last executing test programs: 8.849428917s ago: executing program 1 (id=245): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 8.234312772s ago: executing program 0 (id=247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xb, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 8.031164107s ago: executing program 1 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 7.851006851s ago: executing program 2 (id=250): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000280)='L', 0x1) read$char_usb(r2, 0x0, 0x0) write$char_usb(r1, &(0x7f00000003c0)='0', 0x1) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x0, 0x23, 0x2, {0x2, 0x22}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x20, 0x11, 0x20, "f9f0bdc2e2b54554c978f9e1cb652a6f61e69047e85d6a8aab9824870033e8a5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xb, 0x2, "a78c"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xcfa3}, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x2}, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x7}}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r0) 7.849708201s ago: executing program 0 (id=251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x1) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db6421643333c60f7d7bfc5324c89c2e432f45f"], 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 7.740531884s ago: executing program 3 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000340)="66b8090000000f23d00f21f86635200000060f23f80f01d166b90f04000066b800a0968466ba000000000f30262e360fc75c046766c7442400f20900006766c7442402000000006766c744240600000000670f0114240f743c360fc73a0fd2036766c7442400f71f00006766c7442402c16400006766c744240600000000670f011424f22666fe886450", 0x8a}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.556665028s ago: executing program 0 (id=253): syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x4081) r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="40123b00000045"], 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r2) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r4 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f"], 0x0) syz_usb_disconnect(r4) syz_usb_disconnect(r3) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000700)=ANY=[], 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0xff, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x2, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x40, 0xd, 0x14, {0x14, 0x21, "6e2583886c6c7b3c5fb5ad3c2f6b681965fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.313194094s ago: executing program 1 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = epoll_create(0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x9, 0x0, r4, r0, &(0x7f0000000040)={0x4000001a}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) chdir(&(0x7f0000000240)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4014) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socket(0x25, 0x2, 0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) 7.07049875s ago: executing program 1 (id=255): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000480)="131424000000001962e0479cc6b5b630") 6.971410502s ago: executing program 3 (id=256): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80001, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) iopl(0x40) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x7, 0x0, 0x0) 5.864114759s ago: executing program 3 (id=257): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0xd, 0x1}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x44040) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 4.867107263s ago: executing program 3 (id=258): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002400)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback, 0xe, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000008000000040000002900000080010400", @ANYRES32, @ANYBLOB="000000000000000000000000000000fdffefff00f37b8870a5f9a8091f29f149794f57632814af56dfcec179eaf6df251907d2fb4deff93f142957ad02491fb345a7fd8804ed03806cbf7f07fde7a4d9c1a06a313124a1361fd2f68de34eadccb29b947a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05002000010000000200"/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0x301, 0xffffffffffbffff4) timerfd_create(0x7, 0x80800) statx(0xffffffffffffffff, &(0x7f00000025c0)='./file0\x00', 0x1000, 0x200, &(0x7f0000002600)) fstat(r0, &(0x7f0000002a00)) 3.425365818s ago: executing program 3 (id=259): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 3.285303931s ago: executing program 2 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = epoll_create(0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x9, 0x0, r4, r0, &(0x7f0000000040)={0x4000001a}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) chdir(&(0x7f0000000240)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x33, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x5, 0x6c, 0x0, @local, @remote}, "001880"}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0xa37f0f0492d077cf, 0x0, 0x0, {0x2, 0x80, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000500}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4014) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) 3.285086411s ago: executing program 1 (id=261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xb, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 3.102832185s ago: executing program 2 (id=262): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)="00ff95bba3edbf", 0x7) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='./file0\n', 0x8) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='1\n', 0x2) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) 2.966572909s ago: executing program 1 (id=263): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101959530263b7b49760829309102c0"], 0x0}, 0x0) 2.769379233s ago: executing program 2 (id=264): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000", @ANYRES32], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8) socket$nl_generic(0x11, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80001, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) iopl(0x40) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x7, 0x0, 0x0) 2.302822734s ago: executing program 0 (id=265): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="3078353637380a95349a86b20d25de8024c7d88700da093534e03a932a9ff73cdbd9d33302b451eea5abe67c0548c0060242058f1409ef5c1b749f34788a433eaf24684b181b233d6c66f15a3100bf9fde65e484a31150327e2745a3442cd32d6b7ce88969b79afd77b146a75282b8f8bfc0a73dc83882eaf27d458198cd085af9040e781237af05d8df5939273fc40e5f44c19744249018ad5df4696e890b94f0736b5474aa9dfe6f08348eaa21ef073cd979ce18c4817b2a482e7183492e", 0xbf) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)="310a0000000000dbfb239d4626adee58fd754d323afc7b2736ee85757271dc7ae4b98aabaf55146547cfc59abe3efec26a7b3f2f2bc29baf7919e5c0646c889b14b3adb8dbd6e3d08ba3fa0f98168f27810f97edb89937bcb0943a0004cb0508e65cb5c49bbaeb3b7d7faa89c8538e3f469d3e86db9e3e785f8a7da23b55abd9d0d4993407125f74a74b320ec0e7cf127fbf9b0000000000", 0xd9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r7, &(0x7f00000004c0)='\n', 0x1) 1.686212589s ago: executing program 2 (id=266): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./lower1/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0, &(0x7f0000000400), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000300)=ANY=[], 0x3f) close_range(r0, 0xffffffffffffffff, 0x0) 1.416474236s ago: executing program 0 (id=267): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002400)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback, 0xe, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000008000000040000002900000080010400", @ANYRES32, @ANYBLOB="000000000000000000000000000000fdffefff00f37b8870a5f9a8091f29f149794f57632814af56dfcec179eaf6df251907d2fb4deff93f142957ad02491fb345a7fd8804ed03806cbf7f07fde7a4d9c1a06a313124a1361fd2f68de34eadccb29b947a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05002000010000000200"/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0x301, 0xffffffffffbffff4) timerfd_create(0x7, 0x80800) statx(0xffffffffffffffff, &(0x7f00000025c0)='./file0\x00', 0x1000, 0x200, &(0x7f0000002600)) fstat(r0, &(0x7f0000002a00)) 1.415393936s ago: executing program 2 (id=268): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000340)="66b8090000000f23d00f21f86635200000060f23f80f01d166b90f04000066b800a0968466ba000000000f30262e360fc75c046766c7442400f20900006766c7442402000000006766c744240600000000670f0114240f743c360fc73a0fd2036766c7442400f71f00006766c7442402c16400006766c744240600000000670f011424f22666fe886450", 0x8a}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r0, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.294352139s ago: executing program 3 (id=269): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff3, 0xa, 0x5, 0xc, 0x2, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0x3, 0x7, 0xfb, 0x1, 0x3, 0x2}], 0x8}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000b40)={[0x40009, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x3, 0xfffffffffffffffd, 0x4002004c3, 0xffd, 0x0, 0x2a, 0x14, 0xffff, 0x4, 0x0, 0x9, 0x7], 0x70000, 0x2011c0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 0s ago: executing program 0 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = epoll_create(0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x9, 0x0, r4, r0, &(0x7f0000000040)={0x4000001a}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) chdir(&(0x7f0000000240)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x33, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x5, 0x6c, 0x0, @local, @remote}, "001880"}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0xa37f0f0492d077cf, 0x0, 0x0, {0x2, 0x80, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000500}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4014) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 69.622349][ T5761] cgroup: Unknown subsys name 'net' [ 69.754505][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.104903][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.610488][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.616919][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.565615][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.575238][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.597512][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.605359][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.614181][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.615860][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.622714][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.630527][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.636400][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.644562][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.650150][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.657867][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.665161][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.678834][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.688138][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.695258][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.704610][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.709988][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.714181][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.722314][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.732890][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.736608][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.743080][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.750721][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.187646][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 73.264955][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 73.296765][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 73.371086][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 73.382912][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.390817][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.398459][ T5774] bridge_slave_0: entered allmulticast mode [ 73.405251][ T5774] bridge_slave_0: entered promiscuous mode [ 73.443379][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.452499][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.460501][ T5774] bridge_slave_1: entered allmulticast mode [ 73.467202][ T5774] bridge_slave_1: entered promiscuous mode [ 73.556168][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.574667][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.585347][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.592687][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.600733][ T5776] bridge_slave_0: entered allmulticast mode [ 73.607535][ T5776] bridge_slave_0: entered promiscuous mode [ 73.625449][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.632975][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.640248][ T5776] bridge_slave_1: entered allmulticast mode [ 73.646953][ T5776] bridge_slave_1: entered promiscuous mode [ 73.674630][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.682315][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.689723][ T5775] bridge_slave_0: entered allmulticast mode [ 73.696719][ T5775] bridge_slave_0: entered promiscuous mode [ 73.731615][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.738865][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.746204][ T5773] bridge_slave_0: entered allmulticast mode [ 73.753218][ T5773] bridge_slave_0: entered promiscuous mode [ 73.760875][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.768414][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.775721][ T5775] bridge_slave_1: entered allmulticast mode [ 73.782814][ T5775] bridge_slave_1: entered promiscuous mode [ 73.808538][ T5774] team0: Port device team_slave_0 added [ 73.816741][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.830223][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.837533][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.844691][ T5773] bridge_slave_1: entered allmulticast mode [ 73.851611][ T5773] bridge_slave_1: entered promiscuous mode [ 73.871398][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.882654][ T5774] team0: Port device team_slave_1 added [ 73.919546][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.932708][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.971727][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.995565][ T5776] team0: Port device team_slave_0 added [ 74.002601][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.012429][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.038683][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.053758][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.060922][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.087168][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.100429][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.122073][ T5776] team0: Port device team_slave_1 added [ 74.158231][ T5775] team0: Port device team_slave_0 added [ 74.193805][ T5775] team0: Port device team_slave_1 added [ 74.211197][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.218863][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.245298][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.258781][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.265836][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.292075][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.310350][ T5773] team0: Port device team_slave_0 added [ 74.334431][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.341488][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.367567][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.386657][ T5773] team0: Port device team_slave_1 added [ 74.414105][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.421220][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.448746][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.480115][ T5774] hsr_slave_0: entered promiscuous mode [ 74.486799][ T5774] hsr_slave_1: entered promiscuous mode [ 74.540595][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.550292][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.580312][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.617984][ T5776] hsr_slave_0: entered promiscuous mode [ 74.626881][ T5776] hsr_slave_1: entered promiscuous mode [ 74.633272][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.641405][ T5776] Cannot create hsr debugfs directory [ 74.647873][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.654832][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.683342][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.711161][ T5775] hsr_slave_0: entered promiscuous mode [ 74.717605][ T5775] hsr_slave_1: entered promiscuous mode [ 74.723787][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.734015][ T5775] Cannot create hsr debugfs directory [ 74.813360][ T5788] Bluetooth: hci0: command tx timeout [ 74.816166][ T5773] hsr_slave_0: entered promiscuous mode [ 74.819127][ T5788] Bluetooth: hci3: command tx timeout [ 74.831011][ T5787] Bluetooth: hci1: command tx timeout [ 74.831189][ T5773] hsr_slave_1: entered promiscuous mode [ 74.836584][ T5787] Bluetooth: hci2: command tx timeout [ 74.847845][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.855453][ T5773] Cannot create hsr debugfs directory [ 75.178064][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.197510][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.207044][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.220975][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.274720][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.301585][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.312589][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.334107][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.400179][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.412092][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.432841][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.444739][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.515316][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.524917][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.536200][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.560236][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.669566][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.691112][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.736203][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.754753][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.774037][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.781494][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.808939][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.816132][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.846663][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.853850][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.871970][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.879294][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.905860][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.928690][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.001592][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.012949][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.063037][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.070250][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.083849][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.091142][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.114692][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.121864][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.158942][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.166124][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.275830][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.322646][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.470191][ T5773] veth0_vlan: entered promiscuous mode [ 76.510612][ T5773] veth1_vlan: entered promiscuous mode [ 76.616819][ T5773] veth0_macvtap: entered promiscuous mode [ 76.641274][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.652930][ T5773] veth1_macvtap: entered promiscuous mode [ 76.711453][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.744039][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.766073][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.776638][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.786854][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.796317][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.855186][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.888008][ T5787] Bluetooth: hci3: command tx timeout [ 76.889615][ T51] Bluetooth: hci2: command tx timeout [ 76.893439][ T5787] Bluetooth: hci1: command tx timeout [ 76.899190][ T5788] Bluetooth: hci0: command tx timeout [ 76.913966][ T5774] veth0_vlan: entered promiscuous mode [ 76.961808][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.977125][ T5774] veth1_vlan: entered promiscuous mode [ 77.069765][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.086213][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.103784][ T5774] veth0_macvtap: entered promiscuous mode [ 77.116742][ T5775] veth0_vlan: entered promiscuous mode [ 77.149639][ T5774] veth1_macvtap: entered promiscuous mode [ 77.167949][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.175817][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.199789][ T5775] veth1_vlan: entered promiscuous mode [ 77.219327][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.235018][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.256929][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.278529][ T5776] veth0_vlan: entered promiscuous mode [ 77.292940][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.304622][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.322188][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.344624][ T5776] veth1_vlan: entered promiscuous mode [ 77.374616][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.387125][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.402161][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.411659][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.496072][ T5775] veth0_macvtap: entered promiscuous mode [ 77.969509][ T5775] veth1_macvtap: entered promiscuous mode [ 78.400843][ T5776] veth0_macvtap: entered promiscuous mode [ 78.455808][ T5776] veth1_macvtap: entered promiscuous mode [ 78.479354][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.499940][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.540835][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.558150][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.569561][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.580198][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.593507][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.618121][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.632828][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.644509][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.664358][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.675065][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.686498][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.699347][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.707934][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.711349][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.726318][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.736919][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.742329][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.760570][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.773466][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.810823][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.821473][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.832036][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.844593][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.853976][ T5847] overlayfs: failed to resolve 'upper': -2 [ 78.908389][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.929194][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.943411][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.955170][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.968246][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.971243][ T5788] Bluetooth: hci1: command tx timeout [ 78.980558][ T51] Bluetooth: hci3: command tx timeout [ 78.984689][ T5787] Bluetooth: hci0: command tx timeout [ 78.991354][ T51] Bluetooth: hci2: command tx timeout [ 79.006576][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.020549][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.051344][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.074793][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.085683][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.094918][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.290591][ T5854] jffs2: notice: (5854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.311204][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.324664][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.427878][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.437278][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.530522][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.558640][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.595418][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.634286][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.753929][ T5870] overlayfs: failed to resolve 'upper': -2 [ 80.861887][ T5875] jffs2: notice: (5875) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.050432][ T5787] Bluetooth: hci2: command tx timeout [ 81.056613][ T5787] Bluetooth: hci0: command tx timeout [ 81.067504][ T5788] Bluetooth: hci3: command tx timeout [ 81.368122][ T5889] jffs2: notice: (5889) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.659598][ T5903] jffs2: notice: (5903) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.155066][ T5908] overlayfs: failed to resolve 'work': -2 [ 82.936048][ T5928] jffs2: notice: (5928) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.208070][ T5924] configfs-gadget.g1 gadget.0: HOST MAC e6:f8:0f:3f:ca:b7 [ 83.215783][ T5924] configfs-gadget.g1 gadget.0: MAC f6:4a:b3:ad:5c:75 [ 83.329361][ T5940] jffs2: notice: (5940) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.593588][ T5947] overlayfs: failed to resolve 'work': -2 [ 83.771504][ T5787] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 83.781024][ T5787] Bluetooth: hci1: Injecting HCI hardware error event [ 83.789233][ T5779] Bluetooth: hci1: hardware error 0x00 [ 84.726555][ T5968] jffs2: notice: (5968) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 85.056097][ T5982] jffs2: notice: (5982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 85.385075][ T5994] FAULT_INJECTION: forcing a failure. [ 85.385075][ T5994] name failslab, interval 1, probability 0, space 0, times 1 [ 85.448116][ T5994] CPU: 0 PID: 5994 Comm: syz.2.45 Not tainted syzkaller #0 [ 85.455846][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.466817][ T5994] Call Trace: [ 85.470132][ T5994] [ 85.473092][ T5994] dump_stack_lvl+0x18c/0x250 [ 85.477825][ T5994] ? show_regs_print_info+0x20/0x20 [ 85.483044][ T5994] ? load_image+0x420/0x420 [ 85.487567][ T5994] ? __lock_acquire+0x7d80/0x7d80 [ 85.492715][ T5994] should_fail_ex+0x394/0x4c0 [ 85.497415][ T5994] should_failslab+0x9/0x20 [ 85.502041][ T5994] slab_pre_alloc_hook+0x59/0x300 [ 85.507109][ T5994] kmem_cache_alloc_lru+0x4d/0x2b0 [ 85.512251][ T5994] ? sock_alloc_inode+0x28/0xc0 [ 85.517531][ T5994] sock_alloc_inode+0x28/0xc0 [ 85.522218][ T5994] ? sockfs_init_fs_context+0xb0/0xb0 [ 85.528025][ T5994] new_inode_pseudo+0x63/0x1d0 [ 85.532803][ T5994] __sock_create+0x12d/0x940 [ 85.537392][ T5994] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 85.543829][ T5994] __sys_socket+0xd7/0x1b0 [ 85.548257][ T5994] __x64_sys_socket+0x7a/0x90 [ 85.552947][ T5994] do_syscall_64+0x55/0xb0 [ 85.557369][ T5994] ? clear_bhb_loop+0x40/0x90 [ 85.562183][ T5994] ? clear_bhb_loop+0x40/0x90 [ 85.566928][ T5994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.572849][ T5994] RIP: 0033:0x7f629799e159 [ 85.577296][ T5994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.597283][ T5994] RSP: 002b:00007f62988da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 85.605726][ T5994] RAX: ffffffffffffffda RBX: 00007f6297c25fa0 RCX: 00007f629799e159 [ 85.613964][ T5994] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 85.622294][ T5994] RBP: 00007f6297a35024 R08: 0000000000000000 R09: 0000000000000000 [ 85.630271][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.638336][ T5994] R13: 00007f6297c26038 R14: 00007f6297c25fa0 R15: 00007fffe099f568 [ 85.646327][ T5994] [ 85.668836][ T5994] socket: no more sockets [ 85.743687][ T5996] overlayfs: failed to resolve 'work': -2 [ 85.769383][ T5787] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 85.778093][ T5787] Bluetooth: hci0: Injecting HCI hardware error event [ 85.786367][ T5787] Bluetooth: hci0: hardware error 0x00 [ 85.847591][ T5779] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 86.388026][ T5851] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.211353][ T6020] jffs2: notice: (6020) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.368053][ T5851] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.410615][ T5851] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.449724][ T5851] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 87.473057][ T6029] jffs2: notice: (6029) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.474006][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.553797][ T5851] usb 4-1: Product: syz [ 87.581399][ T5851] usb 4-1: Manufacturer: syz [ 87.587545][ T5851] usb 4-1: SerialNumber: syz [ 87.636026][ T5851] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 87.694639][ T5851] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 87.739233][ T5851] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 87.928859][ T5787] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 87.942970][ T6043] FAULT_INJECTION: forcing a failure. [ 87.942970][ T6043] name failslab, interval 1, probability 0, space 0, times 0 [ 87.980222][ T6043] CPU: 0 PID: 6043 Comm: syz.0.57 Not tainted syzkaller #0 [ 87.987483][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.997651][ T6043] Call Trace: [ 88.000956][ T6043] [ 88.003910][ T6043] dump_stack_lvl+0x18c/0x250 [ 88.008627][ T6043] ? show_regs_print_info+0x20/0x20 [ 88.013904][ T6043] ? load_image+0x420/0x420 [ 88.018444][ T6043] ? __lock_acquire+0x7d80/0x7d80 [ 88.023499][ T6043] should_fail_ex+0x394/0x4c0 [ 88.028210][ T6043] should_failslab+0x9/0x20 [ 88.032755][ T6043] slab_pre_alloc_hook+0x59/0x300 [ 88.037828][ T6043] kmem_cache_alloc_lru+0x4d/0x2b0 [ 88.042978][ T6043] ? sock_alloc_inode+0x28/0xc0 [ 88.047880][ T6043] sock_alloc_inode+0x28/0xc0 [ 88.052592][ T6043] ? sockfs_init_fs_context+0xb0/0xb0 [ 88.058079][ T6043] new_inode_pseudo+0x63/0x1d0 [ 88.062878][ T6043] __sock_create+0x12d/0x940 [ 88.067488][ T6043] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 88.073505][ T6043] __sys_socket+0xd7/0x1b0 [ 88.077946][ T6043] __x64_sys_socket+0x7a/0x90 [ 88.082651][ T6043] do_syscall_64+0x55/0xb0 [ 88.087178][ T6043] ? clear_bhb_loop+0x40/0x90 [ 88.091876][ T6043] ? clear_bhb_loop+0x40/0x90 [ 88.096593][ T6043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.102539][ T6043] RIP: 0033:0x7f6b0499e159 [ 88.106973][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.126596][ T6043] RSP: 002b:00007f6b05785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 88.135116][ T6043] RAX: ffffffffffffffda RBX: 00007f6b04c25fa0 RCX: 00007f6b0499e159 [ 88.143188][ T6043] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 88.151183][ T6043] RBP: 00007f6b04a35024 R08: 0000000000000000 R09: 0000000000000000 [ 88.159154][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.167125][ T6043] R13: 00007f6b04c26038 R14: 00007f6b04c25fa0 R15: 00007ffe1750ae98 [ 88.175106][ T6043] [ 88.227778][ T6043] socket: no more sockets [ 89.046401][ T6053] syz.2.61[6053]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.847734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.191123][ T6003] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 90.238355][ T5851] usb 4-1: USB disconnect, device number 2 [ 90.304057][ T5851] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 91.251096][ T5851] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 91.262787][ T5851] ti_usb_3410_5052 4-1:2.0: device disconnected [ 91.329034][ T6064] Bluetooth: MGMT ver 1.22 [ 91.487094][ T6067] jffs2: notice: (6067) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.979498][ T6081] FAULT_INJECTION: forcing a failure. [ 91.979498][ T6081] name failslab, interval 1, probability 0, space 0, times 0 [ 92.007724][ T6081] CPU: 1 PID: 6081 Comm: syz.0.70 Not tainted syzkaller #0 [ 92.014988][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.025064][ T6081] Call Trace: [ 92.028364][ T6081] [ 92.031286][ T6081] dump_stack_lvl+0x18c/0x250 [ 92.035954][ T6081] ? show_regs_print_info+0x20/0x20 [ 92.041167][ T6081] ? load_image+0x420/0x420 [ 92.045666][ T6081] ? __might_sleep+0xe0/0xe0 [ 92.050254][ T6081] ? __lock_acquire+0x7d80/0x7d80 [ 92.055275][ T6081] should_fail_ex+0x394/0x4c0 [ 92.059949][ T6081] should_failslab+0x9/0x20 [ 92.064446][ T6081] slab_pre_alloc_hook+0x59/0x300 [ 92.069511][ T6081] kmem_cache_alloc+0x5a/0x2c0 [ 92.074317][ T6081] ? security_inode_alloc+0x34/0x110 [ 92.079620][ T6081] security_inode_alloc+0x34/0x110 [ 92.084754][ T6081] inode_init_always+0x914/0xc90 [ 92.089743][ T6081] new_inode_pseudo+0x95/0x1d0 [ 92.094527][ T6081] __sock_create+0x12d/0x940 [ 92.099129][ T6081] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 92.105313][ T6081] __sys_socket+0xd7/0x1b0 [ 92.109740][ T6081] __x64_sys_socket+0x7a/0x90 [ 92.114421][ T6081] do_syscall_64+0x55/0xb0 [ 92.118843][ T6081] ? clear_bhb_loop+0x40/0x90 [ 92.123530][ T6081] ? clear_bhb_loop+0x40/0x90 [ 92.128214][ T6081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.134134][ T6081] RIP: 0033:0x7f6b0499e159 [ 92.138572][ T6081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.158709][ T6081] RSP: 002b:00007f6b05785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 92.167122][ T6081] RAX: ffffffffffffffda RBX: 00007f6b04c25fa0 RCX: 00007f6b0499e159 [ 92.175089][ T6081] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 92.183055][ T6081] RBP: 00007f6b04a35024 R08: 0000000000000000 R09: 0000000000000000 [ 92.191023][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.199001][ T6081] R13: 00007f6b04c26038 R14: 00007f6b04c25fa0 R15: 00007ffe1750ae98 [ 92.206985][ T6081] [ 92.230377][ T6081] socket: no more sockets [ 92.235552][ T173] cfg80211: failed to load regulatory.db [ 92.407771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 93.769621][ T6091] jffs2: notice: (6091) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.862798][ T6103] jffs2: notice: (6103) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.854639][ T6124] jffs2: notice: (6124) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.350807][ T6146] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22) [ 98.563268][ T6152] FAULT_INJECTION: forcing a failure. [ 98.563268][ T6152] name failslab, interval 1, probability 0, space 0, times 0 [ 98.593792][ T6152] CPU: 1 PID: 6152 Comm: syz.3.83 Not tainted syzkaller #0 [ 98.601062][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.611150][ T6152] Call Trace: [ 98.614454][ T6152] [ 98.617414][ T6152] dump_stack_lvl+0x18c/0x250 [ 98.622132][ T6152] ? show_regs_print_info+0x20/0x20 [ 98.627368][ T6152] ? load_image+0x420/0x420 [ 98.631910][ T6152] ? __lock_acquire+0x7d80/0x7d80 [ 98.637024][ T6152] should_fail_ex+0x394/0x4c0 [ 98.641764][ T6152] should_failslab+0x9/0x20 [ 98.646312][ T6152] slab_pre_alloc_hook+0x59/0x300 [ 98.651388][ T6152] kmem_cache_alloc_lru+0x4d/0x2b0 [ 98.656541][ T6152] ? sock_alloc_inode+0x28/0xc0 [ 98.661446][ T6152] sock_alloc_inode+0x28/0xc0 [ 98.666163][ T6152] ? sockfs_init_fs_context+0xb0/0xb0 [ 98.671657][ T6152] new_inode_pseudo+0x63/0x1d0 [ 98.676462][ T6152] __sock_create+0x12d/0x940 [ 98.681171][ T6152] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 98.685104][ T6156] Zero length message leads to an empty skb [ 98.687171][ T6152] __sys_socket+0xd7/0x1b0 [ 98.687205][ T6152] __x64_sys_socket+0x7a/0x90 [ 98.702585][ T6152] do_syscall_64+0x55/0xb0 [ 98.707097][ T6152] ? clear_bhb_loop+0x40/0x90 [ 98.711814][ T6152] ? clear_bhb_loop+0x40/0x90 [ 98.716734][ T6152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.722648][ T6152] RIP: 0033:0x7f31bd79e159 [ 98.727100][ T6152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.746738][ T6152] RSP: 002b:00007f31bb9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 98.755197][ T6152] RAX: ffffffffffffffda RBX: 00007f31bda25fa0 RCX: 00007f31bd79e159 [ 98.763207][ T6152] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 98.771212][ T6152] RBP: 00007f31bd835024 R08: 0000000000000000 R09: 0000000000000000 [ 98.779243][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.787244][ T6152] R13: 00007f31bda26038 R14: 00007f31bda25fa0 R15: 00007ffcd70a49d8 [ 98.795251][ T6152] [ 98.823849][ T6152] socket: no more sockets [ 99.450593][ T6184] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22) [ 99.467026][ T6189] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.538499][ T6192] jffs2: notice: (6192) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.730337][ T6199] FAULT_INJECTION: forcing a failure. [ 99.730337][ T6199] name failslab, interval 1, probability 0, space 0, times 0 [ 99.778690][ T6199] CPU: 1 PID: 6199 Comm: syz.1.105 Not tainted syzkaller #0 [ 99.786043][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.796128][ T6199] Call Trace: [ 99.799437][ T6199] [ 99.802393][ T6199] dump_stack_lvl+0x18c/0x250 [ 99.807117][ T6199] ? show_regs_print_info+0x20/0x20 [ 99.812452][ T6199] ? load_image+0x420/0x420 [ 99.817086][ T6199] ? __lock_acquire+0x7d80/0x7d80 [ 99.822180][ T6199] should_fail_ex+0x394/0x4c0 [ 99.826896][ T6199] should_failslab+0x9/0x20 [ 99.831446][ T6199] slab_pre_alloc_hook+0x59/0x300 [ 99.836523][ T6199] kmem_cache_alloc_lru+0x4d/0x2b0 [ 99.841792][ T6199] ? sock_alloc_inode+0x28/0xc0 [ 99.846685][ T6199] sock_alloc_inode+0x28/0xc0 [ 99.851402][ T6199] ? sockfs_init_fs_context+0xb0/0xb0 [ 99.856146][ T6204] ======================================================= [ 99.856146][ T6204] WARNING: The mand mount option has been deprecated and [ 99.856146][ T6204] and is ignored by this kernel. Remove the mand [ 99.856146][ T6204] option from the mount to silence this warning. [ 99.856146][ T6204] ======================================================= [ 99.856787][ T6199] new_inode_pseudo+0x63/0x1d0 [ 99.896666][ T6199] __sock_create+0x12d/0x940 [ 99.901329][ T6199] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 99.907367][ T6199] __sys_socket+0xd7/0x1b0 [ 99.911821][ T6199] __x64_sys_socket+0x7a/0x90 [ 99.916537][ T6199] do_syscall_64+0x55/0xb0 [ 99.920991][ T6199] ? clear_bhb_loop+0x40/0x90 [ 99.925706][ T6199] ? clear_bhb_loop+0x40/0x90 [ 99.930429][ T6199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.936357][ T6199] RIP: 0033:0x7f0a15f9e159 [ 99.941891][ T6199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.961635][ T6199] RSP: 002b:00007f0a16e40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 99.970087][ T6199] RAX: ffffffffffffffda RBX: 00007f0a16225fa0 RCX: 00007f0a15f9e159 [ 99.978089][ T6199] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 99.986086][ T6199] RBP: 00007f0a16035024 R08: 0000000000000000 R09: 0000000000000000 [ 99.994088][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.002087][ T6199] R13: 00007f0a16226038 R14: 00007f0a16225fa0 R15: 00007ffd14443478 [ 100.010112][ T6199] [ 100.051254][ T6207] 9pnet_virtio: no channels available for device syz [ 100.072704][ T6207] jffs2: notice: (6207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 100.083024][ T6199] socket: no more sockets [ 100.404507][ T6222] overlayfs: failed to decode file handle (len=32, type=0, flags=0, err=-22) [ 100.481188][ T6226] jffs2: notice: (6226) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.013862][ T6245] FAULT_INJECTION: forcing a failure. [ 101.013862][ T6245] name failslab, interval 1, probability 0, space 0, times 0 [ 101.045534][ T6245] CPU: 0 PID: 6245 Comm: syz.0.120 Not tainted syzkaller #0 [ 101.052908][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.062997][ T6245] Call Trace: [ 101.066317][ T6245] [ 101.069270][ T6245] dump_stack_lvl+0x18c/0x250 [ 101.073986][ T6245] ? show_regs_print_info+0x20/0x20 [ 101.079229][ T6245] ? load_image+0x420/0x420 [ 101.083794][ T6245] ? __might_sleep+0xe0/0xe0 [ 101.088441][ T6245] ? __lock_acquire+0x7d80/0x7d80 [ 101.093521][ T6245] should_fail_ex+0x394/0x4c0 [ 101.098250][ T6245] should_failslab+0x9/0x20 [ 101.102790][ T6245] slab_pre_alloc_hook+0x59/0x300 [ 101.107860][ T6245] kmem_cache_alloc+0x5a/0x2c0 [ 101.112658][ T6245] ? security_inode_alloc+0x34/0x110 [ 101.117975][ T6245] security_inode_alloc+0x34/0x110 [ 101.123121][ T6245] inode_init_always+0x914/0xc90 [ 101.128095][ T6245] new_inode_pseudo+0x95/0x1d0 [ 101.132896][ T6245] __sock_create+0x12d/0x940 [ 101.137867][ T6245] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 101.143902][ T6245] __sys_socket+0xd7/0x1b0 [ 101.148360][ T6245] __x64_sys_socket+0x7a/0x90 [ 101.153077][ T6245] do_syscall_64+0x55/0xb0 [ 101.157530][ T6245] ? clear_bhb_loop+0x40/0x90 [ 101.162253][ T6245] ? clear_bhb_loop+0x40/0x90 [ 101.166975][ T6245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.172907][ T6245] RIP: 0033:0x7f6b0499e159 [ 101.177679][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.197339][ T6245] RSP: 002b:00007f6b05785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 101.205935][ T6245] RAX: ffffffffffffffda RBX: 00007f6b04c25fa0 RCX: 00007f6b0499e159 [ 101.213949][ T6245] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 101.221952][ T6245] RBP: 00007f6b04a35024 R08: 0000000000000000 R09: 0000000000000000 [ 101.230005][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.238012][ T6245] R13: 00007f6b04c26038 R14: 00007f6b04c25fa0 R15: 00007ffe1750ae98 [ 101.246201][ T6245] [ 101.281819][ T6245] socket: no more sockets [ 101.437178][ T6262] jffs2: notice: (6262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 102.140311][ T6290] FAULT_INJECTION: forcing a failure. [ 102.140311][ T6290] name failslab, interval 1, probability 0, space 0, times 0 [ 102.187532][ T6290] CPU: 0 PID: 6290 Comm: syz.0.132 Not tainted syzkaller #0 [ 102.194992][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.205172][ T6290] Call Trace: [ 102.208454][ T6290] [ 102.211385][ T6290] dump_stack_lvl+0x18c/0x250 [ 102.216106][ T6290] ? show_regs_print_info+0x20/0x20 [ 102.221309][ T6290] ? load_image+0x420/0x420 [ 102.225820][ T6290] ? __might_sleep+0xe0/0xe0 [ 102.230511][ T6290] ? __lock_acquire+0x7d80/0x7d80 [ 102.235535][ T6290] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 102.241527][ T6290] should_fail_ex+0x394/0x4c0 [ 102.246218][ T6290] should_failslab+0x9/0x20 [ 102.250732][ T6290] slab_pre_alloc_hook+0x59/0x300 [ 102.255765][ T6290] ? lockdep_hardirqs_on+0x98/0x150 [ 102.260990][ T6290] ? setup_mq_sysctls+0x54/0x570 [ 102.265932][ T6290] ? setup_mq_sysctls+0x54/0x570 [ 102.271061][ T6290] __kmem_cache_alloc_node+0x53/0x250 [ 102.276470][ T6290] ? setup_mq_sysctls+0x54/0x570 [ 102.281429][ T6290] __kmalloc_node_track_caller+0xa4/0x230 [ 102.287163][ T6290] kmemdup+0x2b/0x70 [ 102.291063][ T6290] setup_mq_sysctls+0x54/0x570 [ 102.295827][ T6290] ? copy_ipcs+0x314/0x500 [ 102.300246][ T6290] copy_ipcs+0x327/0x500 [ 102.304496][ T6290] create_new_namespaces+0x212/0x700 [ 102.309878][ T6290] unshare_nsproxy_namespaces+0x11a/0x160 [ 102.315602][ T6290] ksys_unshare+0x4fa/0x8f0 [ 102.320121][ T6290] ? sighand_ctor+0x50/0x50 [ 102.324631][ T6290] ? lock_chain_count+0x20/0x20 [ 102.329491][ T6290] ? syscall_enter_from_user_mode+0x25/0x80 [ 102.335416][ T6290] __x64_sys_unshare+0x38/0x40 [ 102.340254][ T6290] do_syscall_64+0x55/0xb0 [ 102.344702][ T6290] ? clear_bhb_loop+0x40/0x90 [ 102.349407][ T6290] ? clear_bhb_loop+0x40/0x90 [ 102.354108][ T6290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.360100][ T6290] RIP: 0033:0x7f6b0499e159 [ 102.364610][ T6290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.384228][ T6290] RSP: 002b:00007f6b05785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 102.392645][ T6290] RAX: ffffffffffffffda RBX: 00007f6b04c25fa0 RCX: 00007f6b0499e159 [ 102.400791][ T6290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 102.408765][ T6290] RBP: 00007f6b04a35024 R08: 0000000000000000 R09: 0000000000000000 [ 102.416755][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.425158][ T6290] R13: 00007f6b04c26038 R14: 00007f6b04c25fa0 R15: 00007ffe1750ae98 [ 102.433142][ T6290] [ 102.599976][ T6297] FAULT_INJECTION: forcing a failure. [ 102.599976][ T6297] name failslab, interval 1, probability 0, space 0, times 0 [ 102.628681][ T6299] jffs2: notice: (6299) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 102.669996][ T6297] CPU: 0 PID: 6297 Comm: syz.1.134 Not tainted syzkaller #0 [ 102.677347][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.687435][ T6297] Call Trace: [ 102.690742][ T6297] [ 102.693709][ T6297] dump_stack_lvl+0x18c/0x250 [ 102.698436][ T6297] ? show_regs_print_info+0x20/0x20 [ 102.703766][ T6297] ? load_image+0x420/0x420 [ 102.708306][ T6297] ? __lock_acquire+0x7d80/0x7d80 [ 102.713378][ T6297] should_fail_ex+0x394/0x4c0 [ 102.718100][ T6297] should_failslab+0x9/0x20 [ 102.722645][ T6297] slab_pre_alloc_hook+0x59/0x300 [ 102.727714][ T6297] kmem_cache_alloc_lru+0x4d/0x2b0 [ 102.732862][ T6297] ? sock_alloc_inode+0x28/0xc0 [ 102.737766][ T6297] sock_alloc_inode+0x28/0xc0 [ 102.742470][ T6297] ? sockfs_init_fs_context+0xb0/0xb0 [ 102.747849][ T6297] new_inode_pseudo+0x63/0x1d0 [ 102.752630][ T6297] __sock_create+0x12d/0x940 [ 102.757225][ T6297] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 102.763220][ T6297] __sys_socket+0xd7/0x1b0 [ 102.767641][ T6297] __x64_sys_socket+0x7a/0x90 [ 102.772315][ T6297] do_syscall_64+0x55/0xb0 [ 102.776730][ T6297] ? clear_bhb_loop+0x40/0x90 [ 102.781412][ T6297] ? clear_bhb_loop+0x40/0x90 [ 102.786093][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.791988][ T6297] RIP: 0033:0x7f0a15f9e159 [ 102.796403][ T6297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.816029][ T6297] RSP: 002b:00007f0a16e40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 102.824444][ T6297] RAX: ffffffffffffffda RBX: 00007f0a16225fa0 RCX: 00007f0a15f9e159 [ 102.832419][ T6297] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 102.840388][ T6297] RBP: 00007f0a16035024 R08: 0000000000000000 R09: 0000000000000000 [ 102.848358][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.856332][ T6297] R13: 00007f0a16226038 R14: 00007f0a16225fa0 R15: 00007ffd14443478 [ 102.864318][ T6297] [ 102.960475][ T6297] socket: no more sockets [ 103.467521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.895628][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 105.000710][ T6335] jffs2: notice: (6335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 105.209359][ T6343] FAULT_INJECTION: forcing a failure. [ 105.209359][ T6343] name failslab, interval 1, probability 0, space 0, times 0 [ 105.237633][ T6343] CPU: 0 PID: 6343 Comm: syz.3.148 Not tainted syzkaller #0 [ 105.244985][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.255156][ T6343] Call Trace: [ 105.258436][ T6343] [ 105.261368][ T6343] dump_stack_lvl+0x18c/0x250 [ 105.266053][ T6343] ? show_regs_print_info+0x20/0x20 [ 105.271255][ T6343] ? load_image+0x420/0x420 [ 105.275948][ T6343] ? __might_sleep+0xe0/0xe0 [ 105.280566][ T6343] ? __lock_acquire+0x7d80/0x7d80 [ 105.285614][ T6343] should_fail_ex+0x394/0x4c0 [ 105.290308][ T6343] should_failslab+0x9/0x20 [ 105.294825][ T6343] slab_pre_alloc_hook+0x59/0x300 [ 105.299860][ T6343] kmem_cache_alloc+0x5a/0x2c0 [ 105.304629][ T6343] ? security_inode_alloc+0x34/0x110 [ 105.309938][ T6343] security_inode_alloc+0x34/0x110 [ 105.315071][ T6343] inode_init_always+0x914/0xc90 [ 105.320015][ T6343] new_inode_pseudo+0x95/0x1d0 [ 105.324790][ T6343] __sock_create+0x12d/0x940 [ 105.329478][ T6343] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 105.335464][ T6343] __sys_socket+0xd7/0x1b0 [ 105.339887][ T6343] __x64_sys_socket+0x7a/0x90 [ 105.344562][ T6343] do_syscall_64+0x55/0xb0 [ 105.349016][ T6343] ? clear_bhb_loop+0x40/0x90 [ 105.353710][ T6343] ? clear_bhb_loop+0x40/0x90 [ 105.358414][ T6343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.364411][ T6343] RIP: 0033:0x7f31bd79e159 [ 105.368858][ T6343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.388473][ T6343] RSP: 002b:00007f31bb9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 105.396889][ T6343] RAX: ffffffffffffffda RBX: 00007f31bda25fa0 RCX: 00007f31bd79e159 [ 105.404861][ T6343] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 105.412835][ T6343] RBP: 00007f31bd835024 R08: 0000000000000000 R09: 0000000000000000 [ 105.420809][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.428799][ T6343] R13: 00007f31bda26038 R14: 00007f31bda25fa0 R15: 00007ffcd70a49d8 [ 105.436840][ T6343] [ 105.484841][ T6343] socket: no more sockets [ 107.401765][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 107.524330][ T6371] jffs2: notice: (6371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.866196][ T6381] FAULT_INJECTION: forcing a failure. [ 107.866196][ T6381] name failslab, interval 1, probability 0, space 0, times 0 [ 107.895884][ T6381] CPU: 0 PID: 6381 Comm: syz.0.160 Not tainted syzkaller #0 [ 107.903498][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.913579][ T6381] Call Trace: [ 107.916880][ T6381] [ 107.920349][ T6381] dump_stack_lvl+0x18c/0x250 [ 107.925041][ T6381] ? show_regs_print_info+0x20/0x20 [ 107.930293][ T6381] ? load_image+0x420/0x420 [ 107.934809][ T6381] ? __lock_acquire+0x7d80/0x7d80 [ 107.940031][ T6381] should_fail_ex+0x394/0x4c0 [ 107.944738][ T6381] should_failslab+0x9/0x20 [ 107.949257][ T6381] slab_pre_alloc_hook+0x59/0x300 [ 107.954299][ T6381] kmem_cache_alloc_lru+0x4d/0x2b0 [ 107.959422][ T6381] ? sock_alloc_inode+0x28/0xc0 [ 107.964292][ T6381] sock_alloc_inode+0x28/0xc0 [ 107.968972][ T6381] ? sockfs_init_fs_context+0xb0/0xb0 [ 107.974453][ T6381] new_inode_pseudo+0x63/0x1d0 [ 107.979250][ T6381] __sock_create+0x12d/0x940 [ 107.983852][ T6381] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 107.989846][ T6381] __sys_socket+0xd7/0x1b0 [ 107.994285][ T6381] __x64_sys_socket+0x7a/0x90 [ 107.998966][ T6381] do_syscall_64+0x55/0xb0 [ 108.003388][ T6381] ? clear_bhb_loop+0x40/0x90 [ 108.008073][ T6381] ? clear_bhb_loop+0x40/0x90 [ 108.012760][ T6381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.018673][ T6381] RIP: 0033:0x7f6b0499e159 [ 108.023104][ T6381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.042721][ T6381] RSP: 002b:00007f6b05785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 108.051145][ T6381] RAX: ffffffffffffffda RBX: 00007f6b04c25fa0 RCX: 00007f6b0499e159 [ 108.059133][ T6381] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 108.067201][ T6381] RBP: 00007f6b04a35024 R08: 0000000000000000 R09: 0000000000000000 [ 108.075295][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.083278][ T6381] R13: 00007f6b04c26038 R14: 00007f6b04c25fa0 R15: 00007ffe1750ae98 [ 108.091284][ T6381] [ 108.127335][ T6381] socket: no more sockets getty: ttyS0: read error: Resource temporarily unavailable [ 108.491534][ T5787] Bluetooth: hci4: setting up ROME/QCA6390 Hüü[ 108.972989][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 109.007742][ T173] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.112053][ T6402] jffs2: notice: (6402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 109.221560][ T173] usb 4-1: config 0 has no interfaces? [ 109.227126][ T173] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.232027][ T6406] loop0: detected capacity change from 0 to 512 [ 109.278416][ T173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.305184][ T173] usb 4-1: config 0 descriptor?? [ 109.523288][ T6406] EXT4-fs (loop0): Test dummy encryption mode enabled [ 109.545743][ T6406] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.568817][ T6416] FAULT_INJECTION: forcing a failure. [ 109.568817][ T6416] name failslab, interval 1, probability 0, space 0, times 0 [ 109.572141][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.590325][ T6406] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.603921][ T6416] CPU: 1 PID: 6416 Comm: syz.2.170 Not tainted syzkaller #0 [ 109.611355][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.621445][ T6416] Call Trace: [ 109.624803][ T6416] [ 109.627754][ T6416] dump_stack_lvl+0x18c/0x250 [ 109.627881][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.632451][ T6416] ? show_regs_print_info+0x20/0x20 [ 109.632482][ T6416] ? load_image+0x420/0x420 [ 109.650289][ T6416] ? __lock_acquire+0x7d80/0x7d80 [ 109.655412][ T6416] should_fail_ex+0x394/0x4c0 [ 109.660260][ T6416] should_failslab+0x9/0x20 [ 109.664809][ T6416] slab_pre_alloc_hook+0x59/0x300 [ 109.669903][ T6416] kmem_cache_alloc_lru+0x4d/0x2b0 [ 109.675069][ T6416] ? sock_alloc_inode+0x28/0xc0 [ 109.679964][ T6416] sock_alloc_inode+0x28/0xc0 [ 109.684679][ T6416] ? sockfs_init_fs_context+0xb0/0xb0 [ 109.690177][ T6416] new_inode_pseudo+0x63/0x1d0 [ 109.694991][ T6416] __sock_create+0x12d/0x940 [ 109.698725][ T173] usb 4-1: USB disconnect, device number 3 [ 109.699719][ T6416] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 109.711546][ T6416] __sys_socket+0xd7/0x1b0 [ 109.716001][ T6416] __x64_sys_socket+0x7a/0x90 [ 109.722124][ T6416] do_syscall_64+0x55/0xb0 [ 109.729076][ T6416] ? clear_bhb_loop+0x40/0x90 [ 109.733795][ T6416] ? clear_bhb_loop+0x40/0x90 [ 109.738507][ T6416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.744785][ T6416] RIP: 0033:0x7f629799e159 [ 109.749226][ T6416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.768863][ T6416] RSP: 002b:00007f62988da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 109.777339][ T6416] RAX: ffffffffffffffda RBX: 00007f6297c25fa0 RCX: 00007f629799e159 [ 109.785441][ T6416] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 109.793443][ T6416] RBP: 00007f6297a35024 R08: 0000000000000000 R09: 0000000000000000 [ 109.801451][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.809454][ T6416] R13: 00007f6297c26038 R14: 00007f6297c25fa0 R15: 00007fffe099f568 [ 109.817750][ T6416] [ 109.840751][ T6416] socket: no more sockets [ 109.883979][ T6406] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.168: bad orphan inode 131083 [ 109.919312][ T6406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.486553][ T6427] FAULT_INJECTION: forcing a failure. [ 110.486553][ T6427] name failslab, interval 1, probability 0, space 0, times 0 [ 110.668894][ T6427] CPU: 1 PID: 6427 Comm: syz.2.171 Not tainted syzkaller #0 [ 110.676793][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.686911][ T6427] Call Trace: [ 110.690224][ T6427] [ 110.693369][ T6427] dump_stack_lvl+0x18c/0x250 [ 110.698088][ T6427] ? show_regs_print_info+0x20/0x20 [ 110.703325][ T6427] ? load_image+0x420/0x420 [ 110.707876][ T6427] should_fail_ex+0x394/0x4c0 [ 110.712593][ T6427] should_failslab+0x9/0x20 [ 110.717127][ T6427] slab_pre_alloc_hook+0x59/0x300 [ 110.722181][ T6427] ? kvmalloc_node+0x70/0x180 [ 110.726883][ T6427] ? kvmalloc_node+0x70/0x180 [ 110.731577][ T6427] __kmem_cache_alloc_node+0x53/0x250 [ 110.737154][ T6427] ? kvmalloc_node+0x70/0x180 [ 110.741858][ T6427] __kmalloc_node+0xa6/0x240 [ 110.746482][ T6427] kvmalloc_node+0x70/0x180 [ 110.751011][ T6427] ceph_msg_new2+0x162/0x490 [ 110.755632][ T6427] ceph_monc_init+0x5b6/0xa70 [ 110.760339][ T6427] ceph_create_client+0x225/0x300 [ 110.765390][ T6427] ceph_get_tree+0x1ca/0x1800 [ 110.770100][ T6427] vfs_get_tree+0x8c/0x280 [ 110.774541][ T6427] vfs_cmd_create+0xe3/0x230 [ 110.779163][ T6427] __se_sys_fsconfig+0x70a/0x850 [ 110.784129][ T6427] ? __x64_sys_fsconfig+0xc0/0xc0 [ 110.789191][ T6427] ? lockdep_hardirqs_on+0x98/0x150 [ 110.794949][ T6427] ? __x64_sys_fsconfig+0x20/0xc0 [ 110.800024][ T6427] do_syscall_64+0x55/0xb0 [ 110.804568][ T6427] ? clear_bhb_loop+0x40/0x90 [ 110.810063][ T6427] ? clear_bhb_loop+0x40/0x90 [ 110.815034][ T6427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.820998][ T6427] RIP: 0033:0x7f629799e159 [ 110.826158][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.826490][ T173] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.847080][ T6427] RSP: 002b:00007f62988da028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 110.847133][ T6427] RAX: ffffffffffffffda RBX: 00007f6297c25fa0 RCX: 00007f629799e159 [ 110.847147][ T6427] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 110.847157][ T6427] RBP: 00007f6297a35024 R08: 0000000000000000 R09: 0000000000000000 [ 110.847168][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.847179][ T6427] R13: 00007f6297c26038 R14: 00007f6297c25fa0 R15: 00007fffe099f568 [ 110.847210][ T6427] [ 110.910629][ T5779] Bluetooth: hci4: command 0xfc00 tx timeout [ 110.917728][ T5787] Bluetooth: hci4: Reading QCA version information failed (-110) [ 110.925564][ T5787] Bluetooth: hci4: Retry BT power ON:0 Hü[ 111.063991][ T6430] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 111.093482][ T6435] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 111.157653][ T173] usb 4-1: Using ep0 maxpacket: 16 [ 111.165457][ T173] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 111.178110][ T173] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.193074][ T173] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 ü[ 111.300357][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.313958][ T173] usb 4-1: Product: syz [ 111.318585][ T173] usb 4-1: Manufacturer: syz [ 111.326158][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.368583][ T173] usb 4-1: SerialNumber: syz [ 111.835427][ T173] usb 4-1: 0:2 : does not exist [ 111.903131][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 112.067843][ T173] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 112.105924][ T173] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 112.167829][ T173] usb 4-1: USB disconnect, device number 4 [ 112.225203][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.407078][ T6450] jffs2: notice: (6450) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 112.595841][ T6456] FAULT_INJECTION: forcing a failure. [ 112.595841][ T6456] name failslab, interval 1, probability 0, space 0, times 0 [ 112.613291][ T6456] CPU: 1 PID: 6456 Comm: syz.2.179 Not tainted syzkaller #0 [ 112.620643][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.630730][ T6456] Call Trace: [ 112.634035][ T6456] [ 112.636986][ T6456] dump_stack_lvl+0x18c/0x250 [ 112.641791][ T6456] ? show_regs_print_info+0x20/0x20 [ 112.647036][ T6456] ? load_image+0x420/0x420 [ 112.651577][ T6456] ? __lock_acquire+0x7d80/0x7d80 [ 112.656650][ T6456] should_fail_ex+0x394/0x4c0 [ 112.661379][ T6456] should_failslab+0x9/0x20 [ 112.665919][ T6456] slab_pre_alloc_hook+0x59/0x300 [ 112.670988][ T6456] kmem_cache_alloc_lru+0x4d/0x2b0 [ 112.676149][ T6456] ? sock_alloc_inode+0x28/0xc0 [ 112.681052][ T6456] sock_alloc_inode+0x28/0xc0 [ 112.685777][ T6456] ? sockfs_init_fs_context+0xb0/0xb0 [ 112.691188][ T6456] new_inode_pseudo+0x63/0x1d0 [ 112.696002][ T6456] __sock_create+0x12d/0x940 [ 112.700633][ T6456] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 112.706673][ T6456] __sys_socket+0xd7/0x1b0 [ 112.711133][ T6456] __x64_sys_socket+0x7a/0x90 [ 112.715859][ T6456] do_syscall_64+0x55/0xb0 [ 112.720328][ T6456] ? clear_bhb_loop+0x40/0x90 [ 112.725039][ T6456] ? clear_bhb_loop+0x40/0x90 [ 112.729756][ T6456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.735686][ T6456] RIP: 0033:0x7f629799e159 [ 112.740132][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.761098][ T6456] RSP: 002b:00007f62988da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 112.770359][ T6456] RAX: ffffffffffffffda RBX: 00007f6297c25fa0 RCX: 00007f629799e159 [ 112.779329][ T6456] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 112.788726][ T6456] RBP: 00007f6297a35024 R08: 0000000000000000 R09: 0000000000000000 [ 112.797101][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.805107][ T6456] R13: 00007f6297c26038 R14: 00007f6297c25fa0 R15: 00007fffe099f568 [ 112.813759][ T6456] [ 112.847625][ T6456] socket: no more sockets [ 112.892404][ T173] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.054454][ T6460] loop3: detected capacity change from 0 to 512 [ 113.073144][ T6460] EXT4-fs (loop3): Test dummy encryption mode enabled [ 113.094003][ T173] usb 1-1: config 0 has no interfaces? [ 113.099953][ T173] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 113.113756][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.122521][ T6460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.142514][ T6460] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.181: bad orphan inode 131083 [ 113.142818][ T173] usb 1-1: config 0 descriptor?? [ 113.183976][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.368059][ T5779] Bluetooth: hci4: command 0xfc00 tx timeout [ 113.375309][ T5787] Bluetooth: hci4: Reading QCA version information failed (-110) [ 113.386670][ T5787] Bluetooth: hci4: Retry BT power ON:1 Hü[ 113.575997][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.600612][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 ü[ 113.839265][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.880078][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.929868][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.958080][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.003479][ T3065] usb 1-1: USB disconnect, device number 3 [ 114.142346][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.296140][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 115.097538][ T3065] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.277589][ T3065] usb 1-1: Using ep0 maxpacket: 8 [ 115.303094][ T3065] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 115.313867][ T3065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.336095][ T3065] usb 1-1: Product: syz [ 115.346685][ T3065] usb 1-1: Manufacturer: syz [ 115.357939][ T3065] usb 1-1: SerialNumber: syz [ 115.365216][ T3065] usb 1-1: config 0 descriptor?? [ 115.396985][ T3065] gspca_main: spca500-2.14.0 probing 046d:0900 [ 115.448114][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.590525][ T6488] jffs2: notice: (6488) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.609079][ T3065] gspca_spca500: reg write: error -71 [ 115.628152][ T3065] gspca_spca500: reg write: error -71 [ 115.639976][ T23] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 115.668071][ T3065] gspca_spca500: reg write: error -71 [ 115.674553][ T3065] gspca_spca500: reg write: error -71 [ 115.681371][ T23] usb 4-1: config index 0 descriptor too short (expected 39736, got 76) [ 115.696182][ T23] usb 4-1: config 198 has too many interfaces: 89, using maximum allowed: 32 [ 115.705817][ T3065] gspca_spca500: reg write: error -71 [ 115.716039][ T23] usb 4-1: config 198 has an invalid descriptor of length 174, skipping remainder of the config [ 115.727332][ T3065] gspca_spca500: reg write: error -71 [ 115.748343][ T3065] gspca_spca500: reg write: error -71 [ 115.755314][ T23] usb 4-1: config 198 has 0 interfaces, different from the descriptor's value: 89 [ 115.765111][ T3065] gspca_spca500: reg write: error -71 [ 115.771183][ T5779] Bluetooth: hci4: command 0xfc00 tx timeout [ 115.777754][ T5787] Bluetooth: hci4: Reading QCA version information failed (-110) [ 115.785516][ T5787] Bluetooth: hci4: Retry BT power ON:2 Hü[ 115.798483][ T3065] gspca_spca500: reg write: error -71 [ 115.804485][ T23] usb 4-1: config index 1 descriptor too short (expected 39736, got 76) [ 115.813562][ T23] usb 4-1: config 198 has too many interfaces: 89, using maximum allowed: 32 [ 115.822681][ T3065] gspca_spca500: reg write: error -71 [ 115.828287][ T23] usb 4-1: config 198 has an invalid descriptor of length 174, skipping remainder of the config [ 115.839621][ T23] usb 4-1: config 198 has 0 interfaces, different from the descriptor's value: 89 [ 115.853329][ T3065] gspca_spca500: reg write: error -71 [ 115.861139][ T3065] gspca_spca500: reg write: error -71 [ 115.867561][ T23] usb 4-1: config index 2 descriptor too short (expected 39736, got 76) [ 115.876565][ T3065] gspca_spca500: reg write: error -71 [ 115.877791][ T6496] FAULT_INJECTION: forcing a failure. [ 115.877791][ T6496] name failslab, interval 1, probability 0, space 0, times 0 [ 115.882849][ T23] usb 4-1: config 198 has too many interfaces: 89, using maximum allowed: 32 [ 115.909632][ T3065] gspca_spca500: reg write: error -71 [ 115.925531][ T23] usb 4-1: config 198 has an invalid descriptor of length 174, skipping remainder of the config [ 115.941037][ T3065] usb 1-1: USB disconnect, device number 4 [ 115.943925][ T6496] CPU: 0 PID: 6496 Comm: syz.1.191 Not tainted syzkaller #0 [ 115.954592][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.962321][ T23] usb 4-1: config 198 has 0 interfaces, different from the descriptor's value: 89 [ 115.964764][ T6496] Call Trace: [ 115.977552][ T6496] [ 115.980509][ T6496] dump_stack_lvl+0x18c/0x250 [ 115.985339][ T6496] ? show_regs_print_info+0x20/0x20 [ 115.988588][ T23] usb 4-1: config index 3 descriptor too short (expected 39736, got 76) [ 115.990730][ T6496] ? load_image+0x420/0x420 [ 115.999843][ T23] usb 4-1: config 198 has too many interfaces: 89, using maximum allowed: 32 [ 116.004011][ T6496] ? __lock_acquire+0x7d80/0x7d80 [ 116.018294][ T6496] should_fail_ex+0x394/0x4c0 [ 116.023111][ T6496] should_failslab+0x9/0x20 [ 116.025975][ T23] usb 4-1: config 198 has an invalid descriptor of length 174, skipping remainder of the config [ 116.027728][ T6496] slab_pre_alloc_hook+0x59/0x300 [ 116.027826][ T6496] kmem_cache_alloc_lru+0x4d/0x2b0 [ 116.027852][ T6496] ? sock_alloc_inode+0x28/0xc0 [ 116.027882][ T6496] sock_alloc_inode+0x28/0xc0 [ 116.027903][ T6496] ? sockfs_init_fs_context+0xb0/0xb0 [ 116.054333][ T23] usb 4-1: config 198 has 0 interfaces, different from the descriptor's value: 89 [ 116.058337][ T6496] new_inode_pseudo+0x63/0x1d0 [ 116.058370][ T6496] __sock_create+0x12d/0x940 [ 116.058388][ T6496] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 116.058417][ T6496] __sys_socket+0xd7/0x1b0 [ 116.058439][ T6496] __x64_sys_socket+0x7a/0x90 [ 116.058458][ T6496] do_syscall_64+0x55/0xb0 [ 116.058481][ T6496] ? clear_bhb_loop+0x40/0x90 [ 116.058504][ T6496] ? clear_bhb_loop+0x40/0x90 [ 116.058528][ T6496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.067154][ T23] usb 4-1: config index 4 descriptor too short (expected 39736, got 76) [ 116.073091][ T6496] RIP: 0033:0x7f0a15f9e159 [ 116.073126][ T6496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.073141][ T6496] RSP: 002b:00007f0a16e40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 116.073161][ T6496] RAX: ffffffffffffffda RBX: 00007f0a16225fa0 RCX: 00007f0a15f9e159 [ 116.073174][ T6496] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 116.073186][ T6496] RBP: 00007f0a16035024 R08: 0000000000000000 R09: 0000000000000000 [ 116.078462][ T23] usb 4-1: config 198 has too many interfaces: 89, using maximum allowed: 32 [ 116.082693][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.094031][ T23] usb 4-1: config 198 has an invalid descriptor of length 174, skipping remainder of the config [ 116.097854][ T6496] R13: 00007f0a16226038 R14: 00007f0a16225fa0 R15: 00007ffd14443478 [ 116.097885][ T6496] [ 116.138178][ T6496] socket: no more sockets [ 116.162255][ T23] usb 4-1: config 198 has 0 interfaces, different from the descriptor's value: 89 ü[ 116.265841][ T6499] pim6reg1: entered promiscuous mode [ 116.276951][ T6499] pim6reg1: entered allmulticast mode [ 116.337208][ T23] usb 4-1: config index 5 descriptor too short (expected 39736, got 76) [ 116.367902][ T23] usb 4-1: config 198 has too many interfaces: 89, using maximum allowed: 32 [ 116.395507][ T23] usb 4-1: config 198 has an invalid descriptor of length 174, skipping remainder of the config [ 116.416529][ T23] usb 4-1: config 198 has 0 interfaces, different from the descriptor's value: 89 [ 116.436933][ T23] usb 4-1: config index 6 descriptor too short (expected 39736, got 76) [ 116.445491][ T23] usb 4-1: config 198 has too many interfaces: 89, using maximum allowed: 32 [ 116.459261][ T23] usb 4-1: config 198 has an invalid descriptor of length 174, skipping remainder of the config [ 116.469904][ T23] usb 4-1: config 198 has 0 interfaces, different from the descriptor's value: 89 [ 116.481599][ T23] usb 4-1: config index 7 descriptor too short (expected 39736, got 76) [ 116.490468][ T23] usb 4-1: config 198 has too many interfaces: 89, using maximum allowed: 32 [ 116.499354][ T23] usb 4-1: config 198 has an invalid descriptor of length 174, skipping remainder of the config [ 116.510263][ T23] usb 4-1: config 198 has 0 interfaces, different from the descriptor's value: 89 [ 116.526146][ T23] usb 4-1: New USB device found, idVendor=0008, idProduct=0000, bcdDevice= 0.40 [ 116.535439][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.544142][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 116.555792][ T6499] syz.0.193 (6499) used greatest stack depth: 19624 bytes left [ 116.575926][ T23] usb 4-1: Product: syz [ 116.583282][ T23] usb 4-1: Manufacturer: syz [ 116.595923][ T23] usb 4-1: SerialNumber: syz [ 116.864010][ T23] usb 4-1: USB disconnect, device number 5 [ 116.949116][ T6516] jffs2: notice: (6516) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 117.227662][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.417537][ T5816] usb 2-1: Using ep0 maxpacket: 32 [ 117.423310][ T5816] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 117.427506][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.440295][ T5816] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.450497][ T5816] usb 2-1: config 0 has no interface number 0 [ 117.458584][ T5816] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.466930][ T5816] usb 2-1: config 0 has no interface number 0 [ 117.474669][ T5816] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.482999][ T5816] usb 2-1: config 0 has no interface number 0 [ 117.491126][ T5816] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.500092][ T5816] usb 2-1: config 0 has no interface number 0 [ 117.507144][ T5816] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.515458][ T5816] usb 2-1: config 0 has no interface number 0 [ 117.522891][ T5816] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.531025][ T5816] usb 2-1: config 0 has no interface number 0 [ 117.538019][ T5777] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.538777][ T5816] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.545734][ T3065] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.553798][ T5816] usb 2-1: config 0 has no interface number 0 [ 117.569968][ T5816] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.578977][ T5816] usb 2-1: config 0 has no interface number 0 [ 117.587676][ T5816] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 117.596814][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.605890][ T5816] usb 2-1: Product: syz [ 117.610177][ T5816] usb 2-1: Manufacturer: syz [ 117.614884][ T5816] usb 2-1: SerialNumber: syz [ 117.622692][ T5816] usb 2-1: config 0 descriptor?? [ 117.632762][ T5816] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 117.651775][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.663339][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.673306][ T23] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 117.683190][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.694397][ T23] usb 1-1: config 0 descriptor?? [ 117.757669][ T5777] usb 4-1: Using ep0 maxpacket: 32 [ 117.766434][ T5777] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 117.777194][ T3065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.789780][ T5777] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 117.801536][ T3065] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.813085][ T5777] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 117.826356][ T3065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.835794][ T5816] etas_es58x 2-1:0.2: could not retrieve the product info string [ 117.837343][ T3065] usb 3-1: config 0 descriptor?? [ 117.864268][ T5777] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 117.873789][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.890628][ T5777] usb 4-1: Product: syz [ 117.897035][ T5777] usb 4-1: Manufacturer: syz [ 117.902287][ T5777] usb 4-1: SerialNumber: syz [ 117.950381][ T5777] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 117.968384][ T5777] imon 4-1:155.0: unable to initialize intf0, err -19 [ 117.975569][ T5777] imon:imon_probe: failed to initialize context! [ 117.987258][ T5777] imon 4-1:155.0: unable to register, err -19 [ 118.079757][ T3065] usbhid 3-1:0.0: can't add hid device: -71 [ 118.086722][ T3065] usbhid: probe of 3-1:0.0 failed with error -71 [ 118.109555][ T3065] usb 3-1: USB disconnect, device number 2 [ 118.150807][ T23] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 118.169823][ T23] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 118.187669][ T23] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 118.197001][ T23] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 118.207024][ T23] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 118.241842][ T23] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 118.253734][ T5779] Bluetooth: hci4: command 0xfc00 tx timeout [ 118.261914][ T5787] Bluetooth: hci4: Reading QCA version information failed (-110) [ 118.418431][ T23] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -32 [ 118.434188][ T23] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -32 [ 118.448782][ T23] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 118.465943][ T23] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 118.485048][ T23] playstation: probe of 0003:054C:0DF2.0001 failed with error -32 [ 118.575600][ T5435] etas_es58x 2-1:0.2 can0: bit-timing not yet defined [ 118.664821][ T23] usb 1-1: USB disconnect, device number 5 [ 118.737601][ T5777] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.933495][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.944658][ T5777] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.953880][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.965047][ T5777] usb 3-1: config 0 descriptor?? [ 119.182023][ T6525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.191741][ T6525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.225942][ T5777] usbhid 3-1:0.0: can't add hid device: -71 [ 119.232811][ T5777] usbhid: probe of 3-1:0.0 failed with error -71 [ 119.255346][ T5777] usb 3-1: USB disconnect, device number 3 [ 119.280464][ T6543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.296660][ T6543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.298913][ T6545] jffs2: notice: (6545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.607758][ T5435] etas_es58x 2-1:0.2: es58x_free_urbs: Timeout, some TX urbs still remain [ 119.624223][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 119.633081][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 119.648826][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 119.656633][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 119.668679][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 119.669728][ T5814] usb 2-1: USB disconnect, device number 2 [ 119.680920][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.693283][ T5435] etas_es58x 2-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 119.704856][ T5814] etas_es58x 2-1:0.2: Disconnecting syz syz [ 119.828221][ T5777] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.889402][ T23] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.922002][ T23] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.944318][ T23] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 119.957692][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.976414][ T23] usb 1-1: Product: syz [ 119.986562][ T23] usb 1-1: Manufacturer: syz [ 119.996712][ T23] usb 1-1: SerialNumber: syz [ 120.013453][ T23] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 120.028181][ T5777] usb 3-1: Using ep0 maxpacket: 16 [ 120.041556][ T5777] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.063478][ T23] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 120.077486][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.095015][ T23] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 120.103899][ T5777] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 120.127523][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.154838][ T5777] usb 3-1: config 0 descriptor?? [ 120.184435][ T5814] usb 4-1: USB disconnect, device number 6 [ 120.650269][ T5777] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 120.922514][ T6574] jffs2: notice: (6574) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.198985][ T5777] usb 3-1: USB disconnect, device number 4 [ 121.715567][ T6598] jffs2: notice: (6598) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.779729][ T6548] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 121.821284][ T5814] usb 1-1: USB disconnect, device number 6 [ 121.878532][ T5814] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 121.993117][ T5814] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 122.039202][ T5814] ti_usb_3410_5052 1-1:2.0: device disconnected [ 122.297567][ T5777] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.497470][ T5777] usb 4-1: Using ep0 maxpacket: 8 [ 122.510174][ T5777] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.547550][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.556951][ T5777] usb 4-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 122.591000][ T5777] usb 4-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 122.619838][ T5777] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 122.629178][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.637206][ T5777] usb 4-1: Product: syz [ 122.663216][ T5777] usb 4-1: Manufacturer: syz [ 122.675958][ T5777] usb 4-1: SerialNumber: syz [ 122.777746][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 122.790451][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.811609][ T6622] jffs2: notice: (6622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.815003][ T23] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 50, changing to 7 [ 122.867991][ T23] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.897344][ T23] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 122.906928][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.939280][ T5777] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 122.949581][ T23] usb 3-1: Product: syz [ 122.953834][ T23] usb 3-1: Manufacturer: syz [ 122.980048][ T23] usb 3-1: SerialNumber: syz [ 123.468985][ T5777] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 123.792579][ T23] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.112323][ T5777] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.177631][ T5777] usb 4-1: device firmware changed [ 124.225272][ T5777] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 124.278060][ T5777] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 124.311363][ T5777] usb 4-1: USB disconnect, device number 7 [ 124.369457][ T6639] jffs2: notice: (6639) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 124.373444][ T5815] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 124.476516][ T5815] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 124.627572][ T23] usb 3-1: USB disconnect, device number 5 [ 124.763533][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.043578][ T6657] jffs2: notice: (6657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.377599][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.587643][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 125.610902][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.630890][ T27] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2007, setting to 1024 [ 125.647640][ T27] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 125.670295][ T27] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 125.697555][ T5814] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.699321][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.737743][ T27] usb 2-1: Product: syz [ 125.742060][ T27] usb 2-1: Manufacturer: syz [ 125.746816][ T27] usb 2-1: SerialNumber: syz [ 125.890194][ T5814] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.914480][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.943247][ T5814] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.963168][ T5814] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.998448][ T5814] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.006171][ T27] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 126.019190][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.041358][ T5814] usb 3-1: Product: syz [ 126.045624][ T5814] usb 3-1: Manufacturer: syz [ 126.068665][ T27] usb 2-1: USB disconnect, device number 3 [ 126.069671][ T5814] cdc_wdm 3-1:1.0: skipping garbage [ 126.099067][ T5814] cdc_wdm 3-1:1.0: skipping garbage [ 126.125549][ T5814] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 126.149562][ T5814] cdc_wdm 3-1:1.0: Unknown control protocol [ 126.201230][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.311470][ T5814] usb 3-1: USB disconnect, device number 6 [ 126.636267][ T6670] jffs2: notice: (6670) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 126.897534][ T5814] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.104549][ T5814] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.127459][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.147474][ T5814] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.156505][ T5814] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.207629][ T5814] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.219755][ T6681] jffs2: notice: (6681) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 127.238145][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.246179][ T5814] usb 3-1: Product: syz [ 127.251015][ T5814] usb 3-1: Manufacturer: syz [ 127.268889][ T5814] cdc_wdm 3-1:1.0: skipping garbage [ 127.274394][ T5814] cdc_wdm 3-1:1.0: skipping garbage [ 127.292211][ T5814] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 127.317639][ T5814] cdc_wdm 3-1:1.0: Unknown control protocol [ 127.388815][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.579801][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.596380][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.609690][ T27] usb 2-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 127.623535][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.664958][ T27] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 128.045768][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 128.052660][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 128.060113][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 128.066756][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 128.077654][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 128.084307][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 128.091497][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 128.098206][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 128.105730][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 128.112370][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 128.119061][ T27] usb 3-1: USB disconnect, device number 7 [ 128.330036][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.351857][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.586929][ T3065] usb 2-1: USB disconnect, device number 4 [ 128.591762][ T2322] pvrusb2: control-write URB failure, status=-71 [ 128.628591][ T2322] pvrusb2: Device being rendered inoperable [ 128.644704][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 128.670899][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 128.686605][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 128.707003][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 128.737533][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 128.759962][ T2322] pvrusb2: Attached sub-driver cx25840 [ 128.897618][ T2322] pvrusb2: Attempted to execute control transfer when device not ok [ 128.917734][ T2322] pvrusb2: Attempted to execute control transfer when device not ok [ 128.956555][ T2322] pvrusb2: Attempted to execute control transfer when device not ok [ 128.977931][ T2322] pvrusb2: Attempted to execute control transfer when device not ok [ 129.007457][ T2322] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 129.069147][ T6695] jffs2: notice: (6695) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.031228][ T2322] TUNER: Unable to find symbol tda829x_probe() [ 130.176836][ T2322] DVB: Unable to find symbol tda9887_attach() [ 130.205410][ T2322] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 130.237125][ T2322] pvrusb2: Attached sub-driver tuner [ 130.266816][ T2322] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 130.285462][ T2322] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 130.288875][ T6716] jffs2: notice: (6716) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.787479][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.989556][ T27] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.008725][ T27] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.032909][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.049556][ T6731] jffs2: notice: (6731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.067523][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 131.087582][ T6702] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.095809][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 131.129760][ T27] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.144308][ T27] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.157801][ T27] usb 3-1: Product: syz [ 131.162031][ T27] usb 3-1: Manufacturer: syz [ 131.193388][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 131.225561][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 131.235991][ T27] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 131.255243][ T27] cdc_wdm 3-1:1.0: Unknown control protocol [ 131.297612][ T6702] usb 1-1: Using ep0 maxpacket: 32 [ 131.311870][ T6702] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.323447][ T6702] usb 1-1: config 0 has no interface number 0 [ 131.347743][ T6702] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 131.365900][ T6702] usb 1-1: config 0 interface 1 has no altsetting 0 [ 131.376152][ T6702] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 131.387196][ T6702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.408078][ T6724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.457139][ T6724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.571582][ T6724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.585940][ T5814] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.626280][ T6702] usb 1-1: Product: syz [ 131.631239][ T6702] usb 1-1: Manufacturer: syz [ 131.635883][ T6702] usb 1-1: SerialNumber: syz [ 131.644023][ T6724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.645011][ T6702] usb 1-1: config 0 descriptor?? [ 131.829391][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 131.990086][ T5814] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.229533][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.277175][ T6702] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 132.290456][ T6702] cx231xx 1-1:0.1: Failed to read PCB config [ 132.293123][ T5814] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 132.296668][ T6702] cx231xx: probe of 1-1:0.1 failed with error -71 [ 132.316118][ T6702] usb 1-1: USB disconnect, device number 7 [ 132.344313][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.415937][ T5814] usb 2-1: config 0 descriptor?? [ 132.567757][ T5787] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 132.576481][ T5787] Bluetooth: hci3: Injecting HCI hardware error event [ 132.585678][ T5779] Bluetooth: hci3: hardware error 0x00 [ 132.695095][ T6735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.718277][ C0] cdc_wdm 3-1:1.0: Unexpected error -71 [ 132.725352][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 132.732091][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 132.739294][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 132.745940][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 132.752422][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 132.759167][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 132.761532][ T6735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.768411][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 132.780143][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 132.787762][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 132.794534][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 132.801967][ T5851] usb 3-1: USB disconnect, device number 8 [ 132.807900][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 132.841152][ T5814] usbhid 2-1:0.0: can't add hid device: -71 [ 132.847208][ T5814] usbhid: probe of 2-1:0.0 failed with error -71 [ 132.867851][ T5814] usb 2-1: USB disconnect, device number 5 [ 132.907539][ T5816] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.058243][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.065116][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.087728][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 133.096814][ T5816] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.108638][ T5816] usb 1-1: config 0 has no interface number 0 [ 133.114798][ T5816] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 133.147528][ T5816] usb 1-1: config 0 interface 1 has no altsetting 0 [ 133.170000][ T5816] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 133.186760][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.203051][ T5816] usb 1-1: Product: syz [ 133.211859][ T5816] usb 1-1: Manufacturer: syz [ 133.216505][ T5816] usb 1-1: SerialNumber: syz [ 133.234950][ T5816] usb 1-1: config 0 descriptor?? [ 133.387608][ T5814] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.812615][ T5779] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 134.884401][ T5816] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 134.928487][ T5814] usb 2-1: device descriptor read/all, error -71 [ 134.969047][ T5816] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 135.072636][ T6753] jffs2: notice: (6753) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.117789][ T5816] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 135.146810][ T5816] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 135.167233][ T5816] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 135.179210][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.196334][ T5816] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 135.205787][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.228451][ T5816] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 135.247857][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.263039][ T5816] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 135.307859][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.359496][ T5816] i2c i2c-2: Added multiplexed i2c bus 4 [ 135.391374][ T5816] i2c i2c-2: Added multiplexed i2c bus 5 [ 135.409289][ T5816] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 135.427785][ T5816] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 135.503803][ T5816] cx231xx: probe of 1-1:0.1 failed with error -32 [ 135.867550][ T5814] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.876600][ T6702] usb 1-1: USB disconnect, device number 8 [ 136.089816][ T5814] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.456984][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0 [ 136.464234][ T5814] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 136.473586][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.484395][ T5814] usb 2-1: config 0 descriptor?? [ 136.916294][ T5814] steelseries 0003:1038:1410.0003: unknown main item tag 0x3 [ 136.957228][ T5814] steelseries 0003:1038:1410.0003: No inputs registered, leaving [ 138.207632][ T5814] steelseries 0003:1038:1410.0003: hidraw0: USB HID v0.00 Joystick [HID 1038:1410] on usb-dummy_hcd.1-1/input0 [ 138.219817][ T5814] steelseries 0003:1038:1410.0003: implement() called with too large value 64 (n: 0)! (kworker/0:4) [ 138.329964][ T5814] usb 2-1: USB disconnect, device number 7 [ 138.366973][ T5814] ================================================================== [ 138.375561][ T5814] BUG: KASAN: slab-out-of-bounds in __lock_acquire+0x10c/0x7d80 [ 138.383222][ T5814] Read of size 8 at addr ffff88802f2dafd0 by task kworker/0:4/5814 [ 138.391133][ T5814] [ 138.393474][ T5814] CPU: 0 PID: 5814 Comm: kworker/0:4 Not tainted syzkaller #0 [ 138.400954][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.411030][ T5814] Workqueue: usb_hub_wq hub_event [ 138.416082][ T5814] Call Trace: [ 138.419376][ T5814] [ 138.422315][ T5814] dump_stack_lvl+0x18c/0x250 [ 138.427015][ T5814] ? __lock_acquire+0x7d80/0x7d80 [ 138.432075][ T5814] ? show_regs_print_info+0x20/0x20 [ 138.437301][ T5814] ? load_image+0x420/0x420 [ 138.441824][ T5814] ? __virt_addr_valid+0x10c/0x380 [ 138.446963][ T5814] ? __virt_addr_valid+0x10c/0x380 [ 138.452102][ T5814] ? __virt_addr_valid+0x10c/0x380 [ 138.457250][ T5814] print_report+0xa8/0x210 [ 138.461695][ T5814] ? __lock_acquire+0x10c/0x7d80 [ 138.466664][ T5814] kasan_report+0x117/0x150 [ 138.471195][ T5814] ? __lock_acquire+0x10c/0x7d80 [ 138.476174][ T5814] __lock_acquire+0x10c/0x7d80 [ 138.481024][ T5814] ? hid_destroy_device+0x6a/0x100 [ 138.486269][ T5814] ? verify_lock_unused+0x140/0x140 [ 138.491506][ T5814] ? ret_from_fork+0x48/0x80 [ 138.496140][ T5814] ? verify_lock_unused+0x140/0x140 [ 138.501373][ T5814] ? mark_lock+0x94/0x320 [ 138.505732][ T5814] ? verify_lock_unused+0x140/0x140 [ 138.510966][ T5814] lock_acquire+0x19e/0x420 [ 138.515529][ T5814] ? steelseries_remove+0x84/0x180 [ 138.520674][ T5814] ? mark_lock+0x94/0x320 [ 138.525009][ T5814] ? read_lock_is_recursive+0x20/0x20 [ 138.530380][ T5814] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 138.536361][ T5814] _raw_spin_lock_irqsave+0xb4/0x100 [ 138.541645][ T5814] ? steelseries_remove+0x84/0x180 [ 138.546757][ T5814] ? _raw_spin_lock+0x40/0x40 [ 138.551615][ T5814] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 138.557504][ T5814] ? _raw_spin_unlock+0x40/0x40 [ 138.562351][ T5814] ? steelseries_probe+0xe00/0xe00 [ 138.567468][ T5814] steelseries_remove+0x84/0x180 [ 138.572409][ T5814] hid_device_remove+0x222/0x360 [ 138.577344][ T5814] ? hid_device_probe+0x5a0/0x5a0 [ 138.582388][ T5814] device_release_driver_internal+0x408/0x6f0 [ 138.588456][ T5814] bus_remove_device+0x43b/0x520 [ 138.593399][ T5814] ? bus_probe_device+0x260/0x260 [ 138.598420][ T5814] ? up_write+0x1be/0x410 [ 138.602746][ T5814] ? kernfs_remove_by_name_ns+0x117/0x150 [ 138.608465][ T5814] device_del+0x51f/0x910 [ 138.612792][ T5814] ? usbhid_disconnect+0x97/0xc0 [ 138.617725][ T5814] ? kill_device+0x160/0x160 [ 138.622310][ T5814] ? _raw_spin_lock_irq+0xbb/0xf0 [ 138.627327][ T5814] hid_destroy_device+0x6a/0x100 [ 138.632265][ T5814] usbhid_disconnect+0x9f/0xc0 [ 138.637027][ T5814] usb_unbind_interface+0x207/0x870 [ 138.642232][ T5814] ? kernfs_remove_by_name_ns+0x117/0x150 [ 138.647952][ T5814] ? usb_driver_release_interface+0x1c0/0x1c0 [ 138.654015][ T5814] device_release_driver_internal+0x458/0x6f0 [ 138.660082][ T5814] bus_remove_device+0x43b/0x520 [ 138.665192][ T5814] ? bus_probe_device+0x260/0x260 [ 138.670225][ T5814] ? up_write+0x1be/0x410 [ 138.674546][ T5814] ? kernfs_remove_by_name_ns+0x117/0x150 [ 138.680266][ T5814] device_del+0x51f/0x910 [ 138.684590][ T5814] ? device_release+0xbc/0x1e0 [ 138.689358][ T5814] ? kill_device+0x160/0x160 [ 138.694030][ T5814] ? kobject_put+0x421/0x450 [ 138.698623][ T5814] usb_disable_device+0x3ee/0x8a0 [ 138.703651][ T5814] usb_disconnect+0x340/0x8a0 [ 138.708323][ T5814] hub_event+0x1d69/0x4a80 [ 138.712753][ T5814] ? hub_post_resume+0x120/0x120 [ 138.717683][ T5814] ? read_lock_is_recursive+0x20/0x20 [ 138.723060][ T5814] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.728253][ T5814] ? process_scheduled_works+0x975/0x1600 [ 138.733970][ T5814] ? process_scheduled_works+0x975/0x1600 [ 138.739688][ T5814] process_scheduled_works+0xa60/0x1600 [ 138.745246][ T5814] ? worker_attach_to_pool+0x370/0x370 [ 138.750703][ T5814] ? assign_work+0x3cc/0x5d0 [ 138.755290][ T5814] worker_thread+0xa5e/0xfe0 [ 138.759972][ T5814] ? _raw_spin_unlock+0x40/0x40 [ 138.764945][ T5814] ? __kthread_parkme+0x71/0x1c0 [ 138.769881][ T5814] kthread+0x2fa/0x390 [ 138.773946][ T5814] ? pr_cont_work+0x550/0x550 [ 138.778620][ T5814] ? kthread_blkcg+0xd0/0xd0 [ 138.783208][ T5814] ret_from_fork+0x48/0x80 [ 138.787624][ T5814] ? kthread_blkcg+0xd0/0xd0 [ 138.792214][ T5814] ret_from_fork_asm+0x11/0x20 [ 138.796982][ T5814] [ 138.799995][ T5814] [ 138.802306][ T5814] Allocated by task 5814: [ 138.806642][ T5814] kasan_set_track+0x4e/0x70 [ 138.811240][ T5814] __kasan_kmalloc+0x8f/0xa0 [ 138.815861][ T5814] steelseries_probe+0x1e1/0xe00 [ 138.820808][ T5814] hid_device_probe+0x290/0x5a0 [ 138.825664][ T5814] really_probe+0x247/0xae0 [ 138.830190][ T5814] __driver_probe_device+0x1f5/0x390 [ 138.835475][ T5814] driver_probe_device+0x4f/0x420 [ 138.840490][ T5814] __device_attach_driver+0x2ca/0x510 [ 138.845852][ T5814] bus_for_each_drv+0x252/0x2e0 [ 138.850696][ T5814] __device_attach+0x2c1/0x420 [ 138.855459][ T5814] bus_probe_device+0x180/0x260 [ 138.860303][ T5814] device_add+0x87c/0xc40 [ 138.864625][ T5814] hid_add_device+0x365/0x500 [ 138.869294][ T5814] usbhid_probe+0xe43/0x1260 [ 138.873878][ T5814] usb_probe_interface+0x5c2/0xaf0 [ 138.878994][ T5814] really_probe+0x247/0xae0 [ 138.884987][ T5814] __driver_probe_device+0x1f5/0x390 [ 138.890833][ T5814] driver_probe_device+0x4f/0x420 [ 138.895849][ T5814] __device_attach_driver+0x2ca/0x510 [ 138.901298][ T5814] bus_for_each_drv+0x252/0x2e0 [ 138.906144][ T5814] __device_attach+0x2c1/0x420 [ 138.910909][ T5814] bus_probe_device+0x180/0x260 [ 138.915754][ T5814] device_add+0x87c/0xc40 [ 138.920081][ T5814] usb_set_configuration+0x1ad0/0x2150 [ 138.925707][ T5814] usb_generic_driver_probe+0x8d/0x150 [ 138.931510][ T5814] usb_probe_device+0x12a/0x260 [ 138.936445][ T5814] really_probe+0x247/0xae0 [ 138.940944][ T5814] __driver_probe_device+0x1f5/0x390 [ 138.946224][ T5814] driver_probe_device+0x4f/0x420 [ 138.951248][ T5814] __device_attach_driver+0x2ca/0x510 [ 138.956608][ T5814] bus_for_each_drv+0x252/0x2e0 [ 138.961455][ T5814] __device_attach+0x2c1/0x420 [ 138.966216][ T5814] bus_probe_device+0x180/0x260 [ 138.971060][ T5814] device_add+0x87c/0xc40 [ 138.975470][ T5814] usb_new_device+0x995/0x1550 [ 138.980223][ T5814] hub_event+0x29d5/0x4a80 [ 138.984651][ T5814] process_scheduled_works+0xa60/0x1600 [ 138.990493][ T5814] worker_thread+0xa5e/0xfe0 [ 138.995092][ T5814] kthread+0x2fa/0x390 [ 138.999247][ T5814] ret_from_fork+0x48/0x80 [ 139.003692][ T5814] ret_from_fork_asm+0x11/0x20 [ 139.008467][ T5814] [ 139.010779][ T5814] Last potentially related work creation: [ 139.016481][ T5814] kasan_save_stack+0x3e/0x60 [ 139.021196][ T5814] __kasan_record_aux_stack+0xaf/0xc0 [ 139.026565][ T5814] insert_work+0x3d/0x310 [ 139.031252][ T5814] __queue_work+0xcf4/0xfd0 [ 139.036058][ T5814] queue_work_on+0x128/0x1f0 [ 139.040649][ T5814] inet6addr_event+0xa0/0xd0 [ 139.045257][ T5814] notifier_call_chain+0x18f/0x380 [ 139.050819][ T5814] atomic_notifier_call_chain+0xda/0x180 [ 139.056452][ T5814] ipv6_add_addr+0xde2/0x10d0 [ 139.061822][ T5814] addrconf_add_linklocal+0x273/0x6d0 [ 139.067190][ T5814] addrconf_addr_gen+0x50e/0x620 [ 139.072144][ T5814] addrconf_init_auto_addrs+0x720/0xac0 [ 139.077693][ T5814] addrconf_notify+0xb62/0x1010 [ 139.082538][ T5814] notifier_call_chain+0x18f/0x380 [ 139.088090][ T5814] netdev_state_change+0xe4/0x170 [ 139.093194][ T5814] linkwatch_do_dev+0x10d/0x160 [ 139.098038][ T5814] __linkwatch_run_queue+0x417/0x670 [ 139.103410][ T5814] linkwatch_event+0x4c/0x60 [ 139.108013][ T5814] process_scheduled_works+0xa60/0x1600 [ 139.113598][ T5814] worker_thread+0xa5e/0xfe0 [ 139.118639][ T5814] kthread+0x2fa/0x390 [ 139.122723][ T5814] ret_from_fork+0x48/0x80 [ 139.127236][ T5814] ret_from_fork_asm+0x11/0x20 [ 139.132003][ T5814] [ 139.134403][ T5814] Second to last potentially related work creation: [ 139.141040][ T5814] kasan_save_stack+0x3e/0x60 [ 139.145750][ T5814] __kasan_record_aux_stack+0xaf/0xc0 [ 139.151180][ T5814] insert_work+0x3d/0x310 [ 139.155516][ T5814] __queue_work+0xbfd/0xfd0 [ 139.160015][ T5814] queue_work_on+0x128/0x1f0 [ 139.164597][ T5814] call_usermodehelper_exec+0x283/0x4a0 [ 139.170149][ T5814] kobject_uevent_env+0x684/0x890 [ 139.175172][ T5814] kernel_add_sysfs_param+0xfb/0x120 [ 139.180456][ T5814] param_sysfs_builtin+0x1fd/0x2b0 [ 139.185583][ T5814] param_sysfs_builtin_init+0x2d/0x30 [ 139.190952][ T5814] do_one_initcall+0x242/0x790 [ 139.195712][ T5814] do_initcall_level+0x13d/0x1f0 [ 139.200644][ T5814] do_initcalls+0x69/0xd0 [ 139.204973][ T5814] kernel_init_freeable+0x3d9/0x560 [ 139.210170][ T5814] kernel_init+0x1d/0x1c0 [ 139.214494][ T5814] ret_from_fork+0x48/0x80 [ 139.218907][ T5814] ret_from_fork_asm+0x11/0x20 [ 139.223668][ T5814] [ 139.225978][ T5814] The buggy address belongs to the object at ffff88802f2daf00 [ 139.225978][ T5814] which belongs to the cache kmalloc-192 of size 192 [ 139.240040][ T5814] The buggy address is located 72 bytes to the right of [ 139.240040][ T5814] allocated 136-byte region [ffff88802f2daf00, ffff88802f2daf88) [ 139.254618][ T5814] [ 139.256934][ T5814] The buggy address belongs to the physical page: [ 139.263693][ T5814] page:ffffea0000bcb680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f2da [ 139.274187][ T5814] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 139.281724][ T5814] page_type: 0xffffffff() [ 139.286063][ T5814] raw: 00fff00000000800 ffff888017c41a00 dead000000000100 dead000000000122 [ 139.294653][ T5814] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 139.303336][ T5814] page dumped because: kasan: bad access detected [ 139.309755][ T5814] page_owner tracks the page as allocated [ 139.315461][ T5814] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 23131489110, free_ts 23127625364 [ 139.332997][ T5814] post_alloc_hook+0x1c1/0x200 [ 139.337772][ T5814] get_page_from_freelist+0x2181/0x22a0 [ 139.343465][ T5814] __alloc_pages+0x1f0/0x460 [ 139.348050][ T5814] alloc_page_interleave+0x24/0x1e0 [ 139.353241][ T5814] alloc_slab_page+0x5d/0x180 [ 139.357997][ T5814] new_slab+0x87/0x2d0 [ 139.362341][ T5814] ___slab_alloc+0xc5c/0x12f0 [ 139.367050][ T5814] __kmem_cache_alloc_node+0x11f/0x250 [ 139.372618][ T5814] kmalloc_trace+0x2a/0xe0 [ 139.377218][ T5814] call_usermodehelper_setup+0x8e/0x260 [ 139.382760][ T5814] kobject_uevent_env+0x661/0x890 [ 139.387786][ T5814] kernel_add_sysfs_param+0xfb/0x120 [ 139.393073][ T5814] param_sysfs_builtin+0x1fd/0x2b0 [ 139.398184][ T5814] param_sysfs_builtin_init+0x2d/0x30 [ 139.403551][ T5814] do_one_initcall+0x242/0x790 [ 139.408311][ T5814] do_initcall_level+0x13d/0x1f0 [ 139.413244][ T5814] page last free stack trace: [ 139.417904][ T5814] free_unref_page_prepare+0x7d7/0x8f0 [ 139.423405][ T5814] free_unref_page+0x32/0x2e0 [ 139.428073][ T5814] vfree+0x1a7/0x340 [ 139.432012][ T5814] delayed_vfree_work+0x55/0x80 [ 139.436876][ T5814] process_scheduled_works+0xa60/0x1600 [ 139.442427][ T5814] worker_thread+0xa5e/0xfe0 [ 139.447017][ T5814] kthread+0x2fa/0x390 [ 139.451090][ T5814] ret_from_fork+0x48/0x80 [ 139.455508][ T5814] ret_from_fork_asm+0x11/0x20 [ 139.460276][ T5814] [ 139.462591][ T5814] Memory state around the buggy address: [ 139.468216][ T5814] ffff88802f2dae80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 139.476289][ T5814] ffff88802f2daf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 139.484343][ T5814] >ffff88802f2daf80: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.492395][ T5814] ^ [ 139.499074][ T5814] ffff88802f2db000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 139.507134][ T5814] ffff88802f2db080: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 [ 139.515186][ T5814] ================================================================== [ 139.523282][ T5814] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 139.530589][ T5814] CPU: 0 PID: 5814 Comm: kworker/0:4 Not tainted syzkaller #0 [ 139.538046][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.548096][ T5814] Workqueue: usb_hub_wq hub_event [ 139.553121][ T5814] Call Trace: [ 139.556390][ T5814] [ 139.559316][ T5814] dump_stack_lvl+0x18c/0x250 [ 139.563992][ T5814] ? show_regs_print_info+0x20/0x20 [ 139.569272][ T5814] ? load_image+0x420/0x420 [ 139.573767][ T5814] panic+0x2ca/0x720 [ 139.577668][ T5814] ? bpf_jit_dump+0xd0/0xd0 [ 139.582171][ T5814] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 139.588152][ T5814] ? _raw_spin_unlock+0x40/0x40 [ 139.592995][ T5814] ? print_memory_metadata+0x314/0x400 [ 139.598476][ T5814] ? __lock_acquire+0x10c/0x7d80 [ 139.603414][ T5814] check_panic_on_warn+0x84/0xa0 [ 139.608348][ T5814] ? __lock_acquire+0x10c/0x7d80 [ 139.613305][ T5814] end_report+0x6f/0x130 [ 139.617566][ T5814] kasan_report+0x128/0x150 [ 139.622081][ T5814] ? __lock_acquire+0x10c/0x7d80 [ 139.627033][ T5814] __lock_acquire+0x10c/0x7d80 [ 139.631801][ T5814] ? hid_destroy_device+0x6a/0x100 [ 139.636913][ T5814] ? verify_lock_unused+0x140/0x140 [ 139.642105][ T5814] ? ret_from_fork+0x48/0x80 [ 139.646693][ T5814] ? verify_lock_unused+0x140/0x140 [ 139.651889][ T5814] ? mark_lock+0x94/0x320 [ 139.656213][ T5814] ? verify_lock_unused+0x140/0x140 [ 139.661420][ T5814] lock_acquire+0x19e/0x420 [ 139.665921][ T5814] ? steelseries_remove+0x84/0x180 [ 139.671050][ T5814] ? mark_lock+0x94/0x320 [ 139.675397][ T5814] ? read_lock_is_recursive+0x20/0x20 [ 139.680778][ T5814] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 139.686759][ T5814] _raw_spin_lock_irqsave+0xb4/0x100 [ 139.692041][ T5814] ? steelseries_remove+0x84/0x180 [ 139.697152][ T5814] ? _raw_spin_lock+0x40/0x40 [ 139.701846][ T5814] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 139.707765][ T5814] ? _raw_spin_unlock+0x40/0x40 [ 139.712622][ T5814] ? steelseries_probe+0xe00/0xe00 [ 139.717739][ T5814] steelseries_remove+0x84/0x180 [ 139.722682][ T5814] hid_device_remove+0x222/0x360 [ 139.727630][ T5814] ? hid_device_probe+0x5a0/0x5a0 [ 139.732682][ T5814] device_release_driver_internal+0x408/0x6f0 [ 139.738755][ T5814] bus_remove_device+0x43b/0x520 [ 139.743690][ T5814] ? bus_probe_device+0x260/0x260 [ 139.748710][ T5814] ? up_write+0x1be/0x410 [ 139.753037][ T5814] ? kernfs_remove_by_name_ns+0x117/0x150 [ 139.758758][ T5814] device_del+0x51f/0x910 [ 139.763087][ T5814] ? usbhid_disconnect+0x97/0xc0 [ 139.768022][ T5814] ? kill_device+0x160/0x160 [ 139.772610][ T5814] ? _raw_spin_lock_irq+0xbb/0xf0 [ 139.777653][ T5814] hid_destroy_device+0x6a/0x100 [ 139.782592][ T5814] usbhid_disconnect+0x9f/0xc0 [ 139.787356][ T5814] usb_unbind_interface+0x207/0x870 [ 139.792565][ T5814] ? kernfs_remove_by_name_ns+0x117/0x150 [ 139.798287][ T5814] ? usb_driver_release_interface+0x1c0/0x1c0 [ 139.804367][ T5814] device_release_driver_internal+0x458/0x6f0 [ 139.810438][ T5814] bus_remove_device+0x43b/0x520 [ 139.815376][ T5814] ? bus_probe_device+0x260/0x260 [ 139.820495][ T5814] ? up_write+0x1be/0x410 [ 139.824824][ T5814] ? kernfs_remove_by_name_ns+0x117/0x150 [ 139.830984][ T5814] device_del+0x51f/0x910 [ 139.835338][ T5814] ? device_release+0xbc/0x1e0 [ 139.840119][ T5814] ? kill_device+0x160/0x160 [ 139.844715][ T5814] ? kobject_put+0x421/0x450 [ 139.849312][ T5814] usb_disable_device+0x3ee/0x8a0 [ 139.854343][ T5814] usb_disconnect+0x340/0x8a0 [ 139.859126][ T5814] hub_event+0x1d69/0x4a80 [ 139.863554][ T5814] ? hub_post_resume+0x120/0x120 [ 139.868489][ T5814] ? read_lock_is_recursive+0x20/0x20 [ 139.873884][ T5814] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.879098][ T5814] ? process_scheduled_works+0x975/0x1600 [ 139.884854][ T5814] ? process_scheduled_works+0x975/0x1600 [ 139.890575][ T5814] process_scheduled_works+0xa60/0x1600 [ 139.896129][ T5814] ? worker_attach_to_pool+0x370/0x370 [ 139.901589][ T5814] ? assign_work+0x3cc/0x5d0 [ 139.906178][ T5814] worker_thread+0xa5e/0xfe0 [ 139.910765][ T5814] ? _raw_spin_unlock+0x40/0x40 [ 139.915608][ T5814] ? __kthread_parkme+0x71/0x1c0 [ 139.920540][ T5814] kthread+0x2fa/0x390 [ 139.924610][ T5814] ? pr_cont_work+0x550/0x550 [ 139.929290][ T5814] ? kthread_blkcg+0xd0/0xd0 [ 139.933888][ T5814] ret_from_fork+0x48/0x80 [ 139.938304][ T5814] ? kthread_blkcg+0xd0/0xd0 [ 139.943060][ T5814] ret_from_fork_asm+0x11/0x20 [ 139.947827][ T5814] [ 139.951102][ T5814] Kernel Offset: disabled [ 139.955425][ T5814] Rebooting in 86400 seconds..