0: Port device team_slave_1 added [ 65.706403][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.725097][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.736473][ T4194] team0: Port device team_slave_1 added [ 65.766943][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.778358][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.796832][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.804105][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.830655][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.844721][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.856619][ T4187] team0: Port device team_slave_0 added [ 65.877121][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.884319][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.910756][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.934239][ T4187] team0: Port device team_slave_1 added [ 65.953860][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.961149][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.987413][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.014131][ T4186] team0: Port device team_slave_0 added [ 66.027926][ T4186] team0: Port device team_slave_1 added [ 66.037325][ T4189] team0: Port device team_slave_0 added [ 66.044320][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.051374][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.077446][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.096691][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.103747][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.134560][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.154934][ T4189] team0: Port device team_slave_1 added [ 66.177530][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.184672][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.210820][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.230289][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.237269][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.263660][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.286787][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.293739][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.307918][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.315347][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.341658][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.353494][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.360792][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.387151][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.405044][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.412162][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.438158][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.500168][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.507158][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.514064][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.522127][ T4194] Cannot create hsr debugfs directory [ 66.552048][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.559778][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.566702][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.575005][ T4189] Cannot create hsr debugfs directory [ 66.605659][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.611146][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 66.618574][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 66.623656][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.626502][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 66.637055][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 66.643262][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.644396][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 66.657203][ T4187] Cannot create hsr debugfs directory [ 66.685224][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.692179][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.699416][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.707123][ T4186] Cannot create hsr debugfs directory [ 67.041082][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.054853][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.064617][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.075119][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.144828][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.155499][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.165980][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.175852][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.237552][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.261401][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.271961][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.289390][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.304414][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.312528][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.325977][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.335838][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.347809][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.358293][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.367778][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.375151][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.412381][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.421604][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.431469][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.440940][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.448088][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.458438][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.480051][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.493036][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.502788][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.516032][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.525932][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.535746][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.545312][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.555564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.567343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.586455][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.611779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.621156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.653043][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.665397][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.673661][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.683186][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.694503][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.733766][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.749158][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.760991][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.781732][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.800094][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.829951][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.839830][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.848255][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.855405][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.863763][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.873258][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.881895][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.889002][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.919945][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.954344][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.963682][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.975027][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.984456][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.994073][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.015178][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.030623][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.038660][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.049692][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.058108][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.067838][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.079824][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.087296][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.101898][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.111303][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.134344][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.145074][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.160124][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.170749][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.184289][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.193196][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.217423][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.226307][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.246870][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.257748][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.271373][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.280287][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.339568][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.349487][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.358048][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.365150][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.375045][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.384624][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.394212][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.401392][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.410100][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.419287][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.428053][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.437630][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.444747][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.454108][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.463022][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.471978][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.479090][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.487031][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.497257][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.506457][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.515258][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.527288][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.535883][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.544028][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.552509][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.561684][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.597716][ T4188] device veth0_vlan entered promiscuous mode [ 68.606430][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.620969][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.635680][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.646666][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.662392][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.674852][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.685828][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.694453][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 68.700902][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 68.706982][ T4241] Bluetooth: hci4: command 0x041b tx timeout [ 68.707124][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.714124][ T4241] Bluetooth: hci2: command 0x041b tx timeout [ 68.727320][ T4241] Bluetooth: hci1: command 0x041b tx timeout [ 68.734664][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.743358][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.752786][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.761241][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.774304][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.783220][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.800966][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.820165][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.833478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.842393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.865091][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.876853][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.896358][ T4188] device veth1_vlan entered promiscuous mode [ 68.908341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.918098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.927004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.936290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.944898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.960540][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.005578][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.015040][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.030827][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.038343][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.085895][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.095380][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.111955][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.119088][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.130379][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.139691][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.148159][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.155297][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.165281][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.195295][ T4188] device veth0_macvtap entered promiscuous mode [ 69.207676][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.217059][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.231753][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.258605][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.294786][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.303875][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.314132][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.325609][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.335275][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.344201][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.353084][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.363541][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.385137][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.396167][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.416174][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.425422][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.434035][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.442619][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.451728][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.460219][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.479796][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.490873][ T4188] device veth1_macvtap entered promiscuous mode [ 69.502481][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.521447][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.530393][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.549850][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.560051][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.580168][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.587672][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.609597][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.617180][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.627398][ T4187] device veth0_vlan entered promiscuous mode [ 69.662343][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.697533][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.715163][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.736873][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.748600][ T4187] device veth1_vlan entered promiscuous mode [ 69.760465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.771254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.787702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.812103][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.822636][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.831859][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.841777][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.868771][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.876899][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.894709][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.904661][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.912752][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.952576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.962712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.982711][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.998744][ T4194] device veth0_vlan entered promiscuous mode [ 70.006842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.017500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.026113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.035569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.045237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.054347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.070556][ T4187] device veth0_macvtap entered promiscuous mode [ 70.090209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.133409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.144122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.153778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.162507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.173376][ T4194] device veth1_vlan entered promiscuous mode [ 70.181750][ T4187] device veth1_macvtap entered promiscuous mode [ 70.215691][ T4189] device veth0_vlan entered promiscuous mode [ 70.223313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.237237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.247058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.255908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.265165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.273203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.293442][ T4186] device veth0_vlan entered promiscuous mode [ 70.310481][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.324808][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.336808][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.353905][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.364700][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.379908][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.397204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.406535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.415934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.426987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.440601][ T4189] device veth1_vlan entered promiscuous mode [ 70.472279][ T4186] device veth1_vlan entered promiscuous mode [ 70.483496][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.492218][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.500683][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.510428][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.524523][ T4194] device veth0_macvtap entered promiscuous mode [ 70.532564][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.541734][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.550814][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.560192][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.580359][ T4194] device veth1_macvtap entered promiscuous mode [ 70.603219][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.611352][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.643751][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.654540][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.663639][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.673136][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.683004][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.691531][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.702837][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.713233][ T4189] device veth0_macvtap entered promiscuous mode [ 70.758215][ T4189] device veth1_macvtap entered promiscuous mode [ 70.765073][ T4241] Bluetooth: hci1: command 0x040f tx timeout [ 70.772729][ T4241] Bluetooth: hci2: command 0x040f tx timeout [ 70.779284][ T4241] Bluetooth: hci4: command 0x040f tx timeout [ 70.785662][ T4241] Bluetooth: hci0: command 0x040f tx timeout [ 70.797740][ T4241] Bluetooth: hci3: command 0x040f tx timeout [ 70.813447][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.822709][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.831586][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.841163][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.851010][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.861916][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.871927][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.882721][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.894342][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.904822][ T4186] device veth0_macvtap entered promiscuous mode [ 70.913347][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.921719][ T4186] device veth1_macvtap entered promiscuous mode [ 70.937797][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.945531][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.957012][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.965953][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.976186][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.990769][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.002091][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.012796][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.023566][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.038228][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.054178][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.064928][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.074518][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.083785][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.093766][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.104521][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.114533][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.125825][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.137849][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.146690][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.155539][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.166370][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.173006][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.182842][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.191823][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.201085][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.210394][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.224501][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.236709][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.248029][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.258770][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.268599][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.280417][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.291952][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.302635][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.314415][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.337684][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.347912][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.357177][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.366447][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.386938][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.405279][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.415898][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.426590][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.437727][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.448875][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.467488][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.478996][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.488271][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.504209][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.516962][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.533605][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.544938][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.555136][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.569505][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.581721][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.592466][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.603420][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.614337][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.633108][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.658937][ T4215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.660190][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.666782][ T4215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.687630][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.697174][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.708544][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.725031][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.736255][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.754646][ T4267] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.758100][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.791801][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.806533][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.816859][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.825733][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.037732][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.048322][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.090955][ T3008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.256386][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.282946][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.988238][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 73.071035][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.079723][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 73.086437][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 73.245862][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 73.252331][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 73.339078][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.361625][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.438295][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.289999][ T4215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.350105][ T4215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.369294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.405858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.415638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.423991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.448731][ T4215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.456593][ T4215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.493053][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.715025][ T26] audit: type=1800 audit(1791622760.435:2): pid=4292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8" name="file1" dev="sda1" ino=2048 res=0 errno=0 [ 75.777360][ T26] audit: type=1326 audit(1791622761.495:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4303 comm="syz.3.10" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0764afd1d9 code=0x7ffc0000 [ 75.824453][ T26] audit: type=1326 audit(1791622761.535:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4303 comm="syz.3.10" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0764afd1d9 code=0x7ffc0000 [ 76.598226][ T26] audit: type=1326 audit(1791622761.535:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4303 comm="syz.3.10" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0764afd1d9 code=0x7ffc0000 [ 76.634348][ T26] audit: type=1326 audit(1791622761.535:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4303 comm="syz.3.10" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0764afd1d9 code=0x7ffc0000 [ 77.488719][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.508709][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.518705][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.528704][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.538704][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.548705][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.558710][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.568709][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.578723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.588713][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.338961][ T26] audit: type=1326 audit(1791622761.535:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4303 comm="syz.3.10" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0764afd1d9 code=0x7ffc0000 [ 78.366712][ T26] audit: type=1326 audit(1791622761.535:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4303 comm="syz.3.10" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0764afd1d9 code=0x7ffc0000 [ 78.403202][ T4315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 78.447469][ T26] audit: type=1326 audit(1791622761.535:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4303 comm="syz.3.10" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0764afd1d9 code=0x7ffc0000 [ 78.633716][ T26] audit: type=1326 audit(1791622761.535:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4303 comm="syz.3.10" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f0764afd1d9 code=0x7ffc0000 [ 78.705632][ T26] audit: type=1326 audit(1791622761.535:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4303 comm="syz.3.10" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0764afd1d9 code=0x7ffc0000 [ 78.932644][ T4317] process 'syz.3.10' launched '/dev/fd/7' with NULL argv: empty string added [ 78.958415][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.558916][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.881189][ T4315] device bridge_slave_1 left promiscuous mode [ 79.940964][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.615037][ T4346] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.713677][ T4350] netlink: 'syz.4.18': attribute type 10 has an invalid length. [ 81.722392][ T4350] netlink: 55 bytes leftover after parsing attributes in process `syz.4.18'. [ 81.895048][ T4354] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 83.405126][ T4368] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 83.411866][ T4368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.420125][ T4368] vhci_hcd vhci_hcd.0: Device attached [ 83.473758][ T4370] vhci_hcd: connection closed [ 83.481596][ T4293] vhci_hcd: stop threads [ 83.537988][ T4293] vhci_hcd: release socket [ 83.597870][ T4293] vhci_hcd: disconnect device [ 86.151193][ T4380] tipc: Started in network mode [ 86.156275][ T4380] tipc: Node identity 9274893738a9, cluster identity 4711 [ 86.197046][ T4380] tipc: Enabled bearer , priority 0 [ 86.229898][ T4380] device syzkaller0 entered promiscuous mode [ 86.255156][ T4380] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 86.307753][ T4380] tipc: Resetting bearer [ 86.317241][ T4385] FAULT_INJECTION: forcing a failure. [ 86.317241][ T4385] name fail_futex, interval 1, probability 0, space 0, times 1 [ 86.339546][ T4385] CPU: 0 PID: 4385 Comm: syz.1.32 Not tainted syzkaller #0 [ 86.346788][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.356895][ T4385] Call Trace: [ 86.360209][ T4385] [ 86.363168][ T4385] dump_stack_lvl+0x188/0x250 [ 86.367893][ T4385] ? show_regs_print_info+0x20/0x20 [ 86.373133][ T4385] ? load_image+0x410/0x410 [ 86.377689][ T4385] should_fail+0x383/0x4b0 [ 86.382148][ T4385] __se_sys_futex+0x1a8/0x420 [ 86.386872][ T4385] ? __x64_sys_futex+0xf0/0xf0 [ 86.391684][ T4385] ? __x64_sys_futex+0x1d/0xf0 [ 86.396498][ T4385] do_syscall_64+0x4c/0xa0 [ 86.400952][ T4385] ? clear_bhb_loop+0x30/0x80 [ 86.405663][ T4385] ? clear_bhb_loop+0x30/0x80 [ 86.410379][ T4385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.416323][ T4385] RIP: 0033:0x7ff023aca1d9 [ 86.420770][ T4385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.440427][ T4385] RSP: 002b:00007ff021d22028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 86.448878][ T4385] RAX: ffffffffffffffda RBX: 00007ff023d51fa0 RCX: 00007ff023aca1d9 [ 86.456883][ T4385] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000000 [ 86.458881][ T4338] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 86.464880][ T4385] RBP: 00007ff023b61888 R08: 0000000000000000 R09: 0000000000000002 [ 86.464897][ T4385] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000000 [ 86.464912][ T4385] R13: 00007ff023d52038 R14: 00007ff023d51fa0 R15: 00007ffee3e2bc28 [ 86.464966][ T4385] [ 86.500985][ T4387] syz.4.30 uses obsolete (PF_INET,SOCK_PACKET) [ 86.537310][ T23] cfg80211: failed to load regulatory.db [ 86.547419][ T4378] tipc: Resetting bearer [ 86.583258][ T4378] tipc: Disabling bearer [ 86.756263][ T4389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 87.113995][ T4263] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.629688][ T4338] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 88.318815][ T4263] usb 1-1: Using ep0 maxpacket: 8 [ 88.458854][ T4263] usb 1-1: config 5 has an invalid interface number: 109 but max is 0 [ 88.500074][ T4338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.508119][ T4338] usb 3-1: Product: syz [ 88.512403][ T4338] usb 3-1: Manufacturer: syz [ 88.517025][ T4338] usb 3-1: SerialNumber: syz [ 89.069192][ T4338] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 89.214815][ T4263] usb 1-1: config 5 has no interface number 0 [ 89.221811][ T4263] usb 1-1: config 5 interface 109 has no altsetting 0 [ 89.396789][ T4411] zram0: detected capacity change from 0 to 65536 [ 89.419142][ T4263] usb 1-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=ff.6d [ 89.461258][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.529423][ T4263] usb 1-1: Product: syz [ 89.565084][ T4263] usb 1-1: Manufacturer: syz [ 89.613807][ T4263] usb 1-1: SerialNumber: syz [ 90.069071][ T4338] Bluetooth: hci2: command 0x0405 tx timeout [ 90.219031][ T4263] usb 1-1: unsupported MDLM descriptors [ 90.263220][ T4263] usb 1-1: USB disconnect, device number 2 [ 91.676951][ T4241] usb 3-1: USB disconnect, device number 3 [ 91.679330][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.683871][ T4241] usblp0: removed [ 93.006314][ T4433] sched: RT throttling activated [ 93.770418][ T7] usb 2-1: device descriptor read/all, error -71 [ 95.016389][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 97.533655][ T4483] jffs2: notice: (4483) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.648851][ T4338] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.178815][ T4338] usb 4-1: Using ep0 maxpacket: 32 [ 98.309246][ T4338] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.178572][ T4338] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.187340][ T4338] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.197198][ T4338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.207115][ T4338] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.218824][ T4338] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.232324][ T4338] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.241692][ T4338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.256421][ T4338] usb 4-1: config 0 descriptor?? [ 100.211742][ T4494] loop7: detected capacity change from 0 to 16384 [ 100.235112][ T4338] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.808795][ T4338] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.878892][ T4241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.069858][ T4338] usb 1-1: Using ep0 maxpacket: 8 [ 101.091362][ T21] usb 4-1: USB disconnect, device number 2 [ 101.132427][ T21] usblp0: removed [ 101.148768][ T4241] usb 2-1: Using ep0 maxpacket: 16 [ 101.353457][ T4338] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 101.373315][ T4338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.402031][ T4338] usb 1-1: Product: syz [ 101.407605][ T4338] usb 1-1: Manufacturer: syz [ 101.422659][ T4338] usb 1-1: SerialNumber: syz [ 101.454588][ T4338] usb 1-1: config 0 descriptor?? [ 101.792390][ T4241] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 101.817235][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 101.854419][ T4241] usb 2-1: Product: syz [ 101.869130][ T4241] usb 2-1: Manufacturer: syz [ 101.874116][ T4241] usb 2-1: SerialNumber: syz [ 101.969865][ T4241] usb 2-1: config 0 descriptor?? [ 102.057444][ T4517] FAULT_INJECTION: forcing a failure. [ 102.057444][ T4517] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 102.152486][ T4338] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 102.163725][ T4517] CPU: 1 PID: 4517 Comm: syz.3.69 Not tainted syzkaller #0 [ 102.170978][ T4517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.181069][ T4517] Call Trace: [ 102.184386][ T4517] [ 102.187350][ T4517] dump_stack_lvl+0x188/0x250 [ 102.192073][ T4517] ? show_regs_print_info+0x20/0x20 [ 102.197338][ T4517] ? load_image+0x410/0x410 [ 102.201898][ T4517] ? __lock_acquire+0x7d40/0x7d40 [ 102.206973][ T4517] should_fail+0x383/0x4b0 [ 102.211443][ T4517] prepare_alloc_pages+0x1e3/0x5b0 [ 102.216606][ T4517] __alloc_pages+0x11b/0x480 [ 102.221241][ T4517] ? zone_statistics+0x170/0x170 [ 102.226225][ T4517] ? __alloc_pages+0x282/0x480 [ 102.231034][ T4517] ? zone_statistics+0x170/0x170 [ 102.236114][ T4517] ? alloc_pages+0x452/0x560 [ 102.240757][ T4517] get_zeroed_page+0x13/0x30 [ 102.245384][ T4517] get_image_page+0x41/0x310 [ 102.250026][ T4517] alloc_rtree_node+0xde/0x150 [ 102.254835][ T4517] memory_bm_create+0x4ee/0x950 [ 102.259752][ T4517] create_basic_memory_bitmaps+0x95/0x370 [ 102.265544][ T4517] snapshot_open+0x19b/0x260 [ 102.270265][ T4517] ? snapshot_compat_ioctl+0x90/0x90 [ 102.275592][ T4517] misc_open+0x31f/0x390 [ 102.279882][ T4517] chrdev_open+0x585/0x5f0 [ 102.284348][ T4517] ? cd_forget+0x160/0x160 [ 102.288814][ T4517] ? fsnotify_perm+0x3a7/0x560 [ 102.293622][ T4517] ? cd_forget+0x160/0x160 [ 102.298075][ T4517] do_dentry_open+0x7f7/0xf90 [ 102.302803][ T4517] ? vfs_open+0x2b/0x80 [ 102.307008][ T4517] path_openat+0x2718/0x2fb0 [ 102.311650][ T4517] ? __kasan_slab_alloc+0xa9/0xc0 [ 102.316727][ T4517] ? do_filp_open+0x400/0x400 [ 102.321446][ T4517] do_filp_open+0x1df/0x400 [ 102.325978][ T4517] ? vfs_tmpfile+0x300/0x300 [ 102.330627][ T4517] ? _raw_spin_unlock+0x24/0x40 [ 102.335503][ T4517] ? alloc_fd+0x59e/0x650 [ 102.339855][ T4517] do_sys_openat2+0x14b/0x500 [ 102.344550][ T4517] ? __lock_acquire+0x7d40/0x7d40 [ 102.349606][ T4517] ? do_sys_open+0xe0/0xe0 [ 102.354066][ T4517] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.360077][ T4517] ? lock_chain_count+0x20/0x20 [ 102.364957][ T4517] __x64_sys_openat+0x135/0x160 [ 102.369931][ T4517] do_syscall_64+0x4c/0xa0 [ 102.374455][ T4517] ? clear_bhb_loop+0x30/0x80 [ 102.379152][ T4517] ? clear_bhb_loop+0x30/0x80 [ 102.383852][ T4517] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.389815][ T4517] RIP: 0033:0x7f0764afd1d9 [ 102.394249][ T4517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.413874][ T4517] RSP: 002b:00007f0762d55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.422307][ T4517] RAX: ffffffffffffffda RBX: 00007f0764d84fa0 RCX: 00007f0764afd1d9 [ 102.430316][ T4517] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 102.438316][ T4517] RBP: 00007f0764b94888 R08: 0000000000000000 R09: 0000000000000000 [ 102.446311][ T4517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.454438][ T4517] R13: 00007f0764d85038 R14: 00007f0764d84fa0 R15: 00007fffd7b153e8 [ 102.462447][ T4517] [ 102.568281][ T21] usb 2-1: USB disconnect, device number 4 [ 102.967786][ T4530] ======================================================= [ 102.967786][ T4530] WARNING: The mand mount option has been deprecated and [ 102.967786][ T4530] and is ignored by this kernel. Remove the mand [ 102.967786][ T4530] option from the mount to silence this warning. [ 102.967786][ T4530] ======================================================= [ 104.026694][ T4534] tipc: Enabled bearer , priority 0 [ 104.029781][ T4338] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 104.069886][ T4534] device syzkaller0 entered promiscuous mode [ 104.115176][ T4534] tipc: Resetting bearer [ 104.132802][ T4533] tipc: Resetting bearer [ 104.162567][ T4533] tipc: Disabling bearer [ 104.204758][ T4338] usb 1-1: USB disconnect, device number 3 [ 104.375302][ T4546] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 105.106363][ T4554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.169066][ T4338] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.152238][ T4338] usb 1-1: Using ep0 maxpacket: 32 [ 107.298988][ T4338] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 107.307154][ T4338] usb 1-1: can't read configurations, error -71 [ 107.446732][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.768948][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 108.741263][ T4574] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.338060][ T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 109.358966][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.377231][ T13] usb 2-1: Product: syz [ 109.381832][ T13] usb 2-1: Manufacturer: syz [ 109.386458][ T13] usb 2-1: SerialNumber: syz [ 109.398785][ T2238] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.422549][ T13] usb 2-1: config 0 descriptor?? [ 109.612775][ T2238] usb 4-1: device descriptor read/64, error -71 [ 109.752167][ T13] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.898766][ T2238] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.510202][ T13] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 113.386458][ T4241] usb 2-1: USB disconnect, device number 5 [ 114.274297][ T4634] jffs2: notice: (4634) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 116.311531][ T4241] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.568780][ T4241] usb 3-1: Using ep0 maxpacket: 8 [ 116.574251][ T4263] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 118.565828][ T4689] tipc: Started in network mode [ 118.595977][ T4689] tipc: Node identity 4224c9277333, cluster identity 4711 [ 118.627512][ T4689] tipc: Enabled bearer , priority 0 [ 118.668783][ T4241] usb 3-1: unable to read config index 0 descriptor/all [ 118.675093][ T4692] device syzkaller0 entered promiscuous mode [ 118.675897][ T4241] usb 3-1: can't read configurations, error -71 [ 118.780158][ T4694] tipc: Resetting bearer [ 118.887611][ T4688] tipc: Resetting bearer [ 119.295610][ T4263] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 119.943753][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.952773][ T4263] usb 4-1: Product: syz [ 119.956979][ T4263] usb 4-1: Manufacturer: syz [ 119.961661][ T4263] usb 4-1: SerialNumber: syz [ 119.979142][ T4263] usb 4-1: config 0 descriptor?? [ 120.015075][ T4700] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 120.021647][ T4700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.029433][ T4700] vhci_hcd vhci_hcd.0: Device attached [ 120.043783][ T4688] tipc: Disabling bearer [ 120.059003][ T4263] usb 4-1: can't set config #0, error -71 [ 120.092815][ T4263] usb 4-1: USB disconnect, device number 5 [ 120.126428][ T4707] vhci_hcd: connection closed [ 120.127918][ T4334] vhci_hcd: stop threads [ 120.137461][ T4334] vhci_hcd: release socket [ 120.142673][ T4334] vhci_hcd: disconnect device [ 120.154500][ T1344] tipc: Node number set to 823642407 [ 120.458744][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.237798][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 122.482113][ T13] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 122.499384][ T13] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 122.508248][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.519199][ T13] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 122.528209][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.539029][ T13] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.549340][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 122.565729][ T13] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 122.575145][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.601927][ T13] usb 1-1: config 0 descriptor?? [ 122.639433][ T4571] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.792986][ T4752] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 122.799536][ T4752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.808434][ T4752] vhci_hcd vhci_hcd.0: Device attached [ 122.878924][ T4571] usb 3-1: Using ep0 maxpacket: 8 [ 122.879005][ T2238] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 123.088785][ T4175] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 123.199190][ T4571] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 123.241492][ T4571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.329818][ T4571] usb 3-1: Product: syz [ 123.363431][ T4571] usb 3-1: Manufacturer: syz [ 123.393101][ T4571] usb 3-1: SerialNumber: syz [ 123.409248][ T2238] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 123.437416][ T2238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.468075][ T4571] usb 3-1: config 0 descriptor?? [ 123.498431][ T4759] jffs2: notice: (4759) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.518103][ T2238] usb 4-1: Product: syz [ 123.537114][ T2238] usb 4-1: Manufacturer: syz [ 123.572320][ T2238] usb 4-1: SerialNumber: syz [ 123.633278][ T2238] usb 4-1: config 0 descriptor?? [ 123.683780][ T4753] vhci_hcd: connection reset by peer [ 123.694329][ T4327] vhci_hcd: stop threads [ 123.700108][ T4327] vhci_hcd: release socket [ 124.043147][ T4327] vhci_hcd: disconnect device [ 124.119424][ T4571] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.041336][ T4759] overlayfs: failed to resolve './file1': -2 [ 125.089051][ T2238] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.339712][ T4233] usb 1-1: USB disconnect, device number 6 [ 125.639057][ T4571] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 126.887831][ T4763] usb 3-1: USB disconnect, device number 6 [ 127.450566][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 127.618945][ T2238] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 128.000737][ T4808] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 128.007287][ T4808] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.015448][ T4808] vhci_hcd vhci_hcd.0: Device attached [ 128.288768][ T4241] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 128.344524][ T4810] vhci_hcd: connection reset by peer [ 128.354321][ T4293] vhci_hcd: stop threads [ 128.363506][ T4293] vhci_hcd: release socket [ 128.404920][ T4293] vhci_hcd: disconnect device [ 128.615855][ T4175] vhci_hcd: vhci_device speed not set [ 128.868877][ T4815] jffs2: notice: (4815) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 128.911467][ T2238] usb 4-1: USB disconnect, device number 6 [ 129.120735][ T4826] tipc: Enabled bearer , priority 0 [ 129.139569][ T4826] device syzkaller0 entered promiscuous mode [ 129.189302][ T4826] tipc: Resetting bearer [ 129.231083][ T4825] tipc: Resetting bearer [ 129.269707][ T4825] tipc: Disabling bearer [ 129.491300][ T1344] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 129.970082][ T4841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.170'. [ 130.989441][ T4844] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.069518][ T1344] usb 1-1: Using ep0 maxpacket: 8 [ 131.802833][ T4851] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 131.809402][ T4851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.817297][ T4851] vhci_hcd vhci_hcd.0: Device attached [ 131.919449][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.939803][ T1344] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.992657][ T1344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.068305][ T1344] usb 1-1: Product: syz [ 132.107340][ T1344] usb 1-1: Manufacturer: syz [ 132.165333][ T1344] usb 1-1: SerialNumber: syz [ 132.213085][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 132.221958][ T1344] usb 1-1: config 0 descriptor?? [ 132.328802][ T4231] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 132.379246][ T1344] usb 1-1: can't set config #0, error -71 [ 132.398043][ T4853] vhci_hcd: connection reset by peer [ 132.410312][ T157] vhci_hcd: stop threads [ 132.415511][ T157] vhci_hcd: release socket [ 132.468114][ T1344] usb 1-1: USB disconnect, device number 7 [ 132.488603][ T157] vhci_hcd: disconnect device [ 132.519315][ T1108] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 132.561543][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.610801][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.617776][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.687242][ T1108] usb 2-1: Product: syz [ 132.734281][ T1108] usb 2-1: Manufacturer: syz [ 132.790764][ T1108] usb 2-1: SerialNumber: syz [ 132.974663][ T4857] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 132.985132][ T4857] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 132.994715][ T4857] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 133.007970][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 133.007983][ T26] audit: type=1800 audit(1791622818.695:77): pid=4857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.175" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 133.294339][ T1108] usb 2-1: MIDIStreaming interface descriptor not found [ 133.389331][ T1108] usb 2-1: USB disconnect, device number 6 [ 133.398898][ T4241] vhci_hcd: vhci_device speed not set [ 133.456256][ T4872] tipc: Enabled bearer , priority 0 [ 133.474058][ T4872] device syzkaller0 entered promiscuous mode [ 133.524943][ T4872] tipc: Resetting bearer [ 133.539973][ T4871] tipc: Resetting bearer [ 133.578793][ T4859] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.603095][ T4871] tipc: Disabling bearer [ 133.778817][ T1344] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 134.020615][ T4877] udevd[4877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.763135][ T4892] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.928831][ T4859] usb 5-1: Using ep0 maxpacket: 16 [ 135.969993][ T4897] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 135.976548][ T4897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.988542][ T4897] vhci_hcd vhci_hcd.0: Device attached [ 136.089372][ T4859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.138793][ T4175] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.179000][ T4859] usb 5-1: config 5 has an invalid interface number: 248 but max is 0 [ 136.198845][ T4859] usb 5-1: config 5 has no interface number 0 [ 136.209766][ T1344] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.235889][ T1344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.255957][ T4859] usb 5-1: config 5 interface 248 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 136.318453][ T1344] usb 4-1: Product: syz [ 136.353015][ T1344] usb 4-1: Manufacturer: syz [ 136.367586][ T4859] usb 5-1: config 5 interface 248 has no altsetting 0 [ 136.401378][ T1344] usb 4-1: SerialNumber: syz [ 136.528947][ T4859] usb 5-1: string descriptor 0 read error: -71 [ 136.543920][ T4859] usb 5-1: New USB device found, idVendor=2304, idProduct=022e, bcdDevice=32.6b [ 136.556036][ T1344] usb 4-1: config 0 descriptor?? [ 136.649808][ T4859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.669218][ T1344] usb 4-1: can't set config #0, error -71 [ 136.748086][ T1344] usb 4-1: USB disconnect, device number 7 [ 136.919082][ T4859] usb 5-1: can't set config #5, error -71 [ 137.056827][ T4898] vhci_hcd: connection closed [ 137.057511][ T4291] vhci_hcd: stop threads [ 137.086660][ T4859] usb 5-1: USB disconnect, device number 2 [ 137.121458][ T4291] vhci_hcd: release socket [ 137.196982][ T4291] vhci_hcd: disconnect device [ 137.343653][ T4902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 137.479141][ T4231] vhci_hcd: vhci_device speed not set [ 138.580874][ T4175] usb 1-1: Using ep0 maxpacket: 8 [ 138.712975][ T4916] tipc: Enabled bearer , priority 0 [ 138.759770][ T4916] device syzkaller0 entered promiscuous mode [ 138.826618][ T4916] tipc: Resetting bearer [ 138.834203][ T4915] tipc: Resetting bearer [ 138.850644][ T4915] tipc: Disabling bearer [ 139.009626][ T4175] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.020149][ T4175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.041225][ T4175] usb 1-1: config 0 descriptor?? [ 139.074283][ T4175] usb 1-1: can't set config #0, error -71 [ 139.090456][ T4175] usb 1-1: USB disconnect, device number 8 [ 139.708740][ T1344] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 141.414717][ T4942] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 141.421326][ T4942] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.429140][ T4942] vhci_hcd vhci_hcd.0: Device attached [ 141.441864][ T4945] vhci_hcd: connection closed [ 141.442922][ T4291] vhci_hcd: stop threads [ 141.530729][ T4291] vhci_hcd: release socket [ 141.597964][ T4291] vhci_hcd: disconnect device [ 141.609490][ T1344] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 141.649164][ T1344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.735719][ T1344] usb 5-1: Product: syz [ 141.778378][ T1344] usb 5-1: Manufacturer: syz [ 141.828531][ T1344] usb 5-1: SerialNumber: syz [ 141.926963][ T1344] usb 5-1: config 0 descriptor?? [ 142.758987][ T1344] usb 5-1: can't set config #0, error -71 [ 142.786235][ T1344] usb 5-1: USB disconnect, device number 3 [ 143.083688][ T4964] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 143.104954][ T4966] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 143.325088][ T4971] tipc: Enabled bearer , priority 0 [ 143.339801][ T4971] device syzkaller0 entered promiscuous mode [ 143.365891][ T4971] tipc: Resetting bearer [ 143.374122][ T4969] tipc: Resetting bearer [ 143.397435][ T4969] tipc: Disabling bearer [ 144.609636][ T4973] netlink: 'syz.3.211': attribute type 4 has an invalid length. [ 145.354586][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 145.775274][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 146.778744][ T7] usb 1-1: device descriptor read/all, error -71 [ 150.473613][ T5000] Restarting kernel threads ... done. [ 151.395844][ T5010] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 152.128748][ T5020] zram: Cannot change disksize for initialized device [ 152.358866][ T4763] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 152.958939][ T4763] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.159671][ T4763] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 154.326748][ T5032] tipc: Enabled bearer , priority 0 [ 154.329532][ T4763] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.342742][ T4763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.351318][ T4763] usb 1-1: Product: syz [ 154.355638][ T4763] usb 1-1: Manufacturer: syz [ 154.360649][ T4763] usb 1-1: SerialNumber: syz [ 154.435920][ T5038] device syzkaller0 entered promiscuous mode [ 154.470060][ T5032] tipc: Resetting bearer [ 154.566166][ T5030] tipc: Resetting bearer [ 154.618886][ T5017] udc-core: couldn't find an available UDC or it's busy [ 154.633413][ T5017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 154.638039][ T5030] tipc: Disabling bearer [ 154.689970][ T4763] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 154.706709][ T4763] usb 1-1: USB disconnect, device number 11 [ 157.332322][ T5062] ip_tables: iptables: counters copy to user failed while replacing table [ 157.501478][ T5067] zram: Cannot change disksize for initialized device [ 158.003056][ T4763] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.257398][ T4763] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.331481][ T5078] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 159.366012][ T5078] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 159.617146][ T5088] tipc: Enabled bearer , priority 0 [ 159.642215][ T5088] device syzkaller0 entered promiscuous mode [ 159.687241][ T5088] tipc: Resetting bearer [ 159.715285][ T5087] tipc: Resetting bearer [ 159.748335][ T5087] tipc: Disabling bearer [ 159.756701][ T5069] capability: warning: `syz.0.238' uses deprecated v2 capabilities in a way that may be insecure [ 160.005572][ T5097] FAULT_INJECTION: forcing a failure. [ 160.005572][ T5097] name failslab, interval 1, probability 0, space 0, times 1 [ 160.047237][ T5097] CPU: 1 PID: 5097 Comm: syz.4.246 Not tainted syzkaller #0 [ 160.054595][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.064689][ T5097] Call Trace: [ 160.068009][ T5097] [ 160.070967][ T5097] dump_stack_lvl+0x188/0x250 [ 160.075694][ T5097] ? show_regs_print_info+0x20/0x20 [ 160.080944][ T5097] ? load_image+0x410/0x410 [ 160.085491][ T5097] ? __lock_acquire+0x7d40/0x7d40 [ 160.090558][ T5097] should_fail+0x383/0x4b0 [ 160.095045][ T5097] should_failslab+0x5/0x20 [ 160.099588][ T5097] slab_pre_alloc_hook+0x51/0xc0 [ 160.104569][ T5097] ? new_inode_pseudo+0x77/0x210 [ 160.109551][ T5097] kmem_cache_alloc+0x3d/0x280 [ 160.114355][ T5097] new_inode_pseudo+0x77/0x210 [ 160.119160][ T5097] alloc_anon_inode+0x1b/0x300 [ 160.123962][ T5097] aio_setup_ring+0x101/0xda0 [ 160.128690][ T5097] ? pcpu_alloc+0x11e6/0x16d0 [ 160.133440][ T5097] ? free_ioctx_reqs+0x180/0x180 [ 160.138427][ T5097] ? percpu_ref_init+0x210/0x340 [ 160.143398][ T5097] ? free_ioctx_users+0x1c0/0x1c0 [ 160.148484][ T5097] ioctx_alloc+0x316/0x770 [ 160.152955][ T5097] __se_sys_io_setup+0x7b/0x190 [ 160.157844][ T5097] do_syscall_64+0x4c/0xa0 [ 160.162298][ T5097] ? clear_bhb_loop+0x30/0x80 [ 160.167018][ T5097] ? clear_bhb_loop+0x30/0x80 [ 160.171735][ T5097] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.177685][ T5097] RIP: 0033:0x7f978f75e1d9 [ 160.182145][ T5097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.201783][ T5097] RSP: 002b:00007f978d9b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 160.210234][ T5097] RAX: ffffffffffffffda RBX: 00007f978f9e5fa0 RCX: 00007f978f75e1d9 [ 160.218238][ T5097] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000100 [ 160.226270][ T5097] RBP: 00007f978f7f5888 R08: 0000000000000000 R09: 0000000000000000 [ 160.234271][ T5097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.242322][ T5097] R13: 00007f978f9e6038 R14: 00007f978f9e5fa0 R15: 00007ffe0ac943b8 [ 160.250347][ T5097] [ 161.698762][ T4763] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.717381][ T5114] zram: Cannot change disksize for initialized device [ 161.846693][ T5115] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 161.922066][ T5115] netlink: 'syz.2.252': attribute type 2 has an invalid length. [ 162.057176][ T5115] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 162.089313][ T4763] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 162.132869][ T4763] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.157898][ T5115] netlink: 'syz.2.252': attribute type 2 has an invalid length. [ 162.289664][ T4763] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.362485][ T4763] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.437261][ T4763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.427999][ T4763] usb 5-1: invalid MIDI out EP 0 [ 165.399178][ T4763] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 165.410966][ T4763] usb 5-1: USB disconnect, device number 4 [ 165.711985][ T2238] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 165.727558][ T5143] udevd[5143]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.747248][ T5156] zram: Cannot change disksize for initialized device [ 166.912334][ T1344] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 167.008838][ T2238] usb 2-1: Using ep0 maxpacket: 8 [ 167.183142][ T1344] usb 4-1: Using ep0 maxpacket: 8 [ 170.280778][ T1344] usb 4-1: unable to read config index 0 descriptor/all [ 170.288927][ T2238] usb 2-1: unable to read config index 0 descriptor/all [ 170.295931][ T2238] usb 2-1: can't read configurations, error -71 [ 170.358853][ T1344] usb 4-1: can't read configurations, error -71 [ 170.439981][ T5192] Cannot find set identified by id 0 to match [ 170.490332][ T5192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.274'. [ 170.532820][ T5192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.274'. [ 172.028210][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.037854][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.071432][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.296655][ T5213] device-mapper: ioctl: Empty message received. [ 172.536038][ T5203] Zero length message leads to an empty skb [ 173.489034][ T5223] FAULT_INJECTION: forcing a failure. [ 173.489034][ T5223] name failslab, interval 1, probability 0, space 0, times 0 [ 173.514605][ T5223] CPU: 0 PID: 5223 Comm: syz.4.271 Not tainted syzkaller #0 [ 173.521964][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 173.532141][ T5223] Call Trace: [ 173.535452][ T5223] [ 173.538414][ T5223] dump_stack_lvl+0x188/0x250 [ 173.543138][ T5223] ? show_regs_print_info+0x20/0x20 [ 173.548373][ T5223] ? load_image+0x410/0x410 [ 173.552919][ T5223] ? __might_sleep+0xf0/0xf0 [ 173.557565][ T5223] ? __lock_acquire+0x7d40/0x7d40 [ 173.562745][ T5223] should_fail+0x383/0x4b0 [ 173.567204][ T5223] should_failslab+0x5/0x20 [ 173.571739][ T5223] slab_pre_alloc_hook+0x51/0xc0 [ 173.572156][ T4763] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 173.576711][ T5223] __kmalloc_node+0x6d/0x3a0 [ 173.589125][ T5223] ? __vmalloc_node_range+0x2dd/0x8b0 [ 173.594743][ T5223] __vmalloc_node_range+0x2dd/0x8b0 [ 173.599994][ T5223] ? n_tty_open+0x19/0x150 [ 173.604458][ T5223] vzalloc+0x75/0x80 [ 173.608387][ T5223] ? n_tty_open+0x19/0x150 [ 173.612839][ T5223] n_tty_open+0x19/0x150 [ 173.617124][ T5223] tty_ldisc_setup+0xbf/0x250 [ 173.621928][ T5223] tty_init_dev+0x239/0x470 [ 173.626484][ T5223] tty_open+0x7e8/0xcd0 [ 173.630683][ T5223] ? __lock_acquire+0x7d40/0x7d40 [ 173.635760][ T5223] ? tty_compat_ioctl+0x570/0x570 [ 173.640824][ T5223] ? memset+0x1e/0x40 [ 173.644862][ T5223] ? do_raw_spin_unlock+0x11d/0x230 [ 173.650100][ T5223] chrdev_open+0x585/0x5f0 [ 173.654584][ T5223] ? cd_forget+0x160/0x160 [ 173.659038][ T5223] ? fsnotify_perm+0x3a7/0x560 [ 173.663866][ T5223] ? cd_forget+0x160/0x160 [ 173.668321][ T5223] do_dentry_open+0x7f7/0xf90 [ 173.673035][ T5223] ? vfs_open+0x2b/0x80 [ 173.677250][ T5223] path_openat+0x2718/0x2fb0 [ 173.681926][ T5223] ? __kasan_slab_alloc+0xa9/0xc0 [ 173.686996][ T5223] ? do_filp_open+0x400/0x400 [ 173.691757][ T5223] do_filp_open+0x1df/0x400 [ 173.696394][ T5223] ? vfs_tmpfile+0x300/0x300 [ 173.701047][ T5223] ? _raw_spin_unlock+0x24/0x40 [ 173.705939][ T5223] ? alloc_fd+0x59e/0x650 [ 173.710320][ T5223] do_sys_openat2+0x14b/0x500 [ 173.715055][ T5223] ? __lock_acquire+0x7d40/0x7d40 [ 173.720136][ T5223] ? do_sys_open+0xe0/0xe0 [ 173.724588][ T5223] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 173.730621][ T5223] ? lock_chain_count+0x20/0x20 [ 173.735513][ T5223] __x64_sys_openat+0x135/0x160 [ 173.740416][ T5223] do_syscall_64+0x4c/0xa0 [ 173.744875][ T5223] ? clear_bhb_loop+0x30/0x80 [ 173.749624][ T5223] ? clear_bhb_loop+0x30/0x80 [ 173.754336][ T5223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.760295][ T5223] RIP: 0033:0x7f978f71ea0e [ 173.764743][ T5223] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 173.784384][ T5223] RSP: 002b:00007f978d9b5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.792826][ T5223] RAX: ffffffffffffffda RBX: 00007f978d9b66c0 RCX: 00007f978f71ea0e [ 173.800825][ T5223] RDX: 0000000000000002 RSI: 00007f978d9b5c00 RDI: ffffffffffffff9c [ 173.808824][ T5223] RBP: 00007f978f7f5888 R08: 0000000000000000 R09: 0000000000000000 [ 173.816835][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.824840][ T5223] R13: 00007f978f9e6038 R14: 00007f978f9e5fa0 R15: 00007ffe0ac943b8 [ 173.832862][ T5223] [ 173.886340][ T5223] tty tty1: ldisc open failed (-12), clearing slot 0 [ 174.048991][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.083745][ T4763] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.105146][ T4763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.140561][ T4763] usb 4-1: config 0 descriptor?? [ 175.594137][ T5242] zram: Cannot change disksize for initialized device [ 176.081275][ T4763] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 177.549750][ T26] audit: type=1807 audit(1791622863.265:78): action=measure UNKNOWN=# res=0 [ 177.580647][ T26] audit: type=1802 audit(1791622863.275:79): pid=5260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.291" res=0 errno=0 [ 178.999361][ T4262] Bluetooth: hci2: command 0x0405 tx timeout [ 179.120400][ T4763] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input8 [ 179.194413][ T5263] ima: policy update failed [ 179.200710][ T5267] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 179.216862][ T26] audit: type=1802 audit(1791622864.935:80): pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.291" res=0 errno=0 [ 179.268547][ T4763] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 179.318691][ T4763] usb 4-1: USB disconnect, device number 10 [ 179.841172][ T5271] fido_id[5271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 179.887383][ T5282] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 180.140780][ T4263] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.499678][ T4263] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 180.530421][ T4263] usb 2-1: config 0 has no interface number 0 [ 180.601352][ T4263] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.869238][ T4263] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 180.911425][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.992273][ T4263] usb 2-1: Product: syz [ 181.036835][ T4263] usb 2-1: Manufacturer: syz [ 181.093079][ T4263] usb 2-1: SerialNumber: syz [ 181.133341][ T4263] usb 2-1: config 0 descriptor?? [ 181.181555][ T4263] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 182.828445][ T5317] size and base must be multiples of 4 kiB [ 182.834400][ T5317] CPU: 0 PID: 5317 Comm: syz.3.311 Not tainted syzkaller #0 [ 182.841729][ T5317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.851834][ T5317] Call Trace: [ 182.855142][ T5317] [ 182.858098][ T5317] dump_stack_lvl+0x188/0x250 [ 182.862867][ T5317] ? show_regs_print_info+0x20/0x20 [ 182.868106][ T5317] ? load_image+0x410/0x410 [ 182.872652][ T5317] ? mtrr_add+0x18/0xc0 [ 182.876859][ T5317] mtrr_add+0x8e/0xc0 [ 182.880891][ T5317] mtrr_ioctl+0x9bf/0x1140 [ 182.885384][ T5317] ? mtrr_close+0x1f0/0x1f0 [ 182.889955][ T5317] ? mtrr_close+0x1f0/0x1f0 [ 182.894499][ T5317] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 182.899994][ T5317] ? proc_reg_poll+0x280/0x280 [ 182.904788][ T5317] __se_sys_ioctl+0xfa/0x170 [ 182.909453][ T5317] do_syscall_64+0x4c/0xa0 [ 182.913915][ T5317] ? clear_bhb_loop+0x30/0x80 [ 182.918628][ T5317] ? clear_bhb_loop+0x30/0x80 [ 182.923368][ T5317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.929302][ T5317] RIP: 0033:0x7f0764afd1d9 [ 182.933762][ T5317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.953419][ T5317] RSP: 002b:00007f0762d34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.961918][ T5317] RAX: ffffffffffffffda RBX: 00007f0764d85090 RCX: 00007f0764afd1d9 [ 182.969934][ T5317] RDX: 0000200000000880 RSI: 00000000400c4d01 RDI: 000000000000000a [ 182.977940][ T5317] RBP: 00007f0764b94888 R08: 0000000000000000 R09: 0000000000000000 [ 182.985957][ T5317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.993957][ T5317] R13: 00007f0764d85128 R14: 00007f0764d85090 R15: 00007fffd7b153e8 [ 183.001988][ T5317] [ 183.183312][ T4263] usb 2-1: USB disconnect, device number 9 [ 183.245389][ T4263] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 184.262737][ T5320] mmap: syz.0.313 (5320) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 186.105031][ T5339] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 186.255016][ T4263] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 186.601740][ T5350] SET target dimension over the limit! [ 186.671798][ T4263] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 187.869335][ T5356] netlink: 52 bytes leftover after parsing attributes in process `syz.3.325'. [ 187.872441][ T5354] FAULT_INJECTION: forcing a failure. [ 187.872441][ T5354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 188.344322][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 188.355312][ T4263] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 188.369683][ T4263] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 188.378994][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.391644][ T5354] CPU: 0 PID: 5354 Comm: syz.4.326 Not tainted syzkaller #0 [ 188.398967][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.409036][ T5354] Call Trace: [ 188.412326][ T5354] [ 188.415266][ T5354] dump_stack_lvl+0x188/0x250 [ 188.419967][ T5354] ? show_regs_print_info+0x20/0x20 [ 188.425209][ T5354] ? load_image+0x410/0x410 [ 188.429762][ T5354] ? __lock_acquire+0x7d40/0x7d40 [ 188.434840][ T5354] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 188.440792][ T5354] ? _raw_spin_unlock+0x40/0x40 [ 188.445677][ T5354] should_fail+0x383/0x4b0 [ 188.450141][ T5354] prepare_alloc_pages+0x1e3/0x5b0 [ 188.455301][ T5354] __alloc_pages+0x11b/0x480 [ 188.459904][ T5354] ? zone_statistics+0x170/0x170 [ 188.464854][ T5354] ? lockdep_softirqs_off+0x430/0x430 [ 188.470265][ T5354] kmalloc_large_node+0x7d/0x1a0 [ 188.475230][ T5354] __kmalloc_node+0x21e/0x3a0 [ 188.479916][ T5354] kvmalloc_node+0x84/0x130 [ 188.484433][ T5354] kvm_dev_ioctl+0x485/0x20a0 [ 188.489187][ T5354] ? hardware_enable_nolock+0x130/0x130 [ 188.494763][ T5354] ? bpf_lsm_file_ioctl+0x5/0x10 [ 188.499705][ T5354] ? security_file_ioctl+0x7c/0xa0 [ 188.504818][ T5354] ? hardware_enable_nolock+0x130/0x130 [ 188.510388][ T5354] __se_sys_ioctl+0xfa/0x170 [ 188.515262][ T5354] do_syscall_64+0x4c/0xa0 [ 188.519685][ T5354] ? clear_bhb_loop+0x30/0x80 [ 188.524377][ T5354] ? clear_bhb_loop+0x30/0x80 [ 188.529154][ T5354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.535079][ T5354] RIP: 0033:0x7f978f75e1d9 [ 188.539502][ T5354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.559145][ T5354] RSP: 002b:00007f978d9b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.567592][ T5354] RAX: ffffffffffffffda RBX: 00007f978f9e5fa0 RCX: 00007f978f75e1d9 [ 188.575563][ T5354] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 188.583534][ T5354] RBP: 00007f978f7f5888 R08: 0000000000000000 R09: 0000000000000000 [ 188.591527][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.599502][ T5354] R13: 00007f978f9e6038 R14: 00007f978f9e5fa0 R15: 00007ffe0ac943b8 [ 188.607504][ T5354] [ 188.636139][ T4263] usb 3-1: config 0 descriptor?? [ 188.659106][ T5334] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 188.883077][ T5334] device bond_slave_0 entered promiscuous mode [ 188.889721][ T5334] device bond_slave_1 entered promiscuous mode [ 188.981078][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'. [ 189.021520][ T5363] device bond_slave_0 left promiscuous mode [ 189.027529][ T5363] device bond_slave_1 left promiscuous mode [ 189.651225][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 190.930519][ T5379] input: syz1 as /devices/virtual/input/input9 [ 190.950265][ T4263] usbhid 3-1:0.0: can't add hid device: -71 [ 190.956309][ T4263] usbhid: probe of 3-1:0.0 failed with error -71 [ 191.009324][ T4263] usb 3-1: USB disconnect, device number 7 [ 191.031564][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 191.062773][ T4262] Bluetooth: hci0: command 0x0406 tx timeout [ 191.093012][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 191.150093][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 193.628855][ T2238] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.046723][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.053246][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.699115][ T2238] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 194.742833][ T5411] zram: Cannot change disksize for initialized device [ 194.786875][ T2238] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.939722][ T2238] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.118282][ T2238] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.269157][ T2238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.811036][ T2238] usb 3-1: invalid MIDI out EP 0 [ 196.705773][ T2238] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 196.915120][ T2238] usb 3-1: USB disconnect, device number 8 [ 197.432950][ T5003] udevd[5003]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.313449][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 200.592105][ T5458] zram: Cannot change disksize for initialized device [ 200.788813][ T2238] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.439615][ T5461] FAULT_INJECTION: forcing a failure. [ 201.439615][ T5461] name failslab, interval 1, probability 0, space 0, times 0 [ 201.492134][ T5461] CPU: 1 PID: 5461 Comm: syz.3.362 Not tainted syzkaller #0 [ 201.499489][ T5461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 201.509583][ T5461] Call Trace: [ 201.512900][ T5461] [ 201.515848][ T5461] dump_stack_lvl+0x188/0x250 [ 201.520547][ T5461] ? show_regs_print_info+0x20/0x20 [ 201.525764][ T5461] ? load_image+0x410/0x410 [ 201.530292][ T5461] ? __might_sleep+0xf0/0xf0 [ 201.534907][ T5461] ? __lock_acquire+0x7d40/0x7d40 [ 201.539962][ T5461] should_fail+0x383/0x4b0 [ 201.544424][ T5461] should_failslab+0x5/0x20 [ 201.548943][ T5461] slab_pre_alloc_hook+0x51/0xc0 [ 201.553905][ T5461] __kmalloc+0x6b/0x340 [ 201.558085][ T5461] ? kernfs_fop_read_iter+0x168/0x560 [ 201.563487][ T5461] kernfs_fop_read_iter+0x168/0x560 [ 201.568715][ T5461] vfs_read+0x75e/0xd50 [ 201.572903][ T5461] ? kernel_read+0x1e0/0x1e0 [ 201.577528][ T5461] ? mutex_lock_nested+0x17/0x20 [ 201.582484][ T5461] ? __fdget_pos+0x2bf/0x370 [ 201.587093][ T5461] ? ksys_read+0x70/0x260 [ 201.591447][ T5461] ksys_read+0x153/0x260 [ 201.595723][ T5461] ? vfs_write+0xd70/0xd70 [ 201.600174][ T5461] ? lockdep_hardirqs_on+0x94/0x140 [ 201.605417][ T5461] do_syscall_64+0x4c/0xa0 [ 201.609860][ T5461] ? clear_bhb_loop+0x30/0x80 [ 201.614572][ T5461] ? clear_bhb_loop+0x30/0x80 [ 201.619276][ T5461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.625212][ T5461] RIP: 0033:0x7f0764abda0e [ 201.629659][ T5461] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.649311][ T5461] RSP: 002b:00007f0762d54f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.657776][ T5461] RAX: ffffffffffffffda RBX: 00007f0762d556c0 RCX: 00007f0764abda0e [ 201.665777][ T5461] RDX: 00000000009fd000 RSI: 00007f0764eb55a0 RDI: 0000000000000004 [ 201.673780][ T5461] RBP: 00007f0764eb25a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.681777][ T5461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a00000 [ 201.689772][ T5461] R13: 0000000000003000 R14: 00007f0764d84fa0 R15: 00007fffd7b153e8 [ 201.697792][ T5461] [ 201.869037][ T2238] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 201.906019][ T2238] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.032464][ T2238] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.424565][ T2238] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 203.028719][ T2238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.692908][ T2238] usb 3-1: invalid MIDI out EP 0 [ 206.125702][ T5486] 0x000000000003-0x000000010001 : "" [ 206.200094][ T5486] ftl_cs: FTL header corrupt! [ 206.213714][ T2238] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 206.286741][ T5004] udevd[5004]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.311870][ T5486] FAULT_INJECTION: forcing a failure. [ 206.311870][ T5486] name failslab, interval 1, probability 0, space 0, times 0 [ 206.325961][ T2238] usb 3-1: USB disconnect, device number 9 [ 206.376502][ T5486] CPU: 1 PID: 5486 Comm: syz.3.370 Not tainted syzkaller #0 [ 206.383862][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 206.393966][ T5486] Call Trace: [ 206.397261][ T5486] [ 206.400237][ T5486] dump_stack_lvl+0x188/0x250 [ 206.404936][ T5486] ? show_regs_print_info+0x20/0x20 [ 206.410170][ T5486] ? load_image+0x410/0x410 [ 206.414707][ T5486] ? __might_sleep+0xf0/0xf0 [ 206.419321][ T5486] ? __lock_acquire+0x7d40/0x7d40 [ 206.424363][ T5486] should_fail+0x383/0x4b0 [ 206.428818][ T5486] should_failslab+0x5/0x20 [ 206.433351][ T5486] slab_pre_alloc_hook+0x51/0xc0 [ 206.438301][ T5486] ? __kernfs_new_node+0xe3/0x6b0 [ 206.443337][ T5486] kmem_cache_alloc+0x3d/0x280 [ 206.448126][ T5486] __kernfs_new_node+0xe3/0x6b0 [ 206.453080][ T5486] ? __lock_acquire+0x7d40/0x7d40 [ 206.458115][ T5486] ? kernfs_new_node+0x250/0x250 [ 206.463072][ T5486] ? kernfs_activate+0x1eb/0x210 [ 206.468052][ T5486] kernfs_new_node+0x148/0x250 [ 206.472825][ T5486] __kernfs_create_file+0x47/0x2e0 [ 206.477946][ T5486] sysfs_add_file_mode_ns+0x2d2/0x390 [ 206.483346][ T5486] internal_create_group+0x492/0xd00 [ 206.488675][ T5486] ? kernfs_add_one+0x564/0x6c0 [ 206.493576][ T5486] ? sysfs_create_group+0x20/0x20 [ 206.498622][ T5486] ? sysfs_create_dir_ns+0x167/0x290 [ 206.504022][ T5486] ? sysfs_warn_dup+0xa0/0xa0 [ 206.508709][ T5486] ? sysfs_create_dir_ns+0x167/0x290 [ 206.514024][ T5486] sysfs_create_groups+0x55/0x120 [ 206.519058][ T5486] kobject_add_internal+0x6fb/0xcd0 [ 206.524270][ T5486] kobject_add+0x160/0x230 [ 206.528704][ T5486] ? kobject_init+0x1c0/0x1c0 [ 206.533408][ T5486] ? kobject_init+0x1c0/0x1c0 [ 206.538105][ T5486] ? dev_uevent_filter+0x3f/0xb0 [ 206.543055][ T5486] blk_mq_register_hctx+0xe4/0x400 [ 206.548174][ T5486] __blk_mq_register_dev+0x206/0x640 [ 206.553485][ T5486] ? debugfs_create_dir+0x423/0x4c0 [ 206.558700][ T5486] blk_register_queue+0x1fc/0x3a0 [ 206.563757][ T5486] device_add_disk+0x60f/0xde0 [ 206.568551][ T5486] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 206.573873][ T5486] mtdblock_add_mtd+0x186/0x240 [ 206.578743][ T5486] blktrans_notify_add+0x95/0xe0 [ 206.583705][ T5486] add_mtd_device+0xd40/0x1260 [ 206.588514][ T5486] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 206.594342][ T5486] ? mtd_cls_resume+0x130/0x130 [ 206.599245][ T5486] mtd_add_partition+0x25d/0x420 [ 206.604197][ T5486] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 206.609466][ T5486] ? shrink_ecclayout+0xab0/0xab0 [ 206.614554][ T5486] ? __might_fault+0xb3/0x110 [ 206.619416][ T5486] ? _copy_from_user+0x111/0x170 [ 206.624362][ T5486] mtdchar_ioctl+0x14cb/0x1d70 [ 206.629138][ T5486] ? mtdchar_close+0x180/0x180 [ 206.633915][ T5486] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 206.639908][ T5486] ? verify_lock_unused+0x140/0x140 [ 206.645117][ T5486] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 206.650762][ T5486] ? rcu_lock_release+0x5/0x20 [ 206.655548][ T5486] ? __mutex_trylock_common+0x15c/0x260 [ 206.661099][ T5486] ? rcu_lock_release+0x20/0x20 [ 206.665961][ T5486] ? __mutex_lock_common+0x435/0x2400 [ 206.671346][ T5486] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 206.676725][ T5486] ? mutex_lock_io_nested+0x60/0x60 [ 206.681945][ T5486] mtdchar_unlocked_ioctl+0xad/0xd0 [ 206.687164][ T5486] ? mtdchar_write+0x5a0/0x5a0 [ 206.691969][ T5486] __se_sys_ioctl+0xfa/0x170 [ 206.696560][ T5486] do_syscall_64+0x4c/0xa0 [ 206.701001][ T5486] ? clear_bhb_loop+0x30/0x80 [ 206.705683][ T5486] ? clear_bhb_loop+0x30/0x80 [ 206.710374][ T5486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.716287][ T5486] RIP: 0033:0x7f0764afd1d9 [ 206.720707][ T5486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.740318][ T5486] RSP: 002b:00007f0762d55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.748745][ T5486] RAX: ffffffffffffffda RBX: 00007f0764d84fa0 RCX: 00007f0764afd1d9 [ 206.756737][ T5486] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000005 [ 206.764729][ T5486] RBP: 00007f0764b94888 R08: 0000000000000000 R09: 0000000000000000 [ 206.772701][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.780676][ T5486] R13: 00007f0764d85038 R14: 00007f0764d84fa0 R15: 00007fffd7b153e8 [ 206.788780][ T5486] [ 206.839561][ T5486] kobject_add_internal failed for 0 (error: -12 parent: mq) [ 207.079796][ T5495] zram: Cannot change disksize for initialized device [ 210.983670][ T26] audit: type=1326 audit(1791622896.705:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.4.383" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f978f75e1d9 code=0x0 [ 212.471174][ T4763] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 212.722055][ T4763] usb 1-1: Using ep0 maxpacket: 8 [ 212.839209][ T4763] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.858748][ T4763] usb 1-1: config 179 has no interface number 0 [ 212.891743][ T4763] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 212.945164][ T4763] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 212.991282][ T4763] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.047008][ T4763] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 213.106457][ T4763] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 213.307308][ T4763] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 213.349353][ T4763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.434630][ T5544] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.689353][ T4338] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 214.245554][ T4338] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.265718][ T4338] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 214.311139][ T4338] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 214.345576][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.448871][ T4338] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 216.373634][ T5560] ------------[ cut here ]------------ [ 216.432536][ T5560] kernfs: can not remove 'uevent', no directory [ 216.448979][ T5560] WARNING: CPU: 0 PID: 5560 at fs/kernfs/dir.c:1557 kernfs_remove_by_name_ns+0xb1/0x100 [ 216.485643][ T5560] Modules linked in: [ 216.606836][ T5560] CPU: 0 PID: 5560 Comm: syz.2.388 Not tainted syzkaller #0 [ 216.631109][ T5560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 216.697972][ T5560] RIP: 0010:kernfs_remove_by_name_ns+0xb1/0x100 [ 216.802426][ T5560] Code: ff 03 48 89 df e8 3f eb ff ff 48 89 df e8 37 a8 ff ff 31 db eb 27 e8 6e 9a 8b ff 48 c7 c7 40 a0 39 8a 48 89 de e8 cf a0 c9 07 <0f> 0b bb fe ff ff ff eb 16 e8 51 9a 8b ff bb fe ff ff ff 48 c7 c7 [ 216.989048][ T5560] RSP: 0018:ffffc90003307578 EFLAGS: 00010246 [ 216.997313][ T5560] RAX: 9f733a9c5a12f000 RBX: ffffffff8a9c57c0 RCX: 0000000000080000 [ 217.049709][ T5560] RDX: ffffc9000f16e000 RSI: 0000000000068bd8 RDI: 0000000000068bd9 [ 217.315888][ T5560] RBP: ffffc90003307690 R08: ffffc900033070a7 R09: 1ffff92000660e14 [ 217.478679][ T5560] R10: dffffc0000000000 R11: fffff52000660e15 R12: ffffffff8d70f270 [ 217.486731][ T5560] R13: ffff88805e5a8040 R14: 0000000000000000 R15: 0000000000000000 [ 217.517616][ T5560] FS: 00007f8d33c206c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 217.526916][ T5560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.535083][ T5560] CR2: 00007f978d995990 CR3: 000000002b786000 CR4: 00000000003506e0 [ 217.544617][ T5560] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.554088][ T5560] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.563520][ T5560] Call Trace: [ 217.567425][ T5560] [ 217.570727][ T5560] device_del+0x62f/0xa80 [ 217.575104][ T5560] ? kill_device+0x160/0x160 [ 217.591147][ T5560] ? _raw_spin_unlock_irq+0x2a/0x40 [ 217.596403][ T5560] ? pm_runtime_set_memalloc_noio+0x1e3/0x250 [ 217.620234][ T5560] del_gendisk+0x6c0/0x780 [ 217.624741][ T5560] del_mtd_blktrans_dev+0x117/0x320 [ 217.639048][ T5560] blktrans_notify_remove+0xe0/0x150 [ 217.644414][ T5560] del_mtd_device+0x95/0x270 [ 217.670833][ T5560] __mtd_del_partition+0x95/0x1d0 [ 217.675930][ T5560] mtd_del_partition+0xe4/0x100 [ 217.702178][ T5560] mtdchar_blkpg_ioctl+0x207/0x2b0 [ 217.707364][ T5560] ? shrink_ecclayout+0xab0/0xab0 [ 217.723529][ T5560] ? __might_fault+0xb3/0x110 [ 217.728276][ T5560] ? _copy_from_user+0x111/0x170 [ 217.736562][ T4215] ================================================================== [ 217.745079][ T4215] BUG: KASAN: use-after-free in __list_del_entry_valid+0x80/0x120 [ 217.748794][ T5560] mtdchar_ioctl+0x14cb/0x1d70 [ 217.752921][ T4215] Read of size 8 at addr ffff88805e5a8268 by task kworker/u4:5/4215 [ 217.757703][ T5560] ? mtdchar_close+0x180/0x180 [ 217.765677][ T4215] [ 217.765685][ T4215] CPU: 0 PID: 4215 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 217.765704][ T4215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 217.765718][ T4215] Workqueue: netns cleanup_net [ 217.795256][ T4215] Call Trace: [ 217.798561][ T4215] [ 217.798808][ T5560] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.801518][ T4215] dump_stack_lvl+0x188/0x250 [ 217.807517][ T5560] ? verify_lock_unused+0x140/0x140 [ 217.812199][ T4215] ? show_regs_print_info+0x20/0x20 [ 217.812226][ T4215] ? load_image+0x410/0x410 [ 217.812244][ T4215] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 217.832364][ T5560] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 217.832648][ T4215] print_address_description+0x60/0x2d0 [ 217.838291][ T5560] ? rcu_lock_release+0x5/0x20 [ 217.843840][ T4215] ? __list_del_entry_valid+0x80/0x120 [ 217.843864][ T4215] kasan_report+0xdf/0x130 [ 217.843889][ T4215] ? __list_del_entry_valid+0x80/0x120 [ 217.864007][ T4215] __list_del_entry_valid+0x80/0x120 [ 217.868817][ T5560] ? __mutex_trylock_common+0x15c/0x260 [ 217.869332][ T4215] device_pm_remove+0x94/0x2d0 [ 217.876484][ T5560] ? rcu_lock_release+0x20/0x20 [ 217.879661][ T4215] device_del+0x647/0xa80 [ 217.879693][ T4215] ? kill_device+0x160/0x160 [ 217.879714][ T4215] ? pm_runtime_set_memalloc_noio+0x1e3/0x250 [ 217.879741][ T4215] ? netdev_unregister_kobject+0x164/0x250 [ 217.879769][ T4215] unregister_netdevice_many+0x1530/0x1a40 [ 217.879802][ T4215] ? alloc_netdev_mqs+0xc40/0xc40 [ 217.879829][ T4215] ? unregister_netdevice_queue+0x17c/0x320 [ 217.879854][ T4215] ? list_netdevice+0x460/0x460 [ 217.879881][ T4215] ? remove_wait_queue+0x2f/0x120 [ 217.900697][ T5560] ? __mutex_lock_common+0x435/0x2400 [ 217.905540][ T4215] default_device_exit_batch+0x364/0x3c0 [ 217.929212][ T5560] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 217.932217][ T4215] ? default_device_exit+0x370/0x370 [ 217.937600][ T5560] ? mutex_lock_io_nested+0x60/0x60 [ 217.943228][ T4215] ? wait_woken+0x1b0/0x1b0 [ 217.943267][ T4215] ? mutex_lock_nested+0x17/0x20 [ 217.943288][ T4215] ? default_device_exit+0x370/0x370 [ 217.960490][ T5560] mtdchar_unlocked_ioctl+0xad/0xd0 [ 217.963673][ T4215] cleanup_net+0x78e/0xba0 [ 217.983563][ T4215] ? ops_free_list+0x330/0x330 [ 217.988367][ T4215] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 217.988762][ T5560] ? mtdchar_write+0x5a0/0x5a0 [ 217.994349][ T4215] ? _raw_spin_unlock+0x40/0x40 [ 218.003999][ T4215] ? _raw_spin_unlock_irq+0x1f/0x40 [ 218.008753][ T5560] __se_sys_ioctl+0xfa/0x170 [ 218.009250][ T4215] process_one_work+0x867/0xff0 [ 218.013852][ T5560] do_syscall_64+0x4c/0xa0 [ 218.018718][ T4215] ? worker_detach_from_pool+0x240/0x240 [ 218.018743][ T4215] ? lockdep_hardirqs_off+0x70/0x100 [ 218.018782][ T4215] ? _raw_spin_lock_irq+0xb7/0xf0 [ 218.039150][ T4215] ? _raw_spin_lock_irqsave+0x100/0x100 [ 218.044763][ T4215] ? wq_worker_running+0x97/0x170 [ 218.048752][ T5560] ? clear_bhb_loop+0x30/0x80 [ 218.049820][ T4215] worker_thread+0xad7/0x12a0 [ 218.054504][ T5560] ? clear_bhb_loop+0x30/0x80 [ 218.059221][ T4215] kthread+0x42e/0x520 [ 218.059245][ T4215] ? rcu_lock_release+0x20/0x20 [ 218.066397][ T5560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.068042][ T4215] ? kthread_blkcg+0xd0/0xd0 [ 218.079403][ T5560] RIP: 0033:0x7f8d359e91d9 [ 218.083523][ T4215] ret_from_fork+0x1f/0x30 [ 218.087952][ T5560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.092504][ T4215] [ 218.092515][ T4215] [ 218.092520][ T4215] Allocated by task 5486: [ 218.092546][ T4215] __kasan_slab_alloc+0x92/0xc0 [ 218.126964][ T4215] slab_post_alloc_hook+0x4c/0x380 [ 218.132113][ T4215] kmem_cache_alloc+0x15d/0x280 [ 218.137020][ T4215] bdev_alloc_inode+0x17/0x50 [ 218.141735][ T4215] new_inode_pseudo+0x5f/0x210 [ 218.146537][ T4215] new_inode+0x25/0x1d0 [ 218.150723][ T4215] bdev_alloc+0x20/0x230 [ 218.155005][ T4215] __alloc_disk_node+0xbb/0x4f0 [ 218.158789][ T5560] RSP: 002b:00007f8d33c20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.159906][ T4215] __blk_mq_alloc_disk+0xdf/0x150 [ 218.159934][ T4215] add_mtd_blktrans_dev+0x8d6/0x13f0 [ 218.168369][ T5560] RAX: ffffffffffffffda RBX: 00007f8d35c71090 RCX: 00007f8d359e91d9 [ 218.173399][ T4215] mtdblock_add_mtd+0x186/0x240 [ 218.173419][ T4215] blktrans_notify_add+0x95/0xe0 [ 218.173436][ T4215] add_mtd_device+0xd40/0x1260 [ 218.173456][ T4215] mtd_add_partition+0x25d/0x420 [ 218.173473][ T4215] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 218.199084][ T5560] RDX: 0000200000000740 RSI: 0000000000001269 RDI: 0000000000000008 [ 218.201310][ T4215] mtdchar_ioctl+0x14cb/0x1d70 [ 218.206265][ T5560] RBP: 00007f8d35a80888 R08: 0000000000000000 R09: 0000000000000000 [ 218.211381][ T4215] mtdchar_unlocked_ioctl+0xad/0xd0 [ 218.211402][ T4215] __se_sys_ioctl+0xfa/0x170 [ 218.211419][ T4215] do_syscall_64+0x4c/0xa0 [ 218.211439][ T4215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.248782][ T5560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.252627][ T4215] [ 218.252635][ T4215] Freed by task 14: [ 218.266780][ T4215] kasan_set_track+0x4b/0x70 [ 218.268742][ T5560] R13: 00007f8d35c71128 R14: 00007f8d35c71090 R15: 00007ffcdbcf0cc8 [ 218.271400][ T4215] kasan_set_free_info+0x1f/0x40 [ 218.284346][ T4215] ____kasan_slab_free+0xd5/0x110 [ 218.289407][ T4215] slab_free_freelist_hook+0xec/0x170 [ 218.294820][ T4215] kmem_cache_free+0x8f/0x210 [ 218.299535][ T4215] rcu_core+0x96e/0x1650 [ 218.303806][ T4215] handle_softirqs+0x336/0x830 [ 218.308603][ T4215] run_ksoftirqd+0xa4/0x100 [ 218.308777][ T5560] [ 218.313129][ T4215] smpboot_thread_fn+0x520/0x990 [ 218.316203][ T5560] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 218.321110][ T4215] kthread+0x42e/0x520 [ 218.328414][ T5560] CPU: 1 PID: 5560 Comm: syz.2.388 Not tainted syzkaller #0 [ 218.332497][ T4215] ret_from_fork+0x1f/0x30 [ 218.339781][ T5560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 218.344204][ T4215] [ 218.344212][ T4215] Last potentially related work creation: [ 218.354272][ T5560] Call Trace: [ 218.354285][ T5560] [ 218.356623][ T4215] kasan_save_stack+0x35/0x60 [ 218.362362][ T5560] dump_stack_lvl+0x188/0x250 [ 218.365660][ T4215] kasan_record_aux_stack+0xb8/0x100 [ 218.368620][ T5560] ? show_regs_print_info+0x20/0x20 [ 218.373297][ T4215] call_rcu+0x189/0x900 [ 218.377990][ T5560] ? load_image+0x410/0x410 [ 218.383421][ T4215] evict+0x810/0x8b0 [ 218.388652][ T5560] panic+0x2f8/0x850 [ 218.392802][ T4215] device_release+0x92/0x1c0 [ 218.397323][ T5560] ? bpf_jit_dump+0xd0/0xd0 [ 218.401219][ T4215] kobject_put+0x217/0x450 [ 218.405141][ T5560] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 218.409711][ T4215] device_del+0x5d5/0xa80 [ 218.414226][ T5560] __warn+0x248/0x2b0 [ 218.418647][ T4215] del_gendisk+0x6c0/0x780 [ 218.424293][ T5560] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 218.428618][ T4215] del_mtd_blktrans_dev+0x117/0x320 [ 218.432609][ T5560] report_bug+0x1b9/0x2e0 [ 218.437022][ T4215] blktrans_notify_remove+0xe0/0x150 [ 218.442668][ T5560] handle_bug+0x3a/0x70 [ 218.447894][ T4215] del_mtd_device+0x95/0x270 [ 218.452246][ T5560] exc_invalid_op+0x16/0x40 [ 218.457538][ T4215] __mtd_del_partition+0x95/0x1d0 [ 218.461704][ T5560] asm_exc_invalid_op+0x16/0x20 [ 218.466299][ T4215] mtd_del_partition+0xe4/0x100 [ 218.470807][ T5560] RIP: 0010:kernfs_remove_by_name_ns+0xb1/0x100 [ 218.475836][ T4215] mtdchar_blkpg_ioctl+0x207/0x2b0 [ 218.480690][ T5560] Code: ff 03 48 89 df e8 3f eb ff ff 48 89 df e8 37 a8 ff ff 31 db eb 27 e8 6e 9a 8b ff 48 c7 c7 40 a0 39 8a 48 89 de e8 cf a0 c9 07 <0f> 0b bb fe ff ff ff eb 16 e8 51 9a 8b ff bb fe ff ff ff 48 c7 c7 [ 218.485540][ T4215] mtdchar_ioctl+0x14cb/0x1d70 [ 218.491784][ T5560] RSP: 0018:ffffc90003307578 EFLAGS: 00010246 [ 218.496918][ T4215] mtdchar_unlocked_ioctl+0xad/0xd0 [ 218.516533][ T5560] [ 218.516542][ T5560] RAX: 9f733a9c5a12f000 RBX: ffffffff8a9c57c0 RCX: 0000000000080000 [ 218.521309][ T4215] __se_sys_ioctl+0xfa/0x170 [ 218.527464][ T5560] RDX: ffffc9000f16e000 RSI: 0000000000068bd8 RDI: 0000000000068bd9 [ 218.532670][ T4215] do_syscall_64+0x4c/0xa0 [ 218.535012][ T5560] RBP: ffffc90003307690 R08: ffffc900033070a7 R09: 1ffff92000660e14 [ 218.542992][ T4215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.547586][ T5560] R10: dffffc0000000000 R11: fffff52000660e15 R12: ffffffff8d70f270 [ 218.555571][ T4215] [ 218.555578][ T4215] The buggy address belongs to the object at ffff88805e5a8000 [ 218.555578][ T4215] which belongs to the cache bdev_cache of size 2848 [ 218.560028][ T5560] R13: ffff88805e5a8040 R14: 0000000000000000 R15: 0000000000000000 [ 218.568010][ T4215] The buggy address is located 616 bytes inside of [ 218.568010][ T4215] 2848-byte region [ffff88805e5a8000, ffff88805e5a8b20) [ 218.573947][ T5560] ? kernfs_remove_by_name_ns+0xb1/0x100 [ 218.581920][ T4215] The buggy address belongs to the page: [ 218.581961][ T4215] page:ffffea0001796a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e5a8 [ 218.584279][ T5560] device_del+0x62f/0xa80 [ 218.598419][ T4215] head:ffffea0001796a00 order:3 compound_mapcount:0 compound_pincount:0 [ 218.606415][ T5560] ? kill_device+0x160/0x160 [ 218.619767][ T4215] memcg:ffff88805ed97c01 [ 218.625418][ T5560] ? _raw_spin_unlock_irq+0x2a/0x40 [ 218.631070][ T4215] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 218.641221][ T5560] ? pm_runtime_set_memalloc_noio+0x1e3/0x250 [ 218.645572][ T4215] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801854e000 [ 218.653899][ T5560] del_gendisk+0x6c0/0x780 [ 218.658586][ T4215] raw: 0000000000000000 00000000800a000a 00000001ffffffff ffff88805ed97c01 [ 218.662834][ T5560] del_mtd_blktrans_dev+0x117/0x320 [ 218.668053][ T4215] page dumped because: kasan: bad access detected [ 218.676040][ T5560] blktrans_notify_remove+0xe0/0x150 [ 218.682157][ T4215] page_owner tracks the page as allocated [ 218.690729][ T5560] del_mtd_device+0x95/0x270 [ 218.695157][ T4215] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5486, ts 206232979870, free_ts 188821472209 [ 218.703743][ T5560] __mtd_del_partition+0x95/0x1d0 [ 218.709027][ T4215] get_page_from_freelist+0x24f6/0x2670 [ 218.715468][ T5560] mtd_del_partition+0xe4/0x100 [ 218.720749][ T4215] __alloc_pages+0x1ee/0x480 [ 218.726478][ T5560] mtdchar_blkpg_ioctl+0x207/0x2b0 [ 218.731066][ T4215] new_slab+0xc0/0x4b0 [ 218.753461][ T5560] ? shrink_ecclayout+0xab0/0xab0 [ 218.758486][ T4215] ___slab_alloc+0x807/0xdd0 [ 218.764078][ T5560] ? __might_fault+0xb3/0x110 [ 218.768891][ T4215] kmem_cache_alloc+0xf0/0x280 [ 218.773514][ T5560] ? _copy_from_user+0x111/0x170 [ 218.778622][ T4215] bdev_alloc_inode+0x17/0x50 [ 218.782699][ T5560] mtdchar_ioctl+0x14cb/0x1d70 [ 218.787728][ T4215] new_inode_pseudo+0x5f/0x210 [ 218.792332][ T5560] ? mtdchar_close+0x180/0x180 [ 218.797010][ T4215] new_inode+0x25/0x1d0 [ 218.801783][ T5560] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 218.806719][ T4215] bdev_alloc+0x20/0x230 [ 218.811408][ T5560] ? verify_lock_unused+0x140/0x140 [ 218.816171][ T4215] __alloc_disk_node+0xbb/0x4f0 [ 218.820975][ T5560] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 218.825761][ T4215] __blk_mq_alloc_disk+0xdf/0x150 [ 218.829934][ T5560] ? rcu_lock_release+0x5/0x20 [ 218.835912][ T4215] add_mtd_blktrans_dev+0x8d6/0x13f0 [ 218.840209][ T5560] ? __mutex_trylock_common+0x15c/0x260 [ 218.845386][ T4215] mtdblock_add_mtd+0x186/0x240 [ 218.850244][ T5560] ? rcu_lock_release+0x20/0x20 [ 218.855875][ T4215] blktrans_notify_add+0x95/0xe0 [ 218.861015][ T5560] ? __mutex_lock_common+0x435/0x2400 [ 218.865788][ T4215] add_mtd_device+0xd40/0x1260 [ 218.871134][ T5560] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 218.876674][ T4215] mtd_add_partition+0x25d/0x420 [ 218.881541][ T5560] ? mutex_lock_io_nested+0x60/0x60 [ 218.886429][ T4215] page last free stack trace: [ 218.886437][ T4215] free_unref_page_prepare+0x637/0x6c0 [ 218.891448][ T5560] mtdchar_unlocked_ioctl+0xad/0xd0 [ 218.896780][ T4215] free_unref_page+0x8f/0x2a0 [ 218.901588][ T5560] ? mtdchar_write+0x5a0/0x5a0 [ 218.907010][ T4215] __unfreeze_partials+0x188/0x1e0 [ 218.911964][ T5560] __se_sys_ioctl+0xfa/0x170 [ 218.917157][ T4215] put_cpu_partial+0x12d/0x190 [ 218.921846][ T5560] do_syscall_64+0x4c/0xa0 [ 218.927339][ T4215] qlist_free_all+0x35/0x90 [ 218.932628][ T5560] ? clear_bhb_loop+0x30/0x80 [ 218.937310][ T4215] kasan_quarantine_reduce+0x150/0x160 [ 218.942169][ T5560] ? clear_bhb_loop+0x30/0x80 [ 218.947289][ T4215] __kasan_slab_alloc+0x2f/0xc0 [ 218.951909][ T5560] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.956668][ T4215] slab_post_alloc_hook+0x4c/0x380 [ 218.961195][ T5560] RIP: 0033:0x7f8d359e91d9 [ 218.965707][ T4215] kmem_cache_alloc+0x15d/0x280 [ 218.970389][ T5560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.975846][ T4215] getname_flags+0xb7/0x4f0 [ 218.980525][ T5560] RSP: 002b:00007f8d33c20028 EFLAGS: 00000246 [ 218.985381][ T4215] user_path_at_empty+0x2a/0x190 [ 218.991276][ T5560] ORIG_RAX: 0000000000000010 [ 218.996394][ T4215] vfs_statx+0x107/0x4c0 [ 219.000821][ T5560] RAX: ffffffffffffffda RBX: 00007f8d35c71090 RCX: 00007f8d359e91d9 [ 219.005680][ T4215] __x64_sys_newfstatat+0x15f/0x200 [ 219.025384][ T5560] RDX: 0000200000000740 RSI: 0000000000001269 RDI: 0000000000000008 [ 219.029899][ T4215] do_syscall_64+0x4c/0xa0 [ 219.036065][ T5560] RBP: 00007f8d35a80888 R08: 0000000000000000 R09: 0000000000000000 [ 219.041028][ T4215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.045729][ T5560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.049982][ T4215] [ 219.049988][ T4215] Memory state around the buggy address: [ 219.057959][ T5560] R13: 00007f8d35c71128 R14: 00007f8d35c71090 R15: 00007ffcdbcf0cc8 [ 219.063180][ T4215] ffff88805e5a8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.071215][ T5560] [ 219.075612][ T4215] ffff88805e5a8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.132592][ T4215] >ffff88805e5a8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.140692][ T4215] ^ [ 219.148169][ T4215] ffff88805e5a8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.156246][ T4215] ffff88805e5a8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 219.164352][ T4215] ================================================================== [ 219.172437][ T4215] Disabling lock debugging due to kernel taint [ 219.178892][ T5560] Kernel Offset: disabled [ 219.183228][ T5560] Rebooting in 86400 seconds..